Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa
File:                     3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa (raw, json)
Hash identifier:          SeTr+6HycryCEG+bVPSTSi+HUdZ/2dkA/olWh1h2p8o=
Subject key identifier:   AB:9A:D5:12:66:CC:A9:8B:B8:A0:70:F8:53:F3:27:20:42:56:75:07
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       6F07EDE3B257BCE37873F85F3B6423F1772AF49C
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:07 +0000
ROA not before:           Tue 07 Feb 2023 19:55:07 +0000
ROA not after:            Tue 06 Feb 2024 20:00:07 +0000
asID:                     262741
IP address blocks:        186.208.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:07:ed:e3:b2:57:bc:e3:78:73:f8:5f:3b:64:23:f1:77:2a:f4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:07 2023 GMT
            Not After : Feb  6 20:00:07 2024 GMT
        Subject: CN=AB9AD51266CCA98BB8A070F853F3272042567507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:0e:21:9e:f0:4f:86:03:99:37:cd:51:be:
                    54:cb:de:ef:b9:05:ef:46:6b:12:4d:d7:11:3f:a6:
                    be:c9:35:9c:bc:4a:dd:cb:2a:79:a6:4f:af:56:ed:
                    fb:58:c5:6e:68:73:12:b5:89:2c:de:82:35:4c:11:
                    57:1f:5a:ab:16:f2:89:62:44:91:04:58:57:b1:2e:
                    04:93:de:b1:c3:d5:08:50:8f:35:c2:cc:ad:3c:4f:
                    2a:4c:cb:97:52:28:d2:e8:56:c9:28:f3:66:99:81:
                    2c:bf:c4:d0:9f:48:92:0f:95:8e:fc:c1:c3:80:59:
                    44:c6:9b:bf:d2:3a:71:cb:c8:f9:f2:9a:91:02:05:
                    2b:8c:13:5f:4c:f3:9c:c0:79:ab:c0:8e:58:a5:c7:
                    f0:43:63:b8:3d:9b:50:68:b4:a5:aa:51:91:71:63:
                    37:ad:15:08:c3:41:a8:b8:5c:ba:d3:ad:2d:30:3c:
                    c9:f9:20:e2:73:7c:1e:a0:f3:cf:0f:a9:43:bb:40:
                    bb:0e:47:47:7b:1d:53:fd:2d:87:ef:58:8a:79:3b:
                    61:6f:5c:f2:9b:69:fe:39:83:cf:fd:f8:12:87:e8:
                    9c:3f:b8:8c:16:2e:c8:8b:6d:aa:cb:06:88:25:95:
                    20:fa:88:84:73:92:9f:f0:b1:72:87:c1:f6:a7:bb:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9A:D5:12:66:CC:A9:8B:B8:A0:70:F8:53:F3:27:20:42:56:75:07
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32312d3231203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:cd:64:0e:fe:52:4f:46:25:97:e4:cf:5a:7c:cf:9c:67:21:
         c1:70:3d:cb:6b:ab:6e:75:29:05:3b:51:63:d3:f3:3b:f8:20:
         80:8e:d7:ff:c5:91:cf:e9:13:25:54:dd:1c:8c:06:ef:d6:6d:
         d1:5a:fb:a9:62:11:3b:15:dc:25:d4:68:ba:bc:ab:63:93:0a:
         dc:6d:d9:50:67:25:48:b8:d8:b1:4d:81:24:a6:7a:b1:b1:58:
         dc:d6:bc:ea:be:8c:a9:4d:80:5c:7f:5b:73:86:7a:1f:63:37:
         5c:de:e0:8b:e5:d4:43:a2:c3:a6:bb:8f:09:a1:69:f8:24:6e:
         79:a7:7e:2e:65:37:03:79:e4:4b:41:a8:f1:f6:6b:6c:a5:2a:
         3a:57:84:7d:0c:d6:ed:11:e5:b1:0f:a7:86:24:2f:1d:0a:15:
         c0:6c:ec:f4:a7:7a:bf:19:91:e0:8a:13:82:0f:8a:25:bf:eb:
         5d:51:1e:e7:1e:82:77:c0:ac:6a:27:5e:f3:fa:44:d0:10:14:
         5e:e8:71:1c:ac:05:58:7b:95:ba:17:aa:29:2e:c3:05:d6:96:
         e3:bc:5c:e8:8a:1a:0b:f0:ae:28:41:4d:b8:38:7f:e7:88:f9:
         d6:9f:65:66:55:2b:bf:9e:11:89:26:26:3a:6c:32:7f:30:a2:
         c5:f8:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net