Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e352e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e352e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          tT0PmuPaEnD0Z+hwQA7YsMNVWKlcEi3wv8cUkqrZGOQ=
Subject key identifier:   2E:3A:C0:D1:79:27:3B:85:91:7D:55:FA:77:50:32:FC:3D:E0:C9:16
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       203FC2281FA897401CBE229FD883DDC52D0D218A
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e352e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:26:16 +0000
ROA not before:           Thu 18 Apr 2024 19:21:16 +0000
ROA not after:            Thu 17 Apr 2025 19:26:16 +0000
asID:                     53016
IP address blocks:        177.74.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3f:c2:28:1f:a8:97:40:1c:be:22:9f:d8:83:dd:c5:2d:0d:21:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:21:16 2024 GMT
            Not After : Apr 17 19:26:16 2025 GMT
        Subject: CN=2E3AC0D179273B85917D55FA775032FC3DE0C916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:c3:c1:62:73:b7:30:f8:2b:2f:05:a2:00:
                    15:b2:04:cc:cc:04:07:f5:26:c8:93:d7:9c:62:e5:
                    2e:9e:55:69:9f:e2:6c:82:d6:ad:f7:47:e2:91:e0:
                    82:a6:c3:6e:2f:7a:da:d7:6f:fb:97:96:8a:1e:e5:
                    f7:08:de:23:32:0a:83:24:9c:ea:f1:67:37:d7:e9:
                    29:ba:58:8f:43:a0:46:d9:c5:2d:d6:08:e1:c6:ef:
                    95:8a:61:14:1b:9c:5d:a6:22:ff:21:68:a3:27:f6:
                    d9:35:5f:b2:22:11:02:4c:2d:b5:73:e6:21:f1:3c:
                    f0:98:ab:f9:fe:04:bf:00:96:ff:ff:c1:3e:c9:fa:
                    1d:a8:c6:a0:37:9a:02:d2:e7:1e:eb:a7:bf:fa:57:
                    c2:45:bc:4d:c8:db:ff:c5:18:b3:24:59:42:09:1e:
                    e8:9f:45:12:cf:97:9b:69:1a:ff:f7:93:85:da:ef:
                    a4:6c:5f:d5:fe:49:d5:5b:e6:ba:1c:6d:2c:59:3a:
                    fb:1e:d6:a2:d7:4c:c5:bf:08:ee:bc:05:84:3a:fb:
                    94:d2:5b:27:9c:4c:55:b3:9b:ed:b8:9e:68:a6:be:
                    48:55:da:2d:fa:bf:b7:e3:2d:10:44:6b:5e:70:22:
                    79:e0:a1:d9:79:4c:68:be:39:cf:18:a4:90:59:02:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:C0:D1:79:27:3B:85:91:7D:55:FA:77:50:32:FC:3D:E0:C9:16
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e352e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:87:49:96:52:a5:f8:66:9b:7d:8f:f9:ad:c5:19:8f:b6:
         60:76:fe:b8:14:06:bc:d3:09:d3:d9:46:e1:4f:a4:1f:fe:a6:
         ee:8d:2c:90:4a:8c:52:af:3b:74:94:b3:85:73:35:1c:5a:c2:
         48:06:de:cf:21:19:da:ce:07:01:cf:25:69:5d:d0:86:66:f0:
         25:83:b8:69:9c:5e:58:d1:b2:15:f3:ae:1a:25:af:e5:c5:b9:
         70:de:f3:92:42:89:49:73:1e:77:d4:36:08:69:d9:06:65:dd:
         61:ec:36:fa:9f:3b:8b:14:8f:c8:85:ad:47:c0:c7:2e:f1:f0:
         a1:b9:b7:7d:87:b6:61:c4:04:bb:d8:d7:d3:d1:11:2a:7c:37:
         72:79:5d:6a:4e:e8:44:ad:4b:7a:0a:1f:04:cc:28:35:ee:7d:
         de:89:61:87:23:70:6a:83:b6:cb:28:85:15:0f:8e:b1:f3:af:
         40:51:34:ae:a9:47:b9:ed:38:ac:13:66:69:eb:46:29:64:36:
         84:54:96:00:6e:5c:db:b8:26:47:6c:43:13:0c:a6:e2:8e:8c:
         70:e3:82:f0:48:b2:ff:92:96:35:34:54:4f:d0:ed:e6:f9:24:
         b1:99:e0:0a:bd:06:b9:3d:f0:f9:82:68:df:28:69:f4:ed:3b:
         63:49:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:01:32 2025 by rpki-client