Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          ZlF4G4tk8xScT/DNH8LOO05XJbhlMmPkghNhshpkw94=
Subject key identifier:   3C:BF:B8:94:A0:C4:80:29:F7:E2:CF:3C:35:E3:C0:9E:D6:0D:FF:CC
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       31D29D657967762515544E87759C5AC9167472B5
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:03 +0000
ROA not before:           Tue 07 Feb 2023 19:55:03 +0000
ROA not after:            Tue 06 Feb 2024 20:00:03 +0000
asID:                     262741
IP address blocks:        186.208.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d2:9d:65:79:67:76:25:15:54:4e:87:75:9c:5a:c9:16:74:72:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:03 2023 GMT
            Not After : Feb  6 20:00:03 2024 GMT
        Subject: CN=3CBFB894A0C48029F7E2CF3C35E3C09ED60DFFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b6:1b:fd:e8:80:83:59:c3:9b:16:a5:0c:3a:
                    c4:61:30:3e:79:79:ae:fe:3d:65:f3:a1:28:9e:5c:
                    31:ea:5c:f7:fe:68:ba:9c:d6:dd:2a:90:9f:5d:42:
                    e9:5d:16:c8:8f:aa:df:63:2d:94:c3:58:73:c9:30:
                    eb:d3:b0:8e:06:06:1a:52:66:ce:d6:f0:62:ef:d0:
                    e3:94:db:7d:d4:b4:4c:be:85:01:6b:3a:c7:69:15:
                    3b:06:d9:27:90:40:04:75:7d:47:1a:33:73:b5:9b:
                    a6:04:d5:12:78:b4:e8:51:3e:ee:22:bf:6e:ab:b2:
                    17:bd:c5:c1:c3:3d:4d:60:7c:6a:c9:ed:4e:70:dc:
                    45:33:6c:fd:01:51:f4:0e:1a:d2:97:2a:dd:08:db:
                    7f:40:f6:a5:4e:3d:6c:02:8d:28:93:ba:a0:75:8b:
                    26:e5:8f:5a:e7:3c:21:1c:81:8c:02:d2:53:05:6a:
                    fb:b1:7c:ca:0b:94:84:d2:10:ee:24:52:4c:55:da:
                    85:09:b1:e4:09:e4:53:74:84:4a:63:28:20:6b:30:
                    5a:a8:61:1d:e0:47:d7:81:e1:41:fc:6c:e0:30:b7:
                    78:f3:c4:62:35:cf:d6:8e:a7:fb:71:d3:ce:65:98:
                    4f:f8:55:f2:4e:d2:04:a6:a8:63:b7:f9:82:8a:2e:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:B8:94:A0:C4:80:29:F7:E2:CF:3C:35:E3:C0:9E:D6:0D:FF:CC
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138302e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:27:ed:2a:59:f3:1c:3a:17:15:72:1c:4c:8f:68:a5:8c:
         01:c2:20:dc:7a:5a:5a:bf:8e:cf:37:f7:7b:49:43:66:a2:52:
         01:85:b3:2d:fa:f1:73:a9:90:6c:0c:09:13:bd:57:7d:ed:ae:
         16:55:41:c7:ad:20:0c:ef:62:c4:f1:86:c2:eb:f1:f4:51:a9:
         9a:9d:41:2b:b4:48:01:d1:b7:39:fb:42:1e:7f:04:88:2b:a2:
         7d:9b:c2:54:53:47:00:6d:25:a3:6e:50:4f:eb:8a:9b:09:ac:
         88:cc:b9:83:f2:f7:eb:72:34:25:39:d5:f5:1b:bd:75:e8:fe:
         a7:4a:fe:43:48:8a:a8:6b:30:70:f4:7f:92:2a:a1:e6:d4:41:
         8b:55:1d:84:dc:a9:11:97:03:8b:4a:8c:b9:80:a1:53:31:31:
         e0:eb:d5:28:40:1c:87:fd:a5:e5:f2:5a:9d:fb:bd:ff:ae:dd:
         03:d9:c7:16:f8:cc:16:98:e0:79:79:4a:70:70:f8:f8:f2:d9:
         33:a4:ee:c1:d8:47:eb:9c:55:e5:a5:6b:25:be:c4:04:17:bf:
         f3:49:b1:be:c3:c6:a9:ce:f7:e5:4c:1e:87:e7:1c:83:92:dd:
         48:9c:b5:9b:e8:93:be:4c:0d:d7:0f:f1:de:20:d1:14:86:e7:
         63:c1:99:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net