Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          ss+AmeRZej9odpaQb4XbrCciU+dk+ckNDwzmmUYnc/I=
Subject key identifier:   54:FB:37:01:0B:EC:F3:E5:CF:DD:3E:04:8F:29:29:34:A7:2D:DE:36
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       1ED190D3B0F41D52C26FFB53A561503A306C4241
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:00 +0000
ROA not before:           Tue 07 Feb 2023 19:55:00 +0000
ROA not after:            Tue 06 Feb 2024 20:00:00 +0000
asID:                     262741
IP address blocks:        186.208.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d1:90:d3:b0:f4:1d:52:c2:6f:fb:53:a5:61:50:3a:30:6c:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:00 2023 GMT
            Not After : Feb  6 20:00:00 2024 GMT
        Subject: CN=54FB37010BECF3E5CFDD3E048F292934A72DDE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:f7:31:df:3c:c4:e7:7c:b2:42:64:86:d4:
                    3f:be:d4:72:f1:cc:72:59:a8:cb:c6:ba:2d:d5:54:
                    bb:82:76:60:f4:ca:a3:d3:0a:5d:b9:92:60:5e:02:
                    6b:51:e3:c4:6b:da:be:cb:ff:9c:bd:62:3c:ab:19:
                    1a:a3:ae:79:dc:bf:79:be:2c:93:78:1c:d3:0a:ec:
                    0c:91:0e:c0:c8:1e:1c:76:59:6b:d6:ff:af:14:38:
                    f6:10:2d:16:fe:c1:8b:45:83:f5:6d:1f:fe:f0:d5:
                    93:15:7c:f5:f2:c9:bc:18:b7:0a:06:9f:33:28:1d:
                    ef:49:9d:95:32:8b:7c:97:25:7e:67:b4:78:95:a3:
                    73:02:25:31:59:f9:88:2e:dc:b5:20:97:91:33:68:
                    27:e2:ce:cc:c7:5c:28:31:34:84:da:27:70:50:9a:
                    eb:e7:d7:b4:34:49:b4:12:31:7d:f1:ef:0b:65:40:
                    48:a1:11:bd:8a:be:27:68:55:c4:fd:7f:51:d1:1d:
                    89:0c:2d:18:b4:f0:f0:47:fd:ea:7d:f8:12:37:9b:
                    0f:eb:56:d8:50:0f:ff:32:60:73:4d:09:96:18:14:
                    6e:ad:03:52:4a:fc:1e:a0:63:07:30:8b:05:9d:3a:
                    9e:4f:d0:b3:8d:53:f0:87:e7:aa:57:76:21:bc:62:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:37:01:0B:EC:F3:E5:CF:DD:3E:04:8F:29:29:34:A7:2D:DE:36
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:f6:6c:f6:24:fc:57:1f:99:e2:f6:e3:b4:81:24:84:43:
         d2:73:c7:36:a5:84:ce:d3:76:d6:65:5a:e8:a6:0e:b6:bc:ae:
         e7:38:38:51:7c:6b:44:b3:5c:6f:67:94:50:11:9f:7a:2b:51:
         8a:2f:0a:a3:2d:95:a7:9a:18:d9:e7:e7:9d:00:1d:e3:87:18:
         54:a0:b2:96:92:b3:b6:62:7a:e2:f8:da:5f:b7:e9:21:c6:b4:
         93:00:69:b2:04:64:ca:a5:1d:9e:5d:6f:b8:f0:42:d0:1a:bf:
         9c:36:45:70:b1:93:df:9d:b8:34:0c:d6:3a:0a:3c:ca:d5:2a:
         92:27:94:ee:56:b4:5c:c2:3c:54:32:3c:0d:de:7a:7b:8d:d5:
         8a:4b:48:74:9a:fb:76:f0:9b:69:ca:4f:e5:61:e7:34:5c:7b:
         a5:88:79:26:13:cf:75:a9:81:6c:35:04:78:82:1a:d6:8e:f0:
         80:78:f1:5c:f8:0e:52:3e:80:32:2f:eb:b2:bd:30:91:b4:73:
         a9:4c:96:0f:d6:78:18:4d:4c:1c:5c:c5:cf:33:c8:f1:9b:74:
         ea:45:08:ec:20:19:dc:56:04:22:95:1e:98:f2:22:fb:f9:68:
         bb:a7:86:5c:f5:51:e3:49:6c:34:fb:18:1b:7e:47:d9:1d:df:
         13:58:d8:f3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHtGQ07D0HVLCb/tTpWFQOjBsQkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDBaFw0yNDAyMDYyMDAwMDBaMDMxMTAvBgNV
BAMTKDU0RkIzNzAxMEJFQ0YzRTVDRkREM0UwNDhGMjkyOTM0QTcyRERFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31/cx3zzE53yyQmSG1D++1HLx
zHJZqMvGui3VVLuCdmD0yqPTCl25kmBeAmtR48Rr2r7L/5y9YjyrGRqjrnncv3m+
LJN4HNMK7AyRDsDIHhx2WWvW/68UOPYQLRb+wYtFg/VtH/7w1ZMVfPXyybwYtwoG
nzMoHe9JnZUyi3yXJX5ntHiVo3MCJTFZ+Ygu3LUgl5EzaCfizszHXCgxNITaJ3BQ
muvn17Q0SbQSMX3x7wtlQEihEb2KvidoVcT9f1HRHYkMLRi08PBH/ep9+BI3mw/r
VthQD/8yYHNNCZYYFG6tA1JK/B6gYwcwiwWdOp5P0LONU/CH56pXdiG8YsD3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVPs3AQvs8+XP3T4EjykpNKct3jYwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQsDANBgkqhkiG9w0BAQsFAAOCAQEAKMr2
bPYk/FcfmeL247SBJIRD0nPHNqWEztN21mVa6KYOtryu5zg4UXxrRLNcb2eUUBGf
eitRii8Koy2Vp5oY2efnnQAd44cYVKCylpKztmJ64vjaX7fpIca0kwBpsgRkyqUd
nl1vuPBC0Bq/nDZFcLGT3524NAzWOgo8ytUqkieU7la0XMI8VDI8Dd56e43ViktI
dJr7dvCbacpP5WHnNFx7pYh5JhPPdamBbDUEeIIa1o7wgHjxXPgOUj6AMi/rsr0w
kbRzqUyWD9Z4GE1MHFzFzzPI8Zt06kUI7CAZ3FYEIpUemPIi+/lou6eGXPVR40ls
NPsYG35H2R3fE1jY8w==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net