Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138302e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          hDRpQo45Pe3Pa6e9YqdbMQ5X3d8ANAlN+HXZNcS7ito=
Subject key identifier:   27:CA:37:79:16:0F:C1:48:22:87:76:80:20:33:39:08:06:D5:53:E6
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       454CADBE088BA2C789BC22F2FE2F0AD905E74D9A
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:06 +0000
ROA not before:           Tue 07 Feb 2023 19:55:06 +0000
ROA not after:            Tue 06 Feb 2024 20:00:06 +0000
asID:                     262741
IP address blocks:        186.208.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4c:ad:be:08:8b:a2:c7:89:bc:22:f2:fe:2f:0a:d9:05:e7:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:06 2023 GMT
            Not After : Feb  6 20:00:06 2024 GMT
        Subject: CN=27CA3779160FC148228776802033390806D553E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:d1:d3:9d:7d:18:bc:20:45:43:ab:d2:77:
                    41:7c:60:0c:59:6a:db:3b:75:4e:d9:2c:92:7b:90:
                    58:29:07:ec:3d:a4:50:d9:af:56:d1:6d:b4:9b:d5:
                    78:de:e0:83:7f:b4:c9:9b:25:ab:a3:db:c4:81:13:
                    d3:e9:8e:8c:a7:48:58:9e:78:eb:01:0e:1e:f6:bc:
                    f0:f0:8d:04:6f:20:3f:e2:68:84:82:62:03:eb:62:
                    b6:0b:10:9e:42:76:48:1b:7b:e0:f0:07:7f:76:51:
                    22:4d:21:f3:4e:c6:f8:0a:44:08:39:e0:d4:80:7b:
                    15:31:f6:12:ca:4b:cd:45:a4:bd:62:27:6f:3b:69:
                    f9:7d:b7:74:43:75:3c:69:67:6e:f7:f8:18:90:f6:
                    85:bd:b6:ca:1e:d0:47:37:80:7f:7b:36:b5:d9:40:
                    b2:be:f9:bf:1e:40:0f:c0:4e:89:6c:19:dc:65:fd:
                    de:39:ca:17:da:37:aa:85:b9:7d:af:1a:16:94:c3:
                    b5:ae:50:a8:43:a0:00:a3:5a:03:4f:c7:85:ec:93:
                    b1:86:e6:28:f1:df:22:e1:c5:86:4b:db:8c:8d:08:
                    1a:1c:ae:43:c8:b6:5e:ab:9d:84:73:a8:e1:64:6d:
                    23:5f:cf:75:16:ac:4d:87:d6:09:b4:52:4f:c4:7c:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:37:79:16:0F:C1:48:22:87:76:80:20:33:39:08:06:D5:53:E6
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:6a:1d:df:6a:8e:19:46:7d:6a:49:30:a5:45:61:c8:64:
         c7:62:a7:4d:4e:f6:44:0f:49:de:e9:a7:14:6c:ac:b9:ed:45:
         1a:16:24:81:7e:1d:b2:a4:ca:da:f3:3b:77:a1:a5:3d:90:da:
         5c:f9:ca:3d:03:c4:a3:37:f2:1a:b3:90:29:1c:47:d6:f7:46:
         b0:70:e1:fc:a9:3c:4a:0e:ce:7f:88:4f:06:47:47:d1:bf:5e:
         bb:82:0f:0d:db:b2:50:e1:e9:00:2d:e6:3d:40:58:d2:6d:7f:
         12:58:ce:0a:e8:f2:85:ea:b3:a8:3f:c8:5a:3d:ee:83:c2:5a:
         e2:87:51:44:15:e2:70:da:55:0f:37:93:31:dd:ee:34:1d:03:
         0f:89:4f:7a:8b:89:01:49:df:0b:e1:d9:5f:80:61:9f:c7:70:
         89:84:5a:d8:b7:b6:54:ee:e2:a2:a6:80:88:62:7e:e8:49:0f:
         a0:dd:85:fb:bf:fb:91:2c:4e:36:6b:4e:37:bf:3f:d4:89:20:
         e0:ac:9f:99:5f:84:80:d5:18:7a:25:14:a5:44:67:32:c0:f9:
         2b:24:f8:fb:ad:9f:6d:25:ad:6d:8b:3a:15:3b:5d:1c:18:c9:
         c5:e6:96:37:49:8b:da:41:58:a4:8e:09:6d:e7:d1:14:a8:69:
         f6:47:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net