Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137372e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3137372e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          kldxUAvYyrIhxci/NKRMUjhUIPqCAb2B8QXxs1l7l98=
Subject key identifier:   3E:39:0B:F2:17:78:8B:6E:54:35:75:81:D0:9D:02:5F:E2:97:54:23
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       6C6DD99BBCF4C5E18CFB624A1779FD691CD1BA27
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137372e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:03 +0000
ROA not before:           Tue 07 Feb 2023 19:55:03 +0000
ROA not after:            Tue 06 Feb 2024 20:00:03 +0000
asID:                     262741
IP address blocks:        186.208.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:d9:9b:bc:f4:c5:e1:8c:fb:62:4a:17:79:fd:69:1c:d1:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:03 2023 GMT
            Not After : Feb  6 20:00:03 2024 GMT
        Subject: CN=3E390BF217788B6E54357581D09D025FE2975423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:75:dc:5e:6d:c9:6b:0b:cb:f4:9e:d4:6d:
                    35:9d:40:1a:f6:fa:0d:d1:2f:86:9b:37:ce:cb:13:
                    1a:c7:60:18:73:d5:dd:81:c0:e1:4a:65:32:2b:ef:
                    b3:b1:3a:ed:dc:aa:03:a5:2f:43:f1:3b:ba:61:8d:
                    92:90:56:35:23:f3:5e:91:cc:d8:96:3c:7c:03:3b:
                    b9:9d:de:95:bc:dd:6b:88:ca:79:9e:ca:cb:44:a2:
                    f1:49:08:02:d8:51:75:9e:ae:ee:02:d8:2a:66:ba:
                    2b:10:f3:9e:99:84:1a:4d:f9:b6:d0:61:12:51:20:
                    b8:86:49:21:68:18:70:01:e4:79:58:84:6d:bc:9c:
                    7f:9e:b9:2b:03:fb:fa:27:3f:01:08:55:0f:35:8d:
                    a8:ee:30:fa:a2:fe:3b:41:68:93:3b:39:59:04:5a:
                    fe:80:a3:84:3c:81:a9:c6:1d:7e:c2:6a:df:37:8b:
                    35:8c:57:21:1d:f2:d0:39:0f:e1:4d:99:6b:cb:91:
                    94:f1:76:54:c2:9b:28:a6:41:7c:e5:39:55:57:e7:
                    4f:bb:d8:73:22:2c:1d:66:0e:70:82:b9:31:63:7b:
                    ef:8d:02:97:2c:5c:3b:13:b6:92:bd:29:cc:16:80:
                    28:62:e4:d6:95:97:d5:66:48:88:f5:34:03:77:3d:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:39:0B:F2:17:78:8B:6E:54:35:75:81:D0:9D:02:5F:E2:97:54:23
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137372e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fa:ef:d3:15:a1:d9:21:93:de:20:9e:a6:a0:81:d1:fe:e1:
         47:57:06:93:d2:df:7d:f6:97:2b:e5:a1:53:d8:2d:2e:93:07:
         5b:4c:01:34:52:a3:9d:ba:12:42:57:99:37:72:2d:89:a9:2e:
         0b:e6:95:a7:45:a5:03:26:14:59:3d:84:11:ba:61:df:fa:f2:
         07:3c:6d:d8:61:1e:b5:2c:51:d9:48:25:90:08:48:a5:68:e6:
         46:1c:cb:b9:e1:16:ab:b3:f3:d8:b8:d6:e5:1f:30:a3:51:ee:
         5b:8e:3d:28:31:55:a6:48:a5:95:cb:02:aa:58:08:3b:68:29:
         e9:7d:fd:b8:c6:1a:c2:33:c6:6d:ec:d9:63:2c:ce:cd:d0:24:
         c9:b6:cc:bd:5a:f1:72:5a:27:9c:77:19:8a:ba:45:3d:ad:5b:
         c2:da:4c:f7:5d:05:62:17:8a:91:e9:0c:fb:b8:11:11:41:e7:
         58:bb:81:a3:73:36:6f:a9:76:0d:f9:7a:04:2f:b1:08:de:b9:
         7c:15:9a:6e:f4:8d:5c:2f:fa:d0:40:79:9a:29:e4:e9:f8:22:
         7b:47:0f:2b:da:2c:09:bb:4e:24:b6:e1:86:5c:9f:13:5e:04:
         21:26:17:0b:4d:81:58:6b:99:c6:48:f3:12:f9:63:0a:c9:16:
         8c:35:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net