Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          qVl1218SY8VACfxQlY5tGiqcR830O3HKqhzookaQqro=
Subject key identifier:   85:5A:05:D7:DD:FA:00:5B:7E:C6:14:C9:A6:17:4F:AE:48:17:16:B1
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       078A863DB52C756ED1A2C46F16A731CF355CC257
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:00 +0000
ROA not before:           Tue 07 Feb 2023 19:55:00 +0000
ROA not after:            Tue 06 Feb 2024 20:00:00 +0000
asID:                     262741
IP address blocks:        186.208.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:86:3d:b5:2c:75:6e:d1:a2:c4:6f:16:a7:31:cf:35:5c:c2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:00 2023 GMT
            Not After : Feb  6 20:00:00 2024 GMT
        Subject: CN=855A05D7DDFA005B7EC614C9A6174FAE481716B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:ba:0d:b0:d2:d9:d0:ef:f0:c6:d7:7e:d1:
                    9b:22:cb:03:af:ca:96:46:76:87:6d:08:83:66:7d:
                    fc:c3:7c:52:39:21:51:52:4b:b5:7f:25:1a:13:f6:
                    0b:cb:a2:35:65:4a:46:fd:a0:2f:0a:2c:20:61:2d:
                    0c:27:f3:4d:16:a0:48:7a:5e:41:28:af:3f:ed:3d:
                    f6:d8:80:2b:87:82:d2:c4:88:fd:3d:6c:c5:1e:e5:
                    8c:94:f5:a6:55:94:27:3d:4a:a5:1c:31:12:73:08:
                    6c:f5:4c:94:84:6c:44:dc:45:e8:58:4f:d3:6d:b0:
                    ed:f4:28:74:cb:f3:e1:a4:e7:5f:19:f8:c6:cd:97:
                    1e:cf:71:d6:85:6f:5e:18:ec:f4:02:2f:1d:6d:bd:
                    ac:95:84:6b:99:d9:dc:e3:e6:7f:8b:e0:8c:4c:cf:
                    3e:b9:36:10:e7:68:13:67:07:d4:b0:ce:c2:4a:8a:
                    91:ae:c0:e0:89:49:e8:6e:57:f3:c0:97:46:34:0a:
                    44:ea:ec:5d:cd:d7:1c:20:6d:6c:35:67:53:60:dd:
                    6a:65:a9:15:fe:3e:e5:a2:d7:a9:0d:a1:3a:ba:5d:
                    43:51:81:d1:6e:96:13:db:74:38:1a:9b:5b:81:e7:
                    ae:4e:e3:5e:99:81:3f:03:96:44:62:39:83:ed:a9:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5A:05:D7:DD:FA:00:5B:7E:C6:14:C9:A6:17:4F:AE:48:17:16:B1
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137362e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:fb:5d:aa:b7:17:5f:d6:12:21:8e:7d:fb:26:60:ea:e0:37:
         4c:93:7f:f9:c8:60:88:91:58:1c:95:ac:5b:e9:ae:c5:2b:ff:
         c8:52:19:e2:6f:6f:d9:57:f4:23:2e:bc:ef:bc:04:2e:77:98:
         eb:4f:92:c3:51:27:98:91:4d:36:e6:92:37:7a:16:fa:e1:df:
         9f:ab:ed:00:43:70:53:cc:6b:fc:40:cc:09:44:00:e2:ed:d5:
         dd:13:b3:c0:8a:b7:51:f3:c2:93:8a:45:5c:b3:44:57:6a:47:
         96:78:65:6f:43:b0:14:f2:0f:af:43:ea:9e:9d:ca:17:6e:3f:
         3d:1c:4d:79:6c:64:9f:43:1c:d0:01:83:cf:58:7f:ee:6c:6f:
         96:c8:3f:3e:86:0b:ff:d9:9d:bd:c3:76:cb:a0:0c:fc:9f:7e:
         9b:25:e4:57:03:df:15:7b:6d:e1:61:17:16:00:89:e8:9c:c7:
         6c:d0:23:da:16:26:90:e5:c3:49:e9:e1:84:51:c3:97:93:41:
         ed:7b:a2:fd:58:76:f4:19:e0:84:b9:50:99:ff:e0:fa:67:46:
         b3:0b:f3:66:81:23:23:af:a5:4b:f0:7a:a4:92:4d:9b:1a:dc:
         26:d6:0b:6a:66:3d:9f:66:83:8c:7c:62:b6:3c:23:bb:a2:a2:
         60:88:0f:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUB4qGPbUsdW7RosRvFqcxzzVcwlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDBaFw0yNDAyMDYyMDAwMDBaMDMxMTAvBgNV
BAMTKDg1NUEwNUQ3RERGQTAwNUI3RUM2MTRDOUE2MTc0RkFFNDgxNzE2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcroNsNLZ0O/wxtd+0ZsiywOv
ypZGdodtCINmffzDfFI5IVFSS7V/JRoT9gvLojVlSkb9oC8KLCBhLQwn800WoEh6
XkEorz/tPfbYgCuHgtLEiP09bMUe5YyU9aZVlCc9SqUcMRJzCGz1TJSEbETcRehY
T9NtsO30KHTL8+Gk518Z+MbNlx7PcdaFb14Y7PQCLx1tvayVhGuZ2dzj5n+L4IxM
zz65NhDnaBNnB9SwzsJKipGuwOCJSehuV/PAl0Y0CkTq7F3N1xwgbWw1Z1Ng3Wpl
qRX+PuWi16kNoTq6XUNRgdFulhPbdDgam1uB565O416ZgT8DlkRiOYPtqeYDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhVoF1936AFt+xhTJphdPrkgXFrEwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQsDANBgkqhkiG9w0BAQsFAAOCAQEAoPtd
qrcXX9YSIY59+yZg6uA3TJN/+chgiJFYHJWsW+muxSv/yFIZ4m9v2Vf0Iy6877wE
LneY60+Sw1EnmJFNNuaSN3oW+uHfn6vtAENwU8xr/EDMCUQA4u3V3ROzwIq3UfPC
k4pFXLNEV2pHlnhlb0OwFPIPr0Pqnp3KF24/PRxNeWxkn0Mc0AGDz1h/7mxvlsg/
PoYL/9mdvcN2y6AM/J9+myXkVwPfFXtt4WEXFgCJ6JzHbNAj2hYmkOXDSenhhFHD
l5NB7Xui/Vh29BnghLlQmf/g+mdGswvzZoEjI6+lS/B6pJJNmxrcJtYLamY9n2aD
jHxitjwju6KiYIgPlQ==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net