Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33332e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e33332e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          WwuN9lIU9f7F3lciRkFqk6bTqvKKEltI10W8sUn4jj8=
Subject key identifier:   03:9D:FC:50:DB:03:0F:61:6E:63:4A:DD:CF:7F:2B:CB:9F:B3:4F:72
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       543EC037B8F2FD0B16FCD4A6046C0707AC05FCDF
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33332e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:27:14 +0000
ROA not before:           Thu 18 Apr 2024 19:22:14 +0000
ROA not after:            Thu 17 Apr 2025 19:27:14 +0000
asID:                     53016
IP address blocks:        177.74.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3e:c0:37:b8:f2:fd:0b:16:fc:d4:a6:04:6c:07:07:ac:05:fc:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:22:14 2024 GMT
            Not After : Apr 17 19:27:14 2025 GMT
        Subject: CN=039DFC50DB030F616E634ADDCF7F2BCB9FB34F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:47:a2:77:1a:60:a1:80:37:76:e2:b8:b1:
                    7b:28:db:21:06:d2:89:ca:5a:1b:39:cd:09:9b:6c:
                    eb:1b:a5:c3:47:58:ef:ce:25:90:f5:10:cf:ab:14:
                    14:1d:82:67:7d:4a:0c:5d:f8:9d:e9:01:fd:12:5c:
                    39:7b:73:1e:d6:f3:1f:7a:e9:74:7f:1f:58:98:b6:
                    66:c0:80:cf:8c:a8:ab:45:ba:de:4d:d5:25:95:72:
                    1b:c7:28:ae:c1:0d:70:e2:b9:0d:55:5d:f0:d5:6d:
                    93:a3:da:c0:45:63:e8:52:80:c5:5b:80:df:73:0c:
                    ac:47:39:93:9e:d5:02:f9:f2:fd:bb:52:89:f0:10:
                    71:52:d4:ac:25:dc:d1:e7:fc:c9:81:9d:8e:03:be:
                    83:30:7b:cf:88:32:9f:6d:f9:25:87:fa:32:e8:3c:
                    be:92:c3:5d:8c:f1:54:20:5c:dd:ae:74:30:35:79:
                    7a:09:ad:dc:02:f6:36:d8:d4:e7:01:d1:d2:74:5f:
                    eb:68:81:63:74:ce:6e:da:68:d2:cb:e6:54:1f:c8:
                    ca:15:2e:15:fe:cb:68:73:0e:03:21:cb:40:0f:cf:
                    9f:47:ec:7f:e7:95:68:4c:39:24:d5:4c:cc:c6:59:
                    01:a7:c8:3c:0f:c4:4d:b3:6b:65:05:50:ed:89:eb:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:FC:50:DB:03:0F:61:6E:63:4A:DD:CF:7F:2B:CB:9F:B3:4F:72
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33332e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:4b:31:c1:90:cc:e9:b8:f6:a2:f7:b1:f4:70:b1:c9:8b:
         34:76:47:07:e2:49:87:bb:19:34:60:2a:47:68:f0:a8:35:94:
         97:cc:63:77:80:ab:fa:28:11:0c:dc:fa:ec:10:f8:9a:d2:93:
         13:ac:62:80:f7:33:c8:06:5d:05:84:ae:93:19:11:ce:5b:5d:
         fb:37:c0:60:76:e7:4f:a5:e9:c0:c5:3e:ca:74:9d:0b:af:25:
         a6:33:2a:bb:a7:3e:3c:06:bf:19:3a:c2:fb:5a:25:b5:d4:6f:
         09:71:5a:61:95:21:64:72:c9:ae:f0:94:19:4e:f9:34:aa:a0:
         28:34:76:ce:7b:14:63:dd:b7:bf:5a:56:c6:91:4d:74:05:04:
         e9:a5:4f:be:8c:f9:20:db:91:93:0d:b5:d6:23:8a:4f:19:7f:
         a5:22:92:e8:d9:8f:3f:5d:4c:3d:1f:d7:d1:13:37:7f:3d:26:
         19:2e:35:dd:2b:db:87:8b:6a:49:bc:cf:3f:e0:27:f6:9d:f2:
         e2:c2:b6:97:5c:4e:7f:ef:5d:3e:ed:cd:b6:31:e5:47:16:9b:
         dc:9b:6e:02:63:84:5d:ba:85:e0:3f:f6:3c:47:cd:d9:43:bc:
         b5:ff:a6:e2:7c:bc:a6:da:cd:ed:88:be:9d:5b:c7:7c:00:83:
         a2:af:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:29 2024 by rpki-client on console-ams.rpki-client.org