Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e342e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          uvOpvtqVEJc7Ba8wl2WazwMZRyDqXkOOyHMz4eUt6GU=
Subject key identifier:   9F:E3:59:3B:4F:98:30:19:45:34:5F:94:96:0D:4B:A6:54:06:53:BE
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       4B75392C055EEFBF61886C2A55C460C422B7490A
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 20 Mar 2025 19:40:27 +0000
ROA not before:           Thu 20 Mar 2025 19:35:27 +0000
ROA not after:            Thu 19 Mar 2026 19:40:27 +0000
asID:                     53016
IP address blocks:        177.74.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 08:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:39:2c:05:5e:ef:bf:61:88:6c:2a:55:c4:60:c4:22:b7:49:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Mar 20 19:35:27 2025 GMT
            Not After : Mar 19 19:40:27 2026 GMT
        Subject: CN=9FE3593B4F98301945345F94960D4BA6540653BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:84:03:80:1f:02:b3:8f:65:c7:f0:18:14:
                    19:38:4f:a6:08:50:4e:05:9f:3d:8c:2a:31:8b:9f:
                    8e:38:41:f6:cc:a5:e6:0f:f2:75:ef:e2:f6:dd:b3:
                    74:67:43:81:28:85:ce:f3:09:72:8d:87:4e:6c:d5:
                    49:ab:95:88:d0:7c:34:9e:d1:a7:49:95:22:cb:fc:
                    58:93:96:0b:56:f7:f2:ce:32:63:02:9f:b8:9b:25:
                    8a:f7:f6:61:16:45:39:30:5d:8d:e9:53:7d:59:84:
                    96:e0:a0:21:04:95:3c:86:f4:a8:82:a8:64:aa:50:
                    19:66:fd:32:05:58:9d:46:44:68:b1:8c:c7:2e:29:
                    d3:8a:74:06:5a:05:db:91:b1:a4:c6:5a:bf:10:04:
                    78:e6:12:2d:ab:af:16:86:d3:30:28:5e:41:99:26:
                    a8:5d:64:84:16:3f:23:bc:fd:15:01:65:80:de:f9:
                    dc:c6:cb:64:92:07:6d:e6:7c:36:c9:65:dd:40:b2:
                    a8:ed:ac:25:5a:62:58:f9:5b:c5:16:38:a8:79:58:
                    66:75:af:5f:9d:09:b4:69:9f:dc:15:a9:60:29:cd:
                    2a:d6:8d:d3:c9:7b:16:18:9c:33:24:e5:d1:da:21:
                    98:d6:ab:5b:f6:78:7b:9e:ba:6e:e7:93:0c:b3:42:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:59:3B:4F:98:30:19:45:34:5F:94:96:0D:4B:A6:54:06:53:BE
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e342e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:18:22:a9:5c:71:7c:68:26:e9:55:61:f9:ad:90:93:ca:
         33:ba:14:00:9c:6e:45:2f:3b:a4:8e:e5:96:e4:d3:46:21:16:
         ad:77:f0:fe:c0:7e:0d:b5:2f:10:eb:b2:80:d5:3b:45:7b:d3:
         5e:d6:65:e0:8e:ff:7c:af:37:0a:e0:cd:c8:16:9a:bc:5c:3a:
         25:c2:43:f5:0a:45:95:da:3d:70:86:b0:54:eb:34:d4:f8:aa:
         75:f2:85:6d:b0:54:ad:a7:1a:cf:81:35:87:71:7d:3f:92:de:
         63:a6:4f:a9:ef:7c:9e:51:14:6a:12:1b:d2:26:fa:d7:a7:7d:
         66:09:d5:60:59:8e:89:44:96:68:9f:d5:35:ae:00:df:3f:69:
         8f:8e:4a:e8:35:3f:96:0e:ae:6b:cd:5b:48:c3:f4:56:00:78:
         0a:d5:a3:af:6b:4c:97:32:3a:bb:ac:74:ac:b5:21:34:73:0b:
         20:72:cb:0f:fa:8a:fe:8c:aa:e7:61:5a:4f:04:5e:cf:b6:80:
         57:48:50:a8:dd:f9:02:22:fc:0b:ab:2f:35:d1:aa:11:64:ed:
         86:cc:be:60:6f:cb:b0:07:b7:56:7b:64:08:68:94:e6:39:a3:
         e0:6b:19:9a:b4:2a:ae:87:45:10:d2:21:f4:5f:ba:0b:59:62:
         f8:09:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:35 2025 by rpki-client