Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa (raw, json)
Hash identifier:          Oh2ZfqmngTezSUPrTGUf8b+2pd1znvJLgGAhA9n5pvY=
Subject key identifier:   A6:FB:54:6D:EF:41:C7:08:FD:56:D8:25:EB:9A:80:26:26:DF:47:33
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       1B5DC645C735791A8D19BABE5FE54B2A36303408
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:03 +0000
ROA not before:           Tue 07 Feb 2023 19:55:03 +0000
ROA not after:            Tue 06 Feb 2024 20:00:03 +0000
asID:                     262741
IP address blocks:        186.208.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:c6:45:c7:35:79:1a:8d:19:ba:be:5f:e5:4b:2a:36:30:34:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:03 2023 GMT
            Not After : Feb  6 20:00:03 2024 GMT
        Subject: CN=A6FB546DEF41C708FD56D825EB9A802626DF4733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:18:8a:05:d4:33:11:42:c9:1d:8f:da:22:
                    b0:39:4d:ab:4f:07:d3:ac:85:bb:c4:d8:85:25:ae:
                    9f:86:18:63:86:1e:59:3f:59:b3:36:b3:db:bb:e6:
                    99:d8:72:1a:bf:98:fa:38:94:7e:9d:ed:53:22:a5:
                    d7:d3:52:87:8b:26:f3:6c:5b:a2:f0:f7:17:36:04:
                    e0:11:af:7d:63:0d:58:5a:b8:70:27:1f:dd:06:7f:
                    42:d9:ac:ac:89:d3:a0:06:b6:10:32:6f:af:cf:a2:
                    dd:6e:89:ff:ad:1f:41:fa:79:6f:69:e7:c0:a8:1d:
                    cc:f6:af:75:3d:91:b8:9f:81:77:4c:83:7d:44:b4:
                    7c:b8:74:1f:88:ca:c9:8d:4b:dd:08:cd:2f:a6:cb:
                    fd:25:86:45:00:41:d6:d5:76:94:89:5f:d2:80:88:
                    33:67:61:25:b4:b0:81:40:0f:4a:8d:93:12:bd:cc:
                    df:30:82:4b:1f:c3:e0:e1:f3:1f:51:82:e6:8b:d7:
                    df:e3:76:4f:00:e8:6d:f6:06:e5:bb:74:5f:9c:6f:
                    5b:8b:c4:8f:a9:3e:24:84:9e:53:c9:a4:14:1e:fa:
                    d9:94:22:54:1d:f1:b7:57:01:8e:c6:2a:88:63:88:
                    4b:48:5f:4e:e6:53:f9:82:64:4e:61:eb:10:82:1e:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:54:6D:EF:41:C7:08:FD:56:D8:25:EB:9A:80:26:26:DF:47:33
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32312d3231203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:fd:fa:20:7b:e7:a8:8b:85:07:0d:dc:09:08:0f:af:15:
         f2:97:08:e5:a3:95:fa:8a:18:bc:9c:f9:eb:88:4c:8f:74:ac:
         fd:cf:7e:74:05:21:dc:9c:f4:5c:13:e7:d0:1d:e2:da:5a:0f:
         a1:e1:5a:79:7a:e6:65:c5:f5:5c:1e:44:ca:a3:b3:c3:fe:64:
         99:59:b2:5a:76:4a:75:82:64:59:c6:f5:b8:ae:1a:35:44:57:
         70:f4:eb:60:8c:f0:01:88:4b:6a:af:cc:e5:41:d0:29:5d:3c:
         60:15:73:55:8a:a5:5d:14:6b:41:00:71:bc:91:35:7b:74:80:
         28:86:f8:c0:ab:73:ef:7b:08:8a:88:c8:46:ce:33:67:ac:41:
         48:4d:fe:24:25:ba:bd:16:80:5f:8d:4d:2c:49:59:f0:b1:46:
         0f:86:cb:86:ff:84:e9:f1:26:5c:1c:bb:63:70:ef:c7:92:a9:
         31:74:05:1f:1b:fe:20:9f:ff:e3:4b:32:25:c4:3c:6e:a0:e9:
         ce:46:1c:9c:3a:44:dd:89:73:74:78:73:c1:2d:a7:5d:f9:1a:
         7f:1d:66:dc:89:53:9c:39:7a:ce:22:f5:9b:b1:57:8d:85:7a:
         d3:4c:f8:4d:17:91:84:8a:53:e3:fc:fe:a5:bc:76:b4:85:49:
         40:26:37:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG13GRcc1eRqNGbq+X+VLKjYwNAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDNaFw0yNDAyMDYyMDAwMDNaMDMxMTAvBgNV
BAMTKEE2RkI1NDZERUY0MUM3MDhGRDU2RDgyNUVCOUE4MDI2MjZERjQ3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsxiKBdQzEULJHY/aIrA5TatP
B9OshbvE2IUlrp+GGGOGHlk/WbM2s9u75pnYchq/mPo4lH6d7VMipdfTUoeLJvNs
W6Lw9xc2BOARr31jDVhauHAnH90Gf0LZrKyJ06AGthAyb6/Pot1uif+tH0H6eW9p
58CoHcz2r3U9kbifgXdMg31EtHy4dB+IysmNS90IzS+my/0lhkUAQdbVdpSJX9KA
iDNnYSW0sIFAD0qNkxK9zN8wgksfw+Dh8x9RguaL19/jdk8A6G32BuW7dF+cb1uL
xI+pPiSEnlPJpBQe+tmUIlQd8bdXAY7GKohjiEtIX07mU/mCZE5h6xCCHqstAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpvtUbe9Bxwj9Vtgl65qAJibfRzMwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rQsDANBgkqhkiG9w0BAQsFAAOCAQEAPT/9
+iB756iLhQcN3AkID68V8pcI5aOV+ooYvJz564hMj3Ss/c9+dAUh3Jz0XBPn0B3i
2loPoeFaeXrmZcX1XB5EyqOzw/5kmVmyWnZKdYJkWcb1uK4aNURXcPTrYIzwAYhL
aq/M5UHQKV08YBVzVYqlXRRrQQBxvJE1e3SAKIb4wKtz73sIiojIRs4zZ6xBSE3+
JCW6vRaAX41NLElZ8LFGD4bLhv+E6fEmXBy7Y3Dvx5KpMXQFHxv+IJ//40syJcQ8
bqDpzkYcnDpE3YlzdHhzwS2nXfkafx1m3IlTnDl6ziL1m7FXjYV600z4TReRhIpT
4/z+pbx2tIVJQCY3qg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net