Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          Fx2OpVZEsFPUrFRGrvSyTHWW03j9TIDP9J3tLKpGHsE=
Subject key identifier:   9B:85:5C:EF:56:87:44:BF:24:83:80:11:77:98:9A:D5:58:65:80:62
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       66EA7E0F33FDE583B4FE3F627A6A4CD91E35962A
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        186.208.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ea:7e:0f:33:fd:e5:83:b4:fe:3f:62:7a:6a:4c:d9:1e:35:96:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=9B855CEF568744BF2483801177989AD558658062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c5:99:39:55:53:29:2a:19:b1:4c:5c:94:dc:
                    94:31:8f:c2:3a:0d:89:eb:e3:4c:c6:41:21:53:72:
                    ee:ca:90:84:c6:7f:18:24:ad:b5:e6:e4:fa:d4:23:
                    38:e8:9d:50:2f:f6:26:0d:0e:7d:68:7a:dc:9c:ab:
                    6d:8e:bd:39:aa:73:d3:1c:46:3e:02:11:51:61:72:
                    2f:55:f7:84:0a:88:22:55:c5:d2:55:bc:d6:18:b5:
                    17:0e:53:8d:8c:2a:7e:13:e9:a5:40:8d:6c:bb:2b:
                    12:bf:5e:5b:86:e3:7a:ad:eb:cc:26:06:b0:98:f6:
                    17:cd:b4:91:a0:d9:1d:33:87:3d:29:ce:c4:ca:b0:
                    dd:e0:a2:7d:00:63:78:2c:45:fa:55:e2:c5:c4:21:
                    cf:97:bd:86:70:e9:8f:66:0d:7e:13:06:a4:34:fd:
                    fe:68:ee:2a:15:b9:dd:00:ed:96:74:42:45:7d:76:
                    ad:ed:d6:67:80:b9:bc:81:2a:c5:08:e9:2c:29:c1:
                    da:f6:9e:9b:9a:b4:16:86:68:a8:f3:dc:4d:e9:f0:
                    68:9d:be:1b:07:ad:a4:25:5b:4b:e9:7f:f4:00:8b:
                    bc:d9:cf:79:08:88:14:ba:3c:87:2d:ed:3d:72:90:
                    a3:5b:a3:34:b8:82:31:d3:5c:06:38:c2:e9:90:f9:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:85:5C:EF:56:87:44:BF:24:83:80:11:77:98:9A:D5:58:65:80:62
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:15:fb:a8:b5:f9:a3:72:f9:1f:68:1e:18:a6:00:64:bd:d6:
         c1:8b:f2:85:42:67:da:71:39:52:bb:99:97:b2:67:e6:17:af:
         8a:b4:85:6e:34:69:e2:eb:52:6a:f0:c9:17:b3:0d:bb:41:1e:
         a5:f1:04:cd:30:03:e9:6a:e8:24:3b:34:b8:b7:13:7d:61:6b:
         9b:1b:5e:dc:59:13:2b:57:67:b2:d0:d1:dc:c6:c0:82:be:ac:
         51:29:d4:6e:ae:fd:35:48:be:cb:9f:01:39:86:08:84:e4:a2:
         f2:f1:b8:7e:d1:cc:94:cd:0c:61:11:d4:b0:6b:a6:6f:47:ad:
         c4:13:58:09:71:6b:fb:9d:c8:12:47:4a:43:cf:e0:45:4d:60:
         3f:2b:aa:64:09:47:83:e2:fc:d7:b6:f0:50:b9:c9:e5:e6:d4:
         9b:12:33:d9:ba:c0:a2:43:e6:ae:be:a7:fe:5e:09:c7:61:e7:
         57:89:40:02:35:c3:4e:96:d9:45:02:17:c6:59:a3:5d:8f:c6:
         3d:d0:0e:8e:8c:30:77:fc:f4:1b:c6:db:29:e7:8c:f1:f4:52:
         40:42:2d:1b:1e:41:b1:4b:37:30:34:b9:20:40:07:c2:a6:ee:
         30:91:6f:44:5c:0e:b3:96:f0:82:5b:f4:1f:e8:f7:b0:bf:fb:
         06:66:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net