Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33362e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e33362e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          6SqS1G6wX44I5yIQXQWfYU/BvCq5TTJFVy1w2J6M19s=
Subject key identifier:   33:12:5E:74:FC:BD:19:A8:BB:36:CF:4E:25:87:A2:A4:78:60:C1:48
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       37D309EC9DFF552FD414ACAD190109172FA7E47C
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33362e302f32342d3234203d3e203533303136.roa
Signing time:             Thu 16 Oct 2025 19:07:08 +0000
ROA not before:           Thu 16 Oct 2025 19:02:08 +0000
ROA not after:            Thu 15 Oct 2026 19:07:08 +0000
asID:                     53016
IP address blocks:        177.74.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d3:09:ec:9d:ff:55:2f:d4:14:ac:ad:19:01:09:17:2f:a7:e4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Oct 16 19:02:08 2025 GMT
            Not After : Oct 15 19:07:08 2026 GMT
        Subject: CN=33125E74FCBD19A8BB36CF4E2587A2A47860C148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:1c:49:58:24:61:a8:6a:31:42:2a:85:19:
                    b9:b3:6b:a9:67:9a:30:3a:84:b1:7c:0f:05:23:b7:
                    c8:10:0e:ce:f5:78:f2:0c:45:61:a2:14:75:d4:03:
                    fe:52:61:ca:4d:54:69:2b:3d:3e:67:f0:6d:a8:45:
                    57:20:4b:d1:7b:07:ff:d6:63:78:54:eb:de:43:3f:
                    56:e2:3d:80:4c:07:53:7d:a3:a9:46:63:3f:9a:71:
                    7e:0f:0e:a4:3b:a0:74:70:b9:b4:0b:85:f3:f8:7a:
                    b7:70:81:d0:eb:b3:cd:69:b5:14:63:23:52:5d:19:
                    4c:bf:a7:9a:15:3e:5e:a6:6b:2e:04:d6:cd:84:e2:
                    4e:e2:6b:02:ab:9c:6e:37:0a:72:59:4b:5d:58:a9:
                    57:d8:f9:23:fc:0d:ae:1a:eb:f6:2d:71:5a:ef:f5:
                    66:87:3e:7c:9e:19:8a:ae:37:06:28:4d:5a:0e:98:
                    37:02:5f:eb:94:79:8b:c2:15:e5:fb:c5:01:a1:dd:
                    fa:d0:49:43:93:77:8e:93:19:21:ec:92:f4:b0:b0:
                    7b:11:66:05:ee:ea:72:d8:9a:ba:d3:89:6c:48:88:
                    a6:e7:76:d4:64:b0:c2:e3:5e:d5:cc:96:8f:81:29:
                    ea:b9:aa:7c:e2:28:bf:0c:4d:d9:4d:77:fd:44:83:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:5E:74:FC:BD:19:A8:BB:36:CF:4E:25:87:A2:A4:78:60:C1:48
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e33362e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:e4:3a:ed:49:9c:33:fe:18:e8:bc:bc:8f:52:67:bc:98:
         84:f1:09:f2:b6:34:6c:30:da:f2:9c:b7:56:dd:51:53:7e:75:
         21:47:b1:5f:cb:5e:c5:8e:0c:46:f6:70:e5:fd:c6:74:d2:7a:
         0d:fc:b8:60:cf:48:c0:c5:7e:3a:d3:b5:17:e7:e6:e5:a9:4e:
         c4:4b:f8:88:43:09:45:72:0f:22:49:1a:db:15:84:73:c1:f3:
         49:c0:ba:4d:65:47:1a:27:6e:f3:7e:f8:63:59:2b:db:0e:cd:
         38:4b:62:90:35:a7:8f:15:ac:77:29:d4:a1:24:13:00:0c:d0:
         46:1d:22:8c:14:bc:1a:6f:7d:ad:15:7b:83:5f:f1:0c:d8:1c:
         ea:6c:33:19:3d:63:fa:b7:25:14:72:ec:b3:5f:06:00:c7:60:
         a5:01:9e:cd:db:08:73:db:81:58:10:97:d9:1f:c0:fb:4b:7c:
         47:3d:55:47:b8:2b:3c:40:a5:9d:0a:2c:85:e4:d0:fc:53:06:
         be:de:ce:62:f5:3e:86:71:07:5e:05:27:ee:88:8b:b2:b0:cd:
         58:40:05:60:ec:03:8e:f3:ee:b4:23:ce:ba:2a:48:75:eb:18:
         2e:3c:96:d0:c8:3f:fe:93:b2:45:cd:34:0d:b5:41:b6:15:19:
         56:65:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:23 2025 by rpki-client