Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e342e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          +4gGobWZA5GbAHjKb/QoFpDewf0ig8PP5/zMNT64k4Q=
Subject key identifier:   75:CD:27:29:54:06:91:95:89:67:80:38:37:9B:A9:E1:11:90:5E:F5
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       71D938BE542F7392E4D1126E0BCE759A2EC4A6AD
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:26:12 +0000
ROA not before:           Thu 18 Apr 2024 19:21:12 +0000
ROA not after:            Thu 17 Apr 2025 19:26:12 +0000
asID:                     53016
IP address blocks:        177.74.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:38:be:54:2f:73:92:e4:d1:12:6e:0b:ce:75:9a:2e:c4:a6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:21:12 2024 GMT
            Not After : Apr 17 19:26:12 2025 GMT
        Subject: CN=75CD27295406919589678038379BA9E111905EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:b3:d7:f7:8a:e6:e9:5e:73:2f:63:e3:c0:
                    e6:eb:34:1a:61:9a:b2:c1:33:96:57:da:71:2f:ef:
                    25:fa:44:bf:d1:a9:5c:ef:56:0e:ca:1a:2b:8e:00:
                    92:4d:43:ac:37:ea:cd:01:0f:3a:a2:0a:f0:55:01:
                    66:43:ff:4e:90:91:98:e8:46:3f:33:65:15:73:c5:
                    32:5c:55:d6:41:0b:a0:be:77:14:15:7c:87:dd:8f:
                    27:48:3a:b4:a0:b2:7a:62:7a:8f:61:37:f2:0d:19:
                    c0:fd:ff:aa:12:3e:9f:68:73:04:95:1d:af:ef:75:
                    c7:83:c4:50:97:c1:47:9b:a9:80:a3:86:48:a7:6d:
                    45:11:60:97:15:0c:cf:8c:31:68:8b:d4:64:0c:38:
                    77:d2:32:e3:7c:98:a4:c4:a8:d8:0e:f1:a6:a3:2d:
                    a8:a3:3e:7a:ec:06:8c:dd:c1:99:4e:f2:d5:82:f7:
                    10:fa:4c:d7:2a:5c:61:de:bf:c4:51:57:15:ad:6e:
                    8b:6b:28:f5:47:3b:3e:52:3d:da:85:7a:00:d4:3c:
                    fb:ae:8f:c7:5a:59:dc:44:5c:07:50:99:bc:c2:ac:
                    6b:37:54:b0:e5:24:99:b4:c7:b0:39:63:65:6d:9b:
                    3a:2e:dc:d9:fa:8f:08:ac:a0:dc:62:24:e6:90:d8:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:27:29:54:06:91:95:89:67:80:38:37:9B:A9:E1:11:90:5E:F5
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:60:71:ce:37:4e:ce:58:52:53:12:61:a1:cf:8b:dd:39:
         49:e5:e0:2d:ff:9b:eb:dd:53:1e:db:ca:80:b2:72:07:b0:e7:
         94:7d:d9:f1:72:c1:9d:93:06:96:ae:0d:02:80:9d:76:04:6b:
         3e:57:5d:47:c7:f7:89:43:02:22:e0:9f:db:f8:b0:f8:93:31:
         37:aa:82:8a:b7:5b:ca:ad:05:8c:70:38:c4:6f:58:2a:3a:a9:
         38:98:96:c2:5e:66:4a:de:01:1b:01:e4:ea:f8:c7:82:3a:4a:
         cc:fc:8f:3c:b9:05:69:61:0c:a7:46:28:fe:5f:e1:d9:f5:26:
         d7:b5:28:3f:4e:8f:1b:a0:b0:db:94:30:80:fc:16:03:4f:96:
         5a:41:5a:87:63:fa:ed:fc:80:f3:7a:42:1d:37:ff:01:d3:47:
         a6:56:0e:2f:4d:4f:fd:dc:a6:45:4c:0f:b0:0d:fc:a0:01:f8:
         cc:36:fa:b5:e2:14:f3:3b:4b:ce:da:4b:48:fa:bc:41:23:da:
         50:c2:5e:03:3a:5d:c8:29:63:ef:7a:b4:71:9e:b8:25:0a:37:
         e8:ee:0a:3a:5a:7b:5b:2f:4c:d3:b8:2e:a7:a8:93:5b:a1:9b:
         f0:30:fa:51:a3:7f:e4:b4:e1:43:01:c2:cf:cc:13:a9:0e:25:
         8b:a3:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:48 2024 by rpki-client on console-fra.rpki-client.org