Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa (raw, json)
Hash identifier:          DwWmGCPXoboMtAAX3E428bjhMS7qMeL4pGfNDCRdb+s=
Subject key identifier:   28:C4:D5:30:8D:8B:9A:34:BE:A5:C4:CF:DD:7F:B2:85:16:6C:3A:1B
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       418A816F4A15C07714F927E2CD76E41D245E8AF3
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:01 +0000
ROA not before:           Tue 07 Feb 2023 19:55:01 +0000
ROA not after:            Tue 06 Feb 2024 20:00:01 +0000
asID:                     262741
IP address blocks:        186.208.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:81:6f:4a:15:c0:77:14:f9:27:e2:cd:76:e4:1d:24:5e:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:01 2023 GMT
            Not After : Feb  6 20:00:01 2024 GMT
        Subject: CN=28C4D5308D8B9A34BEA5C4CFDD7FB285166C3A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:fb:65:b3:b6:58:a8:3b:d3:34:72:c6:9b:
                    fe:5e:aa:f5:23:0a:75:7c:0c:67:a6:78:ec:63:6b:
                    44:36:6e:ae:1e:9f:e6:9a:97:02:a3:d4:40:22:54:
                    c1:3a:e6:7b:fa:6c:70:2c:39:0a:73:3d:44:22:4c:
                    72:25:c5:99:6c:da:79:a6:76:d7:95:75:32:d5:a6:
                    c3:32:88:a1:85:4d:c1:ee:e9:ed:f7:00:7f:4c:cf:
                    9b:29:b1:85:31:2f:62:ef:fa:2a:cc:42:d1:cd:3e:
                    60:83:72:2d:87:ae:c1:4d:2d:90:da:f1:c4:da:e0:
                    1f:94:3e:bf:f3:f7:09:93:4b:ff:c9:29:37:1a:69:
                    12:9f:a0:60:77:db:6e:65:19:aa:49:70:fd:8b:db:
                    fa:fa:51:62:df:8f:08:91:90:22:5c:1d:8d:17:42:
                    a4:9a:30:d6:2b:5b:bd:e5:89:42:72:01:80:bf:c0:
                    c1:1d:f9:1d:8a:d9:4b:bb:50:47:a6:8c:3d:80:de:
                    23:bc:16:4a:7a:60:2b:0d:b6:6d:b7:c7:6b:f6:d8:
                    e2:41:bd:a3:fd:14:8e:98:02:c2:64:36:38:3a:e0:
                    67:ac:33:93:72:77:4a:cf:d1:2b:53:6e:6b:0b:13:
                    34:90:ec:d6:46:ec:ad:21:d8:cc:24:07:cc:46:ef:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:D5:30:8D:8B:9A:34:BE:A5:C4:CF:DD:7F:B2:85:16:6C:3A:1B
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32302d3230203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:6c:a9:4f:ad:02:98:92:23:79:67:37:25:7a:32:87:2a:3b:
         ad:46:e0:d1:71:2f:ad:3e:cc:cb:4e:56:66:98:28:65:4e:12:
         02:c3:df:1a:7d:11:82:2e:af:b9:4b:82:a6:a3:37:08:1b:84:
         4e:c8:d7:1a:92:d7:ce:8a:e0:fe:81:38:a7:50:fd:c2:f6:ef:
         85:e8:3c:9c:d2:fb:28:e3:4d:45:bb:61:99:f8:26:f0:8b:5c:
         e0:5d:aa:d7:c5:23:e5:44:82:52:df:e2:70:76:b5:8d:b8:28:
         48:fb:a8:94:77:ec:01:be:55:06:29:7c:fd:39:54:cf:7f:6b:
         9b:e8:d0:8d:ce:10:d4:0b:e7:d6:e0:67:2d:f5:69:ab:ec:44:
         7a:74:af:cf:4c:f7:d7:3f:9a:3c:20:11:00:0e:ef:6d:35:7f:
         e3:e7:4c:59:c8:20:ce:f6:d8:50:db:19:cb:19:cf:4a:c4:92:
         7f:28:fc:0e:69:34:cd:94:cd:5a:19:17:31:e2:20:4b:cf:35:
         84:4a:3f:d7:ac:6b:98:dc:f3:71:62:4b:63:fc:49:cb:fc:75:
         cc:a6:63:64:67:53:23:7b:c4:b8:6e:1a:81:20:89:57:2a:48:
         32:e0:8b:c8:1f:85:14:00:ec:bb:bf:6d:02:ff:c6:37:d3:db:
         94:70:74:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQYqBb0oVwHcU+SfizXbkHSReivMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDFaFw0yNDAyMDYyMDAwMDFaMDMxMTAvBgNV
BAMTKDI4QzRENTMwOEQ4QjlBMzRCRUE1QzRDRkREN0ZCMjg1MTY2QzNBMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpvtls7ZYqDvTNHLGm/5eqvUj
CnV8DGemeOxja0Q2bq4en+aalwKj1EAiVME65nv6bHAsOQpzPUQiTHIlxZls2nmm
dteVdTLVpsMyiKGFTcHu6e33AH9Mz5spsYUxL2Lv+irMQtHNPmCDci2HrsFNLZDa
8cTa4B+UPr/z9wmTS//JKTcaaRKfoGB3225lGapJcP2L2/r6UWLfjwiRkCJcHY0X
QqSaMNYrW73liUJyAYC/wMEd+R2K2Uu7UEemjD2A3iO8Fkp6YCsNtm23x2v22OJB
vaP9FI6YAsJkNjg64GesM5Nyd0rP0StTbmsLEzSQ7NZG7K0h2MwkB8xG7ydxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKMTVMI2LmjS+pcTP3X+yhRZsOhswHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLrQsDANBgkqhkiG9w0BAQsFAAOCAQEAsWyp
T60CmJIjeWc3JXoyhyo7rUbg0XEvrT7My05WZpgoZU4SAsPfGn0Rgi6vuUuCpqM3
CBuETsjXGpLXzorg/oE4p1D9wvbvheg8nNL7KONNRbthmfgm8Itc4F2q18Uj5USC
Ut/icHa1jbgoSPuolHfsAb5VBil8/TlUz39rm+jQjc4Q1Avn1uBnLfVpq+xEenSv
z0z31z+aPCARAA7vbTV/4+dMWcggzvbYUNsZyxnPSsSSfyj8Dmk0zZTNWhkXMeIg
S881hEo/16xrmNzzcWJLY/xJy/x1zKZjZGdTI3vEuG4agSCJVypIMuCLyB+FFADs
u79tAv/GN9PblHB0NQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net