Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          UAVGSzjAMUZKggypvcTZnh9xdweK8oWpArgQSswCn/M=
Subject key identifier:   4E:9C:62:63:09:68:2E:FC:F8:E0:E2:A3:79:81:A8:0D:5F:98:79:DE
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       3ADC5C64B311E278E273514EE38AA3FDD7864931
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:01 +0000
ROA not before:           Tue 07 Feb 2023 19:55:01 +0000
ROA not after:            Tue 06 Feb 2024 20:00:01 +0000
asID:                     262741
IP address blocks:        186.208.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dc:5c:64:b3:11:e2:78:e2:73:51:4e:e3:8a:a3:fd:d7:86:49:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:01 2023 GMT
            Not After : Feb  6 20:00:01 2024 GMT
        Subject: CN=4E9C626309682EFCF8E0E2A37981A80D5F9879DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:8f:37:b2:1a:76:47:32:9f:10:43:aa:3a:
                    03:39:ba:97:6e:88:e8:30:2a:86:8d:fe:82:e7:6f:
                    1a:47:bf:c6:a6:b7:46:e5:f4:08:ed:41:47:85:57:
                    a8:b6:ad:a3:94:37:49:40:4d:1a:8a:f7:47:41:3d:
                    10:07:ca:be:3a:45:d9:65:e1:5c:10:69:b2:42:03:
                    5a:56:71:f0:50:72:1c:e8:62:28:00:c0:00:f1:75:
                    d1:6e:8c:cb:a2:76:43:2a:c3:e9:d0:d5:07:85:f4:
                    82:60:d9:b8:0d:43:cd:fc:34:43:68:13:b6:05:72:
                    6d:3d:09:23:ed:35:f4:18:2e:c6:44:4c:87:b7:37:
                    3a:24:51:8f:ea:b4:8a:70:35:eb:a2:36:c3:8d:4c:
                    93:5f:b8:70:0c:86:ea:cd:69:85:90:ab:3e:38:f6:
                    fe:1c:65:f6:e5:16:a7:9f:3f:ed:77:45:e4:f9:45:
                    4d:68:6a:c9:b2:c6:ff:6a:06:dc:45:44:cd:f2:98:
                    4f:2a:e3:5b:06:10:95:31:81:30:d4:2b:fe:86:e0:
                    11:3a:52:4e:51:42:e5:a9:28:c1:12:5f:83:86:b7:
                    cd:d5:98:c9:fe:60:80:7b:b6:bc:41:7b:78:ff:fa:
                    a6:6a:e4:72:b8:89:d1:a8:ee:15:05:b7:aa:d6:7b:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:62:63:09:68:2E:FC:F8:E0:E2:A3:79:81:A8:0D:5F:98:79:DE
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138352e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:56:64:3a:74:82:b6:ba:f6:86:0b:da:4f:f5:95:31:b2:24:
         42:97:82:17:03:37:40:d2:0d:aa:f1:28:be:36:fa:77:73:08:
         fc:5d:dc:8e:b4:16:d9:dd:29:68:8e:71:b8:b8:81:52:da:4f:
         89:2f:bc:77:b4:b5:b0:0c:40:a5:5d:91:68:18:a4:50:74:f0:
         1f:c5:ff:6b:fc:05:dd:3e:2c:47:ce:7a:a0:5c:83:69:e5:9d:
         d8:82:e8:84:7e:ef:11:eb:1a:94:75:d4:f9:58:5a:c9:3f:c1:
         67:eb:ec:76:5e:b7:48:68:57:5b:4b:fc:fd:e6:5e:6c:26:4c:
         fe:f2:d5:49:97:bd:ab:cb:b5:be:de:9c:84:56:0c:e6:9c:2d:
         94:3f:d5:b9:af:84:a3:be:c2:01:73:08:d1:27:ec:b4:0c:7e:
         f6:e6:f0:7a:a4:70:b0:e2:e9:f2:44:f8:57:18:bb:27:e5:5a:
         62:08:98:46:58:a4:8f:48:5f:8e:59:5a:3b:ff:77:b0:c5:6a:
         a4:e4:c0:69:b6:fb:ee:ca:e6:b2:cb:65:8b:ff:1b:e8:04:b3:
         da:de:b7:6c:5a:78:41:8d:2a:56:0b:cb:a7:92:e5:14:b9:40:
         eb:e3:02:81:06:d7:ef:48:cc:b7:58:38:e1:f2:75:54:e7:70:
         91:1b:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net