Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e35312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          86tH8pFqSoKCiBq6MzTbLIXtfhBsX63fZRfe7dcObkA=
Subject key identifier:   7E:16:02:D5:E9:6A:91:69:12:4B:4C:D3:B8:7A:3B:CE:AD:B8:0C:4E
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       665D08F13625353370D94E24CBEFD005354F2210
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:27:25 +0000
ROA not before:           Thu 18 Apr 2024 19:22:25 +0000
ROA not after:            Thu 17 Apr 2025 19:27:25 +0000
asID:                     53016
IP address blocks:        177.74.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5d:08:f1:36:25:35:33:70:d9:4e:24:cb:ef:d0:05:35:4f:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:22:25 2024 GMT
            Not After : Apr 17 19:27:25 2025 GMT
        Subject: CN=7E1602D5E96A9169124B4CD3B87A3BCEADB80C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:f8:22:55:ff:37:2d:9f:94:d0:fe:f6:e2:
                    c7:45:54:de:0b:1d:8f:c3:74:09:a9:97:08:df:94:
                    23:35:e9:84:03:94:a9:04:20:4e:11:6d:39:c1:21:
                    50:e5:59:cd:b6:cc:1d:49:5e:5f:b9:b9:ac:8f:c2:
                    af:b1:c2:d9:ff:3e:37:22:5f:ec:bf:26:46:8e:87:
                    2e:d6:81:68:c5:df:bd:f3:9d:fd:8f:8b:65:9d:33:
                    bc:27:e4:e4:da:54:fd:a3:49:13:a0:be:f7:b3:5f:
                    51:5f:d8:67:91:ef:7b:07:45:b5:4c:94:a5:97:01:
                    d6:a7:f0:d1:02:bc:1c:9e:5d:ff:5b:d2:b7:d9:47:
                    fa:70:c0:77:66:41:bd:34:bf:d3:3f:d1:4a:cb:58:
                    5d:d6:fe:67:e8:3e:27:20:bb:ef:9d:4b:19:8e:4e:
                    8e:af:11:3a:8c:29:82:14:a7:ba:f2:a6:3a:d4:db:
                    b1:f8:4e:3e:2a:0b:6f:34:20:99:53:84:8e:27:99:
                    82:97:6f:71:f9:6d:d9:80:bb:97:df:65:04:58:0f:
                    ab:46:82:f7:20:4b:d9:7b:42:ec:be:32:4c:20:35:
                    b0:84:d8:aa:c3:65:c8:c4:93:bb:92:7b:0d:d1:c8:
                    e5:ea:bf:40:18:6e:a5:18:3c:e7:4a:9c:13:22:fb:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:02:D5:E9:6A:91:69:12:4B:4C:D3:B8:7A:3B:CE:AD:B8:0C:4E
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e35312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:88:f2:5e:a6:b9:61:5f:8b:93:6a:be:c2:aa:ef:39:4d:
         ee:a6:ef:bd:a9:c6:66:d6:79:c2:16:f9:87:ba:67:4c:da:0c:
         cb:02:d7:19:e2:a4:17:60:7c:70:6c:68:5e:16:e6:17:be:f5:
         78:6b:ee:cc:28:3e:db:6f:74:0d:4a:a9:e6:ba:9c:4d:2a:2b:
         02:d8:bf:3a:58:dc:cb:c7:07:5a:51:6c:a6:66:71:15:3a:99:
         3d:e1:7d:8c:0c:a5:97:40:f9:d6:2c:53:e5:e7:4c:82:7e:aa:
         e6:f2:5f:05:a6:df:b4:57:3e:8f:73:66:53:d9:03:7b:22:16:
         76:bc:c8:3a:39:24:12:c0:b4:ce:80:16:10:58:fb:d2:8e:c2:
         47:6e:31:53:17:87:37:ff:1d:44:6b:36:82:97:fe:e5:86:80:
         43:a6:89:b4:be:9f:bb:7d:0c:02:97:37:d3:f7:ec:7e:1a:c3:
         b5:b2:58:79:97:64:e4:c9:12:35:6d:d1:ac:78:25:c6:b7:df:
         26:1e:93:95:8d:b7:66:6b:70:7a:0d:10:fb:2d:b9:a1:b6:ba:
         3f:ac:40:83:af:34:e6:25:06:9d:bc:01:c9:21:78:94:46:cd:
         56:24:79:0f:ff:e5:04:00:1a:fb:fd:bc:ed:40:f8:cc:40:e3:
         10:88:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:15 2024 by rpki-client on console-fra.rpki-client.org