Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          zEwGDEo3a6oSQoscq5cbZJz/rbvtFXW+pyo1r1Mh/d8=
Subject key identifier:   82:47:9F:FC:C4:03:15:E0:55:4E:32:6E:0B:23:0E:E5:30:02:EE:F0
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       35B0CFDF53980931212BC14AC6F5DFAD0083957A
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:07 +0000
ROA not before:           Tue 07 Feb 2023 19:55:07 +0000
ROA not after:            Tue 06 Feb 2024 20:00:07 +0000
asID:                     262741
IP address blocks:        186.208.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b0:cf:df:53:98:09:31:21:2b:c1:4a:c6:f5:df:ad:00:83:95:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:07 2023 GMT
            Not After : Feb  6 20:00:07 2024 GMT
        Subject: CN=82479FFCC40315E0554E326E0B230EE53002EEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:dd:6e:f6:a6:b9:87:f8:7c:76:7d:58:01:
                    e7:60:cc:c0:60:2f:ab:de:5c:b4:1b:ed:b3:c8:96:
                    fa:94:00:88:5c:b3:0e:61:3e:5b:a4:2a:ca:ee:ec:
                    d2:18:d1:29:e4:7f:e1:65:18:97:0f:df:fc:1b:15:
                    68:4e:b3:d0:ce:a2:32:9f:ef:d5:66:da:89:ca:06:
                    26:05:aa:63:ed:7a:de:40:30:70:8c:94:bb:d2:4a:
                    55:cc:4f:f3:49:55:f2:9d:3b:7d:92:98:7e:59:59:
                    ce:55:7d:bb:33:f1:70:6b:62:78:e0:e1:d8:30:ab:
                    02:ad:f3:d8:dc:3a:b2:de:1b:95:20:c4:3b:29:a0:
                    b4:8f:2a:22:0b:a5:1d:2d:ce:da:92:e0:03:d3:db:
                    de:bd:d9:78:cc:0c:a0:a8:65:c8:51:3d:1d:a4:6f:
                    d8:dd:92:89:12:14:f2:f4:15:8f:c4:8f:84:40:0d:
                    ca:c5:17:ad:f7:48:3d:79:ec:0d:0d:2b:14:3d:af:
                    1d:4e:e6:62:2d:2c:e1:08:10:c7:09:c8:b1:19:a9:
                    fb:b9:f0:94:41:1b:48:03:7f:27:ca:27:15:5a:4f:
                    6a:80:66:ec:83:99:70:5d:04:07:cf:53:8d:71:8c:
                    13:9c:a0:62:72:7f:19:96:5a:92:7e:e1:fe:c3:c8:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:9F:FC:C4:03:15:E0:55:4E:32:6E:0B:23:0E:E5:30:02:EE:F0
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3137382e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:82:66:ce:fd:99:da:f1:9c:bb:50:f5:a0:2d:64:65:eb:b1:
         26:62:8a:1b:ef:e6:ce:86:c3:56:29:56:1f:12:7a:56:e6:64:
         d9:b5:71:90:c8:86:a4:96:cf:13:bc:c5:84:c7:aa:ee:02:88:
         e2:e3:00:0f:97:9b:1f:2a:9b:07:a0:2e:4b:f0:c0:b7:ce:a2:
         c1:98:30:fe:2b:f2:48:f0:68:e8:b4:52:58:8f:0a:e6:3a:2a:
         14:6c:a5:8d:74:30:b4:e4:ab:7f:4d:ca:00:d4:b3:43:f8:14:
         52:cc:85:30:eb:bb:06:8f:f5:5d:b3:7f:5c:1e:24:a3:33:17:
         fa:59:43:de:50:e3:62:ed:94:77:0d:54:9c:b0:76:ff:83:47:
         cf:97:c8:d6:6e:f7:67:84:38:73:79:59:aa:7b:7a:7e:2f:d4:
         25:94:40:52:d7:7f:11:09:b6:d7:4f:46:db:00:ef:1f:f5:b4:
         71:7c:a1:d7:9c:2b:fb:da:35:56:6c:a3:78:4a:52:1e:9b:49:
         48:98:2b:ba:d6:5b:30:c1:75:d3:97:9f:f5:e3:70:f6:05:41:
         3f:27:b1:b9:48:7d:23:97:82:75:b4:12:78:86:81:10:86:d3:
         62:42:e5:7f:d9:96:d8:71:62:29:ba:fc:e4:f3:5a:e2:f1:c9:
         41:0c:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net