Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138342e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          MQmbg+8W06zvMVlWQ8ViFjn4FX2kCa8d0hrIggeSwCY=
Subject key identifier:   4B:79:D0:25:3D:B7:51:8E:ED:42:25:21:FA:6F:3C:1D:BE:B1:A8:06
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       638A5A7BF507EDAEA32DBBE5317D575C2B4023ED
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:02 +0000
ROA not before:           Tue 07 Feb 2023 19:55:02 +0000
ROA not after:            Tue 06 Feb 2024 20:00:02 +0000
asID:                     262741
IP address blocks:        186.208.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8a:5a:7b:f5:07:ed:ae:a3:2d:bb:e5:31:7d:57:5c:2b:40:23:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:02 2023 GMT
            Not After : Feb  6 20:00:02 2024 GMT
        Subject: CN=4B79D0253DB7518EED422521FA6F3C1DBEB1A806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:18:01:0e:9a:12:d3:f6:d0:d2:46:8b:07:59:
                    12:17:43:d6:42:a6:7e:b1:23:62:d7:34:9a:0d:a2:
                    e0:ec:6a:a3:b7:36:8e:01:34:31:32:37:ad:65:01:
                    e1:0f:62:c2:6a:aa:c6:82:4f:51:fa:b4:05:e3:b0:
                    7b:af:56:5f:f3:7a:ae:b5:e7:5c:d2:2d:a0:9e:f8:
                    34:93:12:e7:37:81:56:3f:4c:e6:56:e5:7c:58:a4:
                    bb:af:cb:11:bf:e2:f4:5f:ac:a4:a9:7f:3f:c8:1a:
                    70:ad:b1:b3:8e:10:e1:90:8f:55:a0:19:72:71:ed:
                    75:b6:f4:a2:69:7a:07:65:fa:e0:c6:d9:de:34:df:
                    02:54:5e:55:65:6b:19:eb:fc:78:23:4d:de:54:d5:
                    0e:c0:1a:be:db:6a:0b:56:ae:2f:1d:26:27:03:79:
                    2b:7f:3b:9d:b0:01:53:98:8f:3c:e0:01:09:cb:82:
                    4d:95:56:f4:ba:77:7c:3a:36:36:58:a5:b2:69:4f:
                    bb:c4:d6:52:dc:f0:46:91:21:4b:d9:f0:01:cb:9e:
                    4a:f5:44:23:ca:52:32:75:cc:92:d9:d3:0e:95:2d:
                    c0:a8:83:2a:97:2e:b4:95:54:1a:45:40:4e:af:f5:
                    f2:0b:4a:f8:96:5c:64:0d:51:2f:bc:15:ec:74:a9:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:D0:25:3D:B7:51:8E:ED:42:25:21:FA:6F:3C:1D:BE:B1:A8:06
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138342e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:d4:79:73:33:2b:6a:2d:2c:a5:fe:62:2f:ce:fe:55:f5:
         0f:8e:8a:69:65:27:3d:b9:dc:39:b0:f9:66:16:99:c8:6e:4a:
         15:50:5c:7c:ac:5b:ba:0f:36:9a:8c:98:1a:b9:00:52:6d:a2:
         d0:d5:e2:e7:a4:37:a7:80:56:91:cd:3b:bc:3f:60:01:dc:4e:
         91:4f:5b:c7:1b:09:99:e2:dc:ed:dd:13:a2:08:a3:bb:3d:d8:
         e4:bb:af:61:37:65:ee:ae:0c:dc:e9:99:51:81:03:bd:2f:4e:
         84:22:1c:89:9b:ef:84:20:ff:32:4b:ea:1e:3f:aa:20:d8:ef:
         a3:fc:5e:91:81:f8:02:1c:8a:ae:0a:e2:65:5d:08:c4:64:9d:
         1e:81:34:8c:73:6f:08:52:a8:33:1c:0b:f1:5a:bc:97:76:a8:
         15:6c:00:b5:5b:e8:ac:ed:c1:d4:4b:2b:0b:4d:34:30:17:36:
         a0:87:b9:d4:ce:b8:48:9f:98:f1:62:5a:53:99:91:2f:77:22:
         fc:39:d0:5c:39:d2:e1:0c:8d:a9:06:78:49:9d:02:6c:02:10:
         9c:09:42:9a:54:f4:bf:94:21:89:e9:f6:36:11:94:b2:da:47:
         80:cc:3d:54:ca:69:99:1d:30:6e:ba:72:a6:74:4d:94:f9:28:
         c3:19:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net