Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32322d3232203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier:          delGsg+iKGEo6+i3gK94W5yP2KZd4QCA47ORviBHoF4=
Subject key identifier:   42:9E:B5:E7:36:86:BC:07:8F:67:65:4C:09:E5:1F:DB:1E:AC:26:FC
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       61882945358256EAC94E641F5B298986978CE9DE
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32322d3232203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        186.208.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:88:29:45:35:82:56:ea:c9:4e:64:1f:5b:29:89:86:97:8c:e9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=429EB5E73686BC078F67654C09E51FDB1EAC26FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:1b:a4:ec:08:48:32:b0:38:8a:4b:75:f4:
                    25:f3:cf:9d:ef:8c:2b:63:cb:fe:58:b2:d0:d1:a8:
                    e5:c8:21:f5:e5:44:c1:85:6b:54:c0:dd:7f:bd:0a:
                    81:20:8e:a2:42:5f:bb:c0:9f:30:94:d5:9f:12:15:
                    c0:3f:63:e3:75:7a:c4:1f:de:5b:c1:67:a4:9e:07:
                    7e:43:f9:2a:cf:58:8b:a7:23:30:1f:a4:d4:99:18:
                    0e:b2:db:fb:7f:ec:61:90:52:2f:43:31:7b:14:30:
                    40:59:54:6c:56:2c:16:63:e5:34:7c:b1:c7:95:2c:
                    f2:88:c4:c0:d9:98:26:90:11:32:69:e7:4c:30:c1:
                    c6:eb:48:2a:09:88:87:a0:48:95:92:dd:8f:77:25:
                    44:b4:c1:52:9d:ee:62:0d:bb:93:14:a0:ad:0a:5d:
                    16:3d:25:f1:3f:6d:ee:ab:78:4d:83:d7:2a:90:75:
                    0b:59:42:77:84:9e:1b:55:90:6e:4a:eb:e9:44:fa:
                    6d:c4:7b:9b:c1:96:2f:62:3d:a0:ca:5a:d7:5e:07:
                    8e:4c:c2:72:42:04:68:bc:a1:58:7c:99:e5:37:0d:
                    12:93:9f:a7:15:e0:0c:53:c7:c1:ee:ee:5a:06:24:
                    09:4a:e2:29:5e:d7:3d:c2:e6:9b:e3:32:16:79:85:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:B5:E7:36:86:BC:07:8F:67:65:4C:09:E5:1F:DB:1E:AC:26:FC
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32322d3232203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:38:57:38:25:e9:ee:d8:ef:df:5e:a2:7f:78:c5:4c:0b:
         43:18:1b:7d:46:9d:bf:43:dc:37:75:c5:85:6b:e4:ba:40:ba:
         f0:fa:a9:3b:45:2a:3d:83:5c:25:71:44:6a:cf:28:d7:46:4e:
         aa:d4:f4:8f:57:00:ca:24:52:18:60:1a:97:56:3f:fc:d5:38:
         f9:4a:bb:52:99:1d:c9:d0:63:b7:a5:bc:8a:80:c3:9d:1d:be:
         4e:2f:01:17:c8:b4:48:3f:7f:b5:80:a6:dc:68:ff:aa:46:d5:
         2a:3e:a5:61:4a:d2:44:7a:a3:35:1a:a2:81:41:d3:eb:15:06:
         01:9f:0d:1e:cd:af:a9:9b:f1:ee:54:f8:98:6f:43:26:ee:7b:
         e4:46:6f:d9:51:f9:a3:0b:1f:26:c8:b1:b8:b5:cd:fc:88:91:
         22:f9:58:18:02:9e:f5:fc:57:f6:33:92:98:63:89:d6:e3:f9:
         ea:ef:51:59:c8:ad:89:21:09:65:ba:cd:8c:a2:38:89:7c:ec:
         11:81:2c:45:5d:2c:d6:02:cc:ac:18:ca:d3:f8:a3:da:8c:8e:
         0f:98:30:39:46:95:58:e8:32:5a:fa:03:c1:86:45:98:13:5d:
         64:73:35:f8:8c:d3:01:33:42:d8:b0:62:90:21:c3:45:f1:49:
         a7:78:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net