Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e33312e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          DghMRA8mPrwUbD2vhXSGIbAma+oQZDdib6h3pCvQleQ=
Subject key identifier:   8E:82:CC:2E:15:0C:B7:3A:31:C9:97:44:E9:D4:2A:93:BA:06:22:46
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       037BF4518A6E03AFC3C2CEC444DC56F6CF33D705
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 16 Oct 2025 19:05:38 +0000
ROA not before:           Thu 16 Oct 2025 19:00:38 +0000
ROA not after:            Thu 15 Oct 2026 19:05:38 +0000
asID:                     53016
IP address blocks:        177.74.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7b:f4:51:8a:6e:03:af:c3:c2:ce:c4:44:dc:56:f6:cf:33:d7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Oct 16 19:00:38 2025 GMT
            Not After : Oct 15 19:05:38 2026 GMT
        Subject: CN=8E82CC2E150CB73A31C99744E9D42A93BA062246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:bf:04:0d:26:e4:ac:3e:d2:95:9a:e7:48:
                    cf:56:33:70:67:64:c6:78:0a:7c:83:77:16:48:d7:
                    bc:58:84:47:b9:75:c7:52:0a:bd:25:49:6c:a1:52:
                    0e:2b:6f:aa:b9:56:61:80:bc:c9:4e:e7:3e:75:0e:
                    c0:ef:fa:fc:4e:f7:90:cc:63:cf:76:36:aa:25:54:
                    92:24:bf:97:00:7a:e7:b9:33:c0:15:85:62:d5:5e:
                    40:10:f5:6e:6c:0e:c8:b1:5f:7f:18:75:48:04:cd:
                    fd:5a:97:58:31:05:ac:2d:66:a0:d6:37:45:b1:13:
                    8a:d7:c5:cc:53:82:3f:9c:25:48:07:5c:a3:9a:9a:
                    c1:9b:68:ad:69:f2:bf:84:36:43:a3:29:01:65:cb:
                    92:ee:33:23:64:b1:c2:1a:42:9e:18:4f:94:53:ee:
                    2a:24:bf:1d:28:43:6d:ad:80:88:bb:d1:b8:83:2d:
                    9c:48:af:03:3c:36:9c:11:97:7a:90:c8:64:1c:6a:
                    b6:67:6c:db:4a:b1:d2:12:d5:e7:16:58:36:ea:8d:
                    82:17:6d:5f:1a:f4:b3:96:b2:01:06:37:24:54:94:
                    52:a6:b5:1c:53:77:fc:f1:91:45:0d:36:5f:0b:d4:
                    65:9b:51:3f:0b:ef:d9:53:b7:d9:2d:f5:3e:6a:f2:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:CC:2E:15:0C:B7:3A:31:C9:97:44:E9:D4:2A:93:BA:06:22:46
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33312e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:ff:28:6a:60:0c:68:63:38:97:b4:ce:3e:5f:67:50:a3:
         8d:ce:f5:69:1a:e4:4b:9b:5e:e4:23:e6:1d:56:9c:f7:56:13:
         31:84:01:21:7f:84:2c:e7:e9:95:72:14:81:63:94:c4:ff:3b:
         68:87:25:ea:d8:bd:43:a4:ce:89:d3:ad:7d:ec:2e:97:3b:a4:
         55:d1:16:1d:e7:da:a5:72:85:0a:98:b8:1a:dc:91:61:c3:8b:
         6d:cf:3a:6b:10:24:ad:ea:7e:9f:a9:89:36:7d:64:b1:4d:99:
         82:4d:35:2b:ab:13:77:4d:c4:22:41:14:79:e3:44:f6:f1:af:
         a3:0b:7c:e8:47:0c:4e:a7:4b:b9:69:f1:b1:f8:dc:25:08:cc:
         29:18:0f:ef:69:cb:4d:7c:04:83:40:c4:ea:74:80:4a:fe:3f:
         6e:86:74:cd:f0:5c:3a:f0:c4:5f:aa:c8:cf:19:bd:0f:35:a7:
         b8:49:95:47:6b:bd:ad:89:17:1f:68:6a:e1:dc:26:67:37:24:
         d6:3e:74:85:9f:cb:9b:f2:b8:67:3b:54:0c:b0:7d:ba:12:2e:
         b1:ac:fe:aa:4e:ae:d8:7c:93:ba:3d:3e:b6:d5:3f:2c:5c:d5:
         2e:e1:c2:04:6e:b3:57:f6:cd:ec:61:3d:bf:d7:76:66:c0:1c:
         77:44:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:27 2025 by rpki-client