Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e34302e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e34302e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          1TukSsrjYwYuT6nVK+1shMV8paytwHi9716dFxqN8V4=
Subject key identifier:   46:94:FE:5D:C0:8A:A2:AA:D7:09:1B:DD:3D:49:CB:EA:B2:0D:92:08
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       049BCE2D56A769F884A6C154A6E137E44A1B3BC5
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e34302e302f32342d3234203d3e203533303136.roa
Signing time:             Wed 08 Oct 2025 16:41:16 +0000
ROA not before:           Wed 08 Oct 2025 16:36:16 +0000
ROA not after:            Wed 07 Oct 2026 16:41:16 +0000
asID:                     53016
IP address blocks:        177.74.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9b:ce:2d:56:a7:69:f8:84:a6:c1:54:a6:e1:37:e4:4a:1b:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Oct  8 16:36:16 2025 GMT
            Not After : Oct  7 16:41:16 2026 GMT
        Subject: CN=4694FE5DC08AA2AAD7091BDD3D49CBEAB20D9208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:58:83:93:28:8f:dc:34:5d:4e:4a:1b:53:
                    0c:cf:f2:c6:f7:9e:6f:19:de:20:b1:c7:65:dc:3f:
                    33:e3:38:23:fd:cb:fa:e6:4e:33:12:9b:4d:b9:cd:
                    65:8c:f2:7a:ff:1a:ff:cd:c6:33:a5:2a:5a:91:d8:
                    b9:8e:bb:ac:1f:70:87:85:8d:42:f1:35:cf:b5:b4:
                    2b:1f:ec:31:19:66:1e:f2:b3:60:ac:ae:d9:bf:10:
                    7f:e8:92:56:dc:20:1b:33:6f:cd:3a:94:ec:84:60:
                    c6:48:02:00:1f:c9:46:46:f6:02:bf:04:51:42:d0:
                    a5:21:0d:8d:5c:85:1e:e0:23:7f:33:82:8a:dd:d6:
                    77:04:2f:bf:ae:06:1f:43:82:31:a2:ec:c6:34:94:
                    90:aa:56:cd:6c:ba:3a:f1:4b:f9:d3:22:ee:73:6e:
                    8e:6d:22:d1:0c:e9:86:81:31:c6:06:21:43:b5:f0:
                    57:a9:c5:62:3a:05:49:be:19:1a:0e:78:27:a8:59:
                    62:b1:c0:93:55:11:8b:39:9a:f7:da:d6:5c:2e:70:
                    a9:5b:b4:e8:8f:ce:56:9e:17:5d:53:5a:f7:ca:7e:
                    cc:16:c2:cd:10:44:a5:1f:69:81:4e:4e:69:8b:93:
                    41:f2:d7:e0:df:63:d7:de:6a:65:18:c7:1c:1d:86:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:FE:5D:C0:8A:A2:AA:D7:09:1B:DD:3D:49:CB:EA:B2:0D:92:08
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e34302e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:be:0f:8a:cc:0d:00:30:6b:cd:3e:ef:d6:53:44:45:a9:
         d4:fd:88:b4:06:f2:86:1d:2a:36:b2:ff:5e:3a:db:ff:1c:6a:
         32:80:fe:ea:3e:c9:e7:66:f5:4e:0d:00:ea:fa:e1:28:08:9e:
         50:fa:7e:47:ab:e9:ee:99:4f:3a:0a:b4:98:06:ba:6d:fb:76:
         c8:4a:99:20:b7:7d:d7:4a:3a:55:6a:69:13:fe:b9:ff:12:53:
         27:ac:aa:5c:15:22:84:ca:b6:c8:a2:59:39:ce:bd:c3:bd:be:
         b9:e7:43:64:5a:26:ba:57:a4:7d:89:3a:d6:ca:5f:da:a9:e8:
         8b:01:9d:27:8d:e2:68:c4:90:8b:ba:2b:45:84:d9:b2:f5:cb:
         ad:c3:dc:8e:70:31:f3:e1:b8:11:17:32:cc:78:ea:0a:af:c0:
         6d:d4:c0:cd:aa:95:8e:86:71:d1:b1:62:76:8d:6c:d4:3a:cb:
         b6:b0:e4:5b:c1:f3:d8:31:09:a7:00:3c:55:d9:e5:6b:4d:64:
         d8:e7:b8:8f:4d:f9:6c:e9:c0:7b:d1:b3:77:fc:44:39:44:e2:
         39:63:8b:8a:1b:37:1f:77:62:9b:53:34:9f:a2:5b:74:a8:9f:
         64:70:f5:41:10:1c:d2:04:86:3a:bb:d1:f5:eb:dc:a3:d7:c2:
         bf:2d:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:32:07 2025 by rpki-client