Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138322e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          fv5Yzcm+CKr7vPt+Fm4aEHmw2MrfeyqXOuxDPSiw/+U=
Subject key identifier:   EF:23:75:50:2A:FC:69:44:B7:E2:0A:26:85:7F:0E:D5:81:BC:4B:F2
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       700E44260E91665292806B075CDBBEE6005AB6FC
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:05 +0000
ROA not before:           Tue 07 Feb 2023 19:55:05 +0000
ROA not after:            Tue 06 Feb 2024 20:00:05 +0000
asID:                     262741
IP address blocks:        186.208.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:44:26:0e:91:66:52:92:80:6b:07:5c:db:be:e6:00:5a:b6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:05 2023 GMT
            Not After : Feb  6 20:00:05 2024 GMT
        Subject: CN=EF2375502AFC6944B7E20A26857F0ED581BC4BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:e2:49:03:d7:06:7a:19:bd:16:05:fd:3d:
                    67:c7:3a:b4:13:ab:2f:41:f7:3c:34:5a:81:81:43:
                    bf:b8:0d:bf:60:84:5e:0b:d0:dd:7a:80:85:e8:f7:
                    55:fa:5b:e7:7c:81:bd:fe:fb:ee:89:93:af:77:65:
                    ef:30:b9:67:a6:d5:0d:8e:1c:d9:54:ec:e7:d1:05:
                    f5:20:ee:42:9e:ed:b7:1c:f4:d8:5e:9e:3e:e2:ea:
                    36:a2:2c:c4:ec:e0:b8:73:0a:e7:25:5c:f6:29:f5:
                    14:be:f9:db:87:3c:8b:a1:65:fc:17:92:03:e1:c3:
                    76:59:7b:e3:8b:0e:69:45:31:88:eb:92:db:c7:06:
                    f3:fe:5c:46:be:79:fd:23:ce:15:70:a0:38:cb:8c:
                    63:00:80:5e:b3:7d:cc:e6:87:0b:dd:52:8b:6c:5d:
                    35:e8:33:b3:d1:ac:fc:73:f1:5e:20:56:af:88:97:
                    db:ae:4e:da:ce:93:8d:3d:11:e4:f6:ea:91:f2:05:
                    87:4f:01:6e:da:3a:8b:88:96:d2:00:55:f2:4b:e1:
                    d5:fd:a4:1d:31:41:29:de:63:43:93:0e:22:08:91:
                    80:13:80:a6:e6:de:69:98:b0:65:73:21:26:91:0a:
                    7e:96:be:5f:d1:b1:e5:7a:f7:07:1c:5b:9b:22:25:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:23:75:50:2A:FC:69:44:B7:E2:0A:26:85:7F:0E:D5:81:BC:4B:F2
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138322e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:41:a7:18:99:6c:06:9c:40:1f:1d:cd:d1:79:5d:f4:8f:
         13:f4:b4:6e:93:c9:84:73:87:c8:35:b9:c5:d2:de:62:23:d5:
         b8:1a:a1:4b:ed:32:43:80:5b:9b:20:f6:d2:4e:8a:0f:8d:e6:
         80:50:db:c2:11:1e:d6:d8:97:d0:ed:fc:51:51:c8:9c:5e:ee:
         9e:e3:14:c7:66:b5:f0:55:af:9e:1c:40:21:61:37:e9:fc:8a:
         5f:11:65:6f:cb:11:3f:af:23:c0:37:3f:52:ac:d8:b1:2b:53:
         be:b9:a6:25:e3:a5:77:05:2b:d8:92:a9:cd:d0:16:3c:03:77:
         00:c9:4b:2e:62:42:20:79:c8:b9:0c:bd:f0:65:c0:c3:3f:17:
         e3:6e:a6:86:66:aa:88:1e:3e:8d:e6:43:a6:d2:e3:5d:15:1f:
         40:c9:56:02:6a:e6:7c:60:41:48:74:e7:3b:9f:7c:e5:a3:78:
         0c:95:17:b5:53:68:2a:26:02:0f:a1:98:02:23:29:e1:76:0b:
         b5:44:64:f2:a6:00:f3:b3:bc:51:f5:91:66:47:59:57:c0:ff:
         80:67:f8:b6:83:e5:08:af:43:bf:d3:7f:08:6c:ea:23:6a:44:
         dd:5b:9b:73:ba:ef:11:88:29:13:9d:ed:ad:e5:ba:28:a3:d2:
         c2:63:1d:4a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcA5EJg6RZlKSgGsHXNu+5gBatvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDVaFw0yNDAyMDYyMDAwMDVaMDMxMTAvBgNV
BAMTKEVGMjM3NTUwMkFGQzY5NDRCN0UyMEEyNjg1N0YwRUQ1ODFCQzRCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VeJJA9cGehm9FgX9PWfHOrQT
qy9B9zw0WoGBQ7+4Db9ghF4L0N16gIXo91X6W+d8gb3+++6Jk693Ze8wuWem1Q2O
HNlU7OfRBfUg7kKe7bcc9Nhenj7i6jaiLMTs4LhzCuclXPYp9RS++duHPIuhZfwX
kgPhw3ZZe+OLDmlFMYjrktvHBvP+XEa+ef0jzhVwoDjLjGMAgF6zfczmhwvdUots
XTXoM7PRrPxz8V4gVq+Il9uuTtrOk409EeT26pHyBYdPAW7aOouIltIAVfJL4dX9
pB0xQSneY0OTDiIIkYATgKbm3mmYsGVzISaRCn6Wvl/RseV69wccW5siJUa/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7yN1UCr8aUS34gomhX8O1YG8S/IwHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQtjANBgkqhkiG9w0BAQsFAAOCAQEAKilB
pxiZbAacQB8dzdF5XfSPE/S0bpPJhHOHyDW5xdLeYiPVuBqhS+0yQ4BbmyD20k6K
D43mgFDbwhEe1tiX0O38UVHInF7unuMUx2a18FWvnhxAIWE36fyKXxFlb8sRP68j
wDc/UqzYsStTvrmmJeOldwUr2JKpzdAWPAN3AMlLLmJCIHnIuQy98GXAwz8X426m
hmaqiB4+jeZDptLjXRUfQMlWAmrmfGBBSHTnO5985aN4DJUXtVNoKiYCD6GYAiMp
4XYLtURk8qYA87O8UfWRZkdZV8D/gGf4toPlCK9Dv9N/CGzqI2pE3Vubc7rvEYgp
E53treW6KKPSwmMdSg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net