Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32342e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e32342e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          2sh0QVM6vkVZUst1qehO3/+CstpH7Kyv+Yn1kLQ1G64=
Subject key identifier:   33:40:D9:E9:B9:2E:D6:3E:0E:A4:43:63:1B:EB:18:17:42:64:5F:42
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       0C634A8FDE95A9D2BD8E13EC120E515264507249
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32342e302f32342d3234203d3e203533303136.roa
Signing time:             Tue 17 Dec 2024 13:10:00 +0000
ROA not before:           Tue 17 Dec 2024 13:05:00 +0000
ROA not after:            Tue 16 Dec 2025 13:10:00 +0000
asID:                     53016
IP address blocks:        177.74.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:4a:8f:de:95:a9:d2:bd:8e:13:ec:12:0e:51:52:64:50:72:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Dec 17 13:05:00 2024 GMT
            Not After : Dec 16 13:10:00 2025 GMT
        Subject: CN=3340D9E9B92ED63E0EA443631BEB181742645F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:11:f4:c8:b1:74:ca:8a:39:a3:16:e1:c1:
                    ee:ce:09:64:d0:d0:75:55:5d:3f:df:25:70:18:17:
                    81:d1:71:b5:a4:eb:51:bf:00:5b:1c:d5:90:be:c9:
                    08:ff:34:07:8b:b3:39:58:58:32:45:e1:46:2e:fa:
                    32:dc:f7:27:f1:b8:ee:bb:69:a0:81:78:51:9a:7a:
                    21:3d:49:17:45:be:bb:c7:ad:03:7a:55:7d:0b:4a:
                    de:3f:58:27:91:68:5f:75:17:0d:a8:b1:82:91:45:
                    59:41:97:29:96:bf:08:9a:2b:25:fa:40:79:58:b4:
                    af:ee:6e:1c:3c:08:65:a2:1c:51:f9:48:3a:ec:82:
                    f6:8d:d1:04:1e:3d:95:67:92:41:a7:6e:bb:44:e8:
                    35:d1:95:48:f0:93:69:d4:73:21:ca:ff:ce:cc:01:
                    89:b8:c8:43:57:7b:b5:b5:29:67:aa:1f:04:6e:2c:
                    94:f1:4d:0e:f7:55:b6:c8:37:16:80:3d:a5:c8:f3:
                    5b:bf:e2:b7:38:a4:61:8c:0f:7e:ab:17:28:7b:ff:
                    bb:0e:20:ef:9e:e3:30:8b:d8:10:32:40:72:1f:34:
                    fb:73:5a:15:d0:49:e6:61:65:83:76:d0:e3:e6:a4:
                    a7:c3:37:41:51:f2:5e:a2:15:d1:d8:bf:b2:48:62:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:40:D9:E9:B9:2E:D6:3E:0E:A4:43:63:1B:EB:18:17:42:64:5F:42
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e32342e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:f5:a5:7c:69:dd:10:20:ba:a6:b2:73:64:b9:39:0b:bb:
         77:11:30:c4:c9:bf:65:e7:79:25:36:91:be:74:6c:3a:10:62:
         aa:33:04:fc:57:10:98:80:5d:bc:b7:fe:9c:ea:2a:67:91:22:
         cc:6e:82:cc:22:ac:84:65:9c:f4:1b:ed:f7:e9:ea:ae:c7:6f:
         ad:ff:c7:af:15:af:af:37:14:3a:0f:f7:01:67:e6:fe:96:65:
         9b:e0:b9:d7:23:09:60:08:0c:62:07:2a:5d:bd:1e:de:4e:df:
         58:f9:2d:cf:39:33:87:d0:f8:13:cb:21:0e:7f:a7:25:fe:6d:
         9e:19:f0:09:66:53:bb:1f:55:41:af:03:ae:0e:0d:04:a0:a5:
         5d:1a:be:0a:3e:8c:1a:d4:5f:71:7a:93:7e:05:01:07:a3:d5:
         dd:57:e7:d8:88:90:31:f1:9a:27:f3:d4:a9:86:2a:c7:7e:ca:
         33:f1:6b:3f:70:45:e5:6b:ad:1f:de:89:8e:6a:2a:a8:7f:e1:
         ca:d1:c6:9f:e2:af:64:0d:de:e0:2e:d3:fa:9f:3a:99:d5:a3:
         74:0f:04:28:07:2d:3f:8e:f2:49:a5:1b:a2:de:88:af:30:43:
         22:a4:dc:c4:0e:35:77:ec:03:8f:a1:00:98:3e:a4:21:e5:87:
         c3:57:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:07:01 2025 by rpki-client