Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e33312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          BlIA15wnklmTM3zX7fUB4gw+48Zkh5e7Tu7bb3pp5yA=
Subject key identifier:   05:9A:BA:44:20:4A:52:18:65:A4:08:5F:A5:7E:3D:90:5E:24:7E:E6
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       1F9B68CAFF0C7CB91CFFB5607D73AEBBA90DED65
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:29:52 +0000
ROA not before:           Thu 18 Apr 2024 19:24:52 +0000
ROA not after:            Thu 17 Apr 2025 19:29:52 +0000
asID:                     53016
IP address blocks:        177.74.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9b:68:ca:ff:0c:7c:b9:1c:ff:b5:60:7d:73:ae:bb:a9:0d:ed:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:24:52 2024 GMT
            Not After : Apr 17 19:29:52 2025 GMT
        Subject: CN=059ABA44204A521865A4085FA57E3D905E247EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:d4:86:35:ee:91:1d:b2:ac:cd:e2:b1:00:
                    d6:ad:be:08:59:73:e4:38:6a:81:09:2f:86:12:af:
                    75:45:dc:a2:4b:d4:5e:44:8d:7a:ef:fb:44:6c:00:
                    fd:0b:9a:3b:ea:e4:d6:27:9f:69:3e:73:b1:0b:ba:
                    de:91:97:92:30:23:01:dd:f9:63:38:3d:46:d7:7a:
                    57:2a:f0:47:4d:33:83:a6:c4:10:6d:aa:f5:ca:58:
                    38:7e:7b:08:50:47:63:c3:2e:43:e0:69:92:98:9e:
                    9e:41:4a:66:ba:2b:3e:e6:67:20:a8:ba:45:ee:ff:
                    5d:49:7b:b3:e1:4a:7e:f9:6e:dd:1a:a5:f8:23:fe:
                    d2:44:99:91:df:f4:1d:00:6e:37:0b:c3:7a:1b:ff:
                    80:74:57:b5:e2:0e:d5:71:e7:fe:f2:63:e5:4a:5d:
                    48:72:11:a7:c6:d8:13:b3:78:2e:41:fd:de:8e:06:
                    b8:54:2c:66:a2:86:d6:cb:09:04:db:bc:84:f6:ca:
                    dc:81:bb:f6:29:21:5b:f0:1e:64:45:87:29:36:a6:
                    81:0a:ed:50:63:ae:95:05:0a:f0:81:a7:9e:ae:75:
                    f7:f8:e7:58:b0:af:f2:29:e7:c7:46:b2:1f:45:1d:
                    84:77:46:ca:3d:2e:d8:bc:3c:d5:c8:70:3b:08:c2:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9A:BA:44:20:4A:52:18:65:A4:08:5F:A5:7E:3D:90:5E:24:7E:E6
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:47:71:64:d6:ea:d6:e2:38:7e:af:98:84:c6:73:7f:3f:
         61:18:55:9f:7c:cb:92:b6:d3:91:67:40:f0:22:f3:84:9b:52:
         b3:e5:4b:e0:f8:39:f0:a0:b4:d4:c7:99:61:56:c1:4c:89:1f:
         f1:6a:2f:e5:38:a1:10:b9:1b:ad:62:27:1a:b3:fa:06:55:12:
         03:38:bb:12:be:d3:38:29:c3:6a:1f:e6:c9:60:b0:63:11:e3:
         f1:f2:ea:0b:6d:f6:71:c0:3c:f4:0c:ca:30:75:40:11:d2:78:
         58:16:48:20:e3:97:8c:24:d2:78:e7:e3:1b:fe:00:f8:fd:cc:
         57:bf:9a:50:9b:eb:fb:90:e9:b7:51:a0:9c:bf:a4:b5:bc:b3:
         73:53:56:15:1f:10:50:e4:6c:68:d5:d3:c1:1b:3b:d0:4a:2d:
         73:d3:12:ad:8c:1a:c2:86:6e:c8:c5:a5:cd:6f:11:34:01:21:
         3b:4b:30:b2:59:b5:e7:01:47:30:04:b4:b6:ea:e9:1b:31:8a:
         36:79:8f:ef:da:03:0e:e4:20:2f:d6:5a:94:72:4c:ed:b1:50:
         fe:2d:3a:d2:fc:50:1e:7a:2a:bf:9a:b2:bf:b2:95:8b:a1:df:
         93:f0:6b:9b:e6:9e:ba:c7:c9:5a:1f:00:7a:0c:97:19:50:98:
         51:e6:41:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:48 2024 by rpki-client on console-fra.rpki-client.org