Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          1qgyveQ6jCeddPMRC2AtKo5LjM2gdk7UY0mAM/kBXOM=
Subject key identifier:   24:84:B8:2D:B6:AE:E0:42:AD:97:C0:BB:CC:32:23:E9:84:6D:17:ED
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       0AE125A13DFCEA3B137A041F7D80259BB31B5555
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:02 +0000
ROA not before:           Tue 07 Feb 2023 19:55:02 +0000
ROA not after:            Tue 06 Feb 2024 20:00:02 +0000
asID:                     262741
IP address blocks:        186.208.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:25:a1:3d:fc:ea:3b:13:7a:04:1f:7d:80:25:9b:b3:1b:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:02 2023 GMT
            Not After : Feb  6 20:00:02 2024 GMT
        Subject: CN=2484B82DB6AEE042AD97C0BBCC3223E9846D17ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:b3:e3:b4:2d:34:02:92:b4:e2:56:54:17:
                    9f:96:99:8e:54:e8:a4:d1:5b:e4:ab:70:c0:9b:71:
                    b4:71:f7:1d:c7:1e:58:b3:6c:f5:eb:8a:f1:9f:69:
                    14:a8:73:53:6b:9c:8b:36:37:ee:76:d6:15:7f:96:
                    ec:d1:2a:95:ff:fe:75:43:88:2b:8d:a5:b9:ad:6c:
                    59:db:7b:14:d2:e2:42:d0:96:9e:f3:2c:f8:12:b2:
                    5f:54:4b:6d:52:8a:03:c3:ec:05:57:90:24:09:3e:
                    38:3c:9e:45:c8:3d:b4:25:a4:16:90:a4:6f:c6:3d:
                    df:9e:5a:a8:8b:53:67:24:db:1a:a4:a0:78:a6:c9:
                    92:96:4e:a5:43:3d:dd:c6:f1:24:c3:8c:a9:fe:65:
                    fe:c6:ea:7c:ed:d1:cf:66:48:c2:06:f8:08:5e:5a:
                    28:4b:9e:db:ec:41:6f:a6:a0:24:9e:1d:e1:5f:4e:
                    de:7a:b8:7d:e2:ab:35:59:88:3d:89:99:ed:dd:67:
                    af:5e:04:94:37:f3:70:aa:18:c4:63:83:de:5f:cb:
                    6d:ec:28:7a:0c:57:e8:ee:38:c5:6e:6b:b3:46:b1:
                    02:1c:d3:66:73:d2:c9:a1:e8:a7:4b:1c:ad:48:28:
                    ff:ea:e6:f8:65:1d:12:6a:8c:62:6f:31:ea:1c:c7:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:84:B8:2D:B6:AE:E0:42:AD:97:C0:BB:CC:32:23:E9:84:6D:17:ED
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138332e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:03:0e:00:33:c6:17:a1:48:4e:2e:21:73:76:ef:62:4c:22:
         9a:cc:30:c6:c2:ef:81:60:53:15:ad:b6:66:b9:af:3e:9c:8a:
         39:a5:98:98:bf:26:fa:87:1e:d7:ed:47:e0:78:d1:12:c6:6b:
         47:7a:21:42:45:e8:45:0f:c6:86:db:f3:67:2e:71:92:71:20:
         3a:9b:5a:d0:94:fb:32:12:6e:90:fe:6c:07:06:46:41:01:b6:
         90:3a:15:1b:88:ad:29:79:4d:4b:c4:8a:60:7d:ae:9d:32:19:
         ca:8b:e6:8f:a9:60:87:e3:a3:ef:f9:db:e0:a4:1a:09:9a:e9:
         e8:b0:9f:a4:4c:47:52:a7:63:1e:ab:e6:62:19:98:1f:74:9d:
         08:cf:d3:2a:63:fa:34:e6:92:3b:6e:d8:69:b9:32:68:a6:01:
         7b:d6:82:db:65:1d:1c:62:80:1f:70:1a:1e:d7:e8:ac:26:69:
         40:35:19:51:1e:43:6c:8f:63:44:bb:fd:05:66:68:b9:e7:06:
         43:8c:4c:a5:09:1b:85:6f:a9:e2:da:68:40:91:e8:c2:c7:44:
         7d:8e:f7:3b:9b:38:3d:c1:43:ff:df:8b:c8:ae:f0:29:6f:ad:
         69:4d:89:96:8e:db:ef:0a:e7:6e:0a:c0:14:38:86:4c:0e:52:
         4a:4f:16:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCuEloT386jsTegQffYAlm7MbVVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4RUY5QkZERDIyMERCMjcyNTRDODgxQ0E3QUZFNDgw
M0MxMDg0ODAeFw0yMzAyMDcxOTU1MDJaFw0yNDAyMDYyMDAwMDJaMDMxMTAvBgNV
BAMTKDI0ODRCODJEQjZBRUUwNDJBRDk3QzBCQkNDMzIyM0U5ODQ2RDE3RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaLPjtC00ApK04lZUF5+WmY5U
6KTRW+SrcMCbcbRx9x3HHlizbPXrivGfaRSoc1NrnIs2N+521hV/luzRKpX//nVD
iCuNpbmtbFnbexTS4kLQlp7zLPgSsl9US21SigPD7AVXkCQJPjg8nkXIPbQlpBaQ
pG/GPd+eWqiLU2ck2xqkoHimyZKWTqVDPd3G8STDjKn+Zf7G6nzt0c9mSMIG+Ahe
WihLntvsQW+moCSeHeFfTt56uH3iqzVZiD2Jme3dZ69eBJQ383CqGMRjg95fy23s
KHoMV+juOMVua7NGsQIc02Zz0smh6KdLHK1IKP/q5vhlHRJqjGJvMeocxzjbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJIS4Lbau4EKtl8C7zDIj6YRtF+0wHwYDVR0j
BBgwFoAUBI75v90iDbJyVMiBynr+SAPBCEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ21uSFJHWnpIQUJoeWh6eTVYUFhzNnF6VjVIeHhhMUFvRzN4cG5laUJj
VzEvMC8wNDhFRjlCRkREMjIwREIyNzI1NEM4ODFDQTdBRkU0ODAzQzEwODQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0OEVGOUJGREQyMjBEQjI3
MjU0Qzg4MUNBN0FGRTQ4MDNDMTA4NDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NtbkhSR1p6SEFCaHloenk1WFBYczZxelY1SHh4YTFBb0czeHBuZWlCY1cxLzAv
MzEzODM2MmUzMjMwMzgyZTMxMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQtzANBgkqhkiG9w0BAQsFAAOCAQEAYwMO
ADPGF6FITi4hc3bvYkwimswwxsLvgWBTFa22ZrmvPpyKOaWYmL8m+oce1+1H4HjR
EsZrR3ohQkXoRQ/GhtvzZy5xknEgOpta0JT7MhJukP5sBwZGQQG2kDoVG4itKXlN
S8SKYH2unTIZyovmj6lgh+Oj7/nb4KQaCZrp6LCfpExHUqdjHqvmYhmYH3SdCM/T
KmP6NOaSO27YabkyaKYBe9aC22UdHGKAH3AaHtforCZpQDUZUR5DbI9jRLv9BWZo
uecGQ4xMpQkbhW+p4tpoQJHowsdEfY73O5s4PcFD/9+LyK7wKW+taU2Jlo7b7wrn
bgrAFDiGTA5SSk8W7Q==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net