Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138312e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138312e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          wSiM9oe2VNuZeeoOLVwDWRsP2RLsIP7iymykJvjYpzI=
Subject key identifier:   7F:A5:B6:D6:91:93:A2:C0:9A:AB:7F:14:AE:A9:11:6B:02:86:33:08
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       3436F3174BBDCA8AED493A8BAF3C0452A397420A
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138312e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        186.208.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:36:f3:17:4b:bd:ca:8a:ed:49:3a:8b:af:3c:04:52:a3:97:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=7FA5B6D69193A2C09AAB7F14AEA9116B02863308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:f2:37:03:b7:f5:41:dd:06:dc:1b:0c:24:
                    73:72:06:76:a3:3f:25:86:6b:c3:5a:d5:cd:69:63:
                    d3:35:16:ea:1d:85:83:39:8b:75:95:79:95:b4:d6:
                    8c:2d:4c:fd:52:9f:e3:c7:9a:00:47:fe:e9:ec:b5:
                    0c:0c:ce:fc:9b:5f:34:18:3a:ee:4e:c2:03:32:76:
                    7d:ef:09:3b:36:2b:35:43:04:a6:e1:cd:4d:47:ad:
                    bc:ad:0b:4f:97:13:8c:7b:13:2e:f2:1d:4b:10:8d:
                    64:28:d7:6a:06:9a:20:35:df:04:35:ed:36:61:97:
                    01:46:ea:b2:1c:58:6a:0f:41:a8:ac:e8:a8:23:f2:
                    7c:9b:0a:0e:9e:d7:36:de:01:c2:ec:b0:56:2a:02:
                    26:0e:0a:a2:1e:c4:1b:87:e4:84:78:a8:8f:96:2a:
                    90:8d:53:48:b4:ea:1e:a3:87:3e:8d:97:cd:22:31:
                    06:b4:36:13:7f:2f:bb:d3:66:77:f5:eb:4c:ba:0e:
                    6b:7a:c1:e3:37:97:32:01:43:0f:20:e9:0e:38:95:
                    3c:29:7b:ab:34:c2:44:ca:b4:ae:60:a9:29:8b:ae:
                    b4:f3:e2:bf:14:90:f5:ab:54:ca:5e:d1:02:7c:66:
                    92:2e:92:e1:a1:4e:d7:b2:3c:ae:d5:e1:db:02:c8:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A5:B6:D6:91:93:A2:C0:9A:AB:7F:14:AE:A9:11:6B:02:86:33:08
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138312e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:78:07:82:1f:31:7f:8a:ce:d2:53:46:ce:c0:21:ee:bd:d8:
         47:c7:4a:12:b1:da:55:f9:41:08:f5:0f:61:a1:db:5a:11:5b:
         7a:76:26:7e:76:61:8c:b2:7d:f3:19:d9:93:b9:f0:06:e4:6f:
         9e:d3:af:76:29:8c:85:f2:1b:41:56:44:03:bb:3e:4f:0d:4e:
         98:b5:ff:de:02:bf:ab:f0:0e:31:71:4a:e1:5b:40:fa:99:f6:
         05:4c:ca:fc:b1:1b:7d:9b:5e:fd:4c:ae:fd:a5:d9:3d:75:9a:
         1a:05:41:7f:16:ce:3c:5d:81:52:de:12:9b:3e:7b:bf:1e:92:
         0c:c7:c6:10:39:a1:6f:4f:5b:26:6f:a1:be:21:37:d7:78:85:
         48:1b:01:cb:1b:71:73:e3:cb:4f:0d:7e:61:18:ba:d5:d7:a3:
         43:e8:9a:30:cd:27:38:f6:3d:ed:65:a0:81:9e:60:49:7a:ce:
         54:fb:da:f6:b4:5b:66:fe:d4:55:5a:ae:39:03:46:94:be:69:
         bf:ea:d3:c0:4f:07:db:92:4e:a0:17:87:44:c2:76:23:84:8a:
         c2:f3:2c:c4:67:ec:0e:14:c6:09:bf:91:23:e7:f4:82:74:aa:
         ca:e2:4d:2f:56:0f:5c:31:5d:a3:c5:51:22:de:7c:27:10:85:
         11:8c:c0:9e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNDbzF0u9yortSTqLrzwEUqOXQgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDRaFw0yNDAyMDYyMDAwMDRaMDMxMTAvBgNV
BAMTKDdGQTVCNkQ2OTE5M0EyQzA5QUFCN0YxNEFFQTkxMTZCMDI4NjMzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBivI3A7f1Qd0G3BsMJHNyBnaj
PyWGa8Na1c1pY9M1FuodhYM5i3WVeZW01owtTP1Sn+PHmgBH/unstQwMzvybXzQY
Ou5OwgMydn3vCTs2KzVDBKbhzU1HrbytC0+XE4x7Ey7yHUsQjWQo12oGmiA13wQ1
7TZhlwFG6rIcWGoPQais6Kgj8nybCg6e1zbeAcLssFYqAiYOCqIexBuH5IR4qI+W
KpCNU0i06h6jhz6Nl80iMQa0NhN/L7vTZnf160y6Dmt6weM3lzIBQw8g6Q44lTwp
e6s0wkTKtK5gqSmLrrTz4r8UkPWrVMpe0QJ8ZpIukuGhTteyPK7V4dsCyC1zAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUf6W21pGTosCaq38UrqkRawKGMwgwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQtTANBgkqhkiG9w0BAQsFAAOCAQEAlHgH
gh8xf4rO0lNGzsAh7r3YR8dKErHaVflBCPUPYaHbWhFbenYmfnZhjLJ98xnZk7nw
BuRvntOvdimMhfIbQVZEA7s+Tw1OmLX/3gK/q/AOMXFK4VtA+pn2BUzK/LEbfZte
/Uyu/aXZPXWaGgVBfxbOPF2BUt4Smz57vx6SDMfGEDmhb09bJm+hviE313iFSBsB
yxtxc+PLTw1+YRi61dejQ+iaMM0nOPY97WWggZ5gSXrOVPva9rRbZv7UVVquOQNG
lL5pv+rTwE8H25JOoBeHRMJ2I4SKwvMsxGfsDhTGCb+RI+f0gnSqyuJNL1YPXDFd
o8VRIt58JxCFEYzAng==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net