Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e36312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          S3k7q0iNLFTYXRz6bxu1U0G9VAFjLLBnh7bT5ciN9wU=
Subject key identifier:   9D:FB:5E:C3:18:5A:EB:63:94:03:07:0E:F4:13:67:7F:79:9D:C6:EC
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       1E1153A02B6CDA21F98DE98196A457C3285379F6
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 18 Apr 2024 19:28:05 +0000
ROA not before:           Thu 18 Apr 2024 19:23:05 +0000
ROA not after:            Thu 17 Apr 2025 19:28:05 +0000
asID:                     53016
IP address blocks:        177.74.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:11:53:a0:2b:6c:da:21:f9:8d:e9:81:96:a4:57:c3:28:53:79:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Apr 18 19:23:05 2024 GMT
            Not After : Apr 17 19:28:05 2025 GMT
        Subject: CN=9DFB5EC3185AEB639403070EF413677F799DC6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:20:10:bd:38:5d:5b:08:64:59:42:1d:7d:
                    e7:bc:63:ce:7c:00:21:b9:7f:70:56:d3:80:52:bd:
                    0c:f3:3a:f2:a8:cf:7f:81:c2:dc:0e:6a:79:0e:33:
                    7a:ff:c0:c2:72:bf:f4:a4:9f:f1:bd:3f:6d:ac:a1:
                    13:d3:b6:d9:19:cb:44:7c:2e:3e:79:ec:d9:ae:f9:
                    6c:02:dd:64:30:59:5c:65:64:47:25:32:1c:c5:1d:
                    92:77:43:27:3b:e7:25:05:0f:77:42:0d:90:49:64:
                    d9:2a:e5:a7:00:4a:9e:78:27:3d:ee:4a:00:8e:b8:
                    61:f9:82:81:2e:25:80:8d:ee:9e:ca:e0:79:c2:13:
                    9e:53:b2:8f:9b:5f:ac:ed:f5:06:3c:f5:1c:ff:42:
                    14:e8:b2:ab:4d:92:04:a1:b3:d8:f0:a7:7b:24:54:
                    df:ce:5d:e7:f8:f7:07:0e:3b:63:30:be:49:c8:dc:
                    79:31:1f:52:0e:4d:57:ec:77:f9:db:7d:f8:b1:e0:
                    ef:52:02:f3:c0:4a:b0:e2:00:ba:7c:23:d0:ef:68:
                    8c:ef:1e:14:b4:bb:c9:f8:6f:87:e1:59:0a:f0:7d:
                    67:81:3d:52:50:11:0f:f8:82:48:21:47:14:66:cc:
                    8c:cd:27:13:a5:f3:58:5f:88:45:e3:92:b6:4d:44:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:5E:C3:18:5A:EB:63:94:03:07:0E:F4:13:67:7F:79:9D:C6:EC
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e36312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:87:4f:d2:55:78:e7:dc:53:c9:a6:06:f6:8d:da:3a:ee:eb:
         f6:2d:84:d0:42:cf:55:9c:f0:d2:bb:3b:6f:81:20:14:66:4d:
         21:0f:ad:34:ff:77:ee:47:d6:c7:91:35:e5:7d:37:4f:fd:49:
         bb:5d:1e:98:f7:1c:f9:6a:f9:9b:94:0a:41:d9:85:ab:39:56:
         93:fb:a1:53:2a:8d:33:a6:31:59:c0:95:f1:c9:29:33:b9:11:
         ae:96:b0:e9:ed:06:16:27:e1:9b:48:2a:d9:29:f4:4e:d7:2b:
         85:05:36:7a:09:0e:e9:ac:fc:86:02:6c:1d:18:87:b3:88:10:
         7f:bc:8c:9e:fc:d4:9f:cb:64:b8:ac:a7:f5:c8:a4:13:32:60:
         24:2d:c4:93:67:66:ee:dd:70:d1:c3:25:b5:4b:69:b3:b2:fb:
         78:8d:45:f0:25:67:85:25:f7:f3:0c:c4:36:7b:d6:ca:e8:cf:
         d4:17:3f:ca:dc:67:f3:75:5c:95:44:d4:38:21:7f:ab:dd:b6:
         80:ff:b1:55:4a:6b:35:eb:87:54:1b:72:61:7b:b3:1b:24:99:
         57:46:0e:72:35:3e:3c:6d:f4:b4:c4:74:c0:aa:2c:5d:f1:1f:
         57:82:ac:58:fc:65:2c:de:ad:5d:9a:1a:1e:db:7e:9d:2f:7d:
         c8:0f:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:48 2024 by rpki-client on console-fra.rpki-client.org