Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          dYNOH21NRIy6UDEZTZGpg1Y9RIfoeC7zoU7o/dEYXsk=
Subject key identifier:   7B:C9:A7:19:24:E0:B1:D2:82:D7:51:02:EA:C9:0F:F3:5A:31:1D:B1
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       3406E6F855D69AC82ED6172408E94323CB6F50AF
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:05 +0000
ROA not before:           Tue 07 Feb 2023 19:55:05 +0000
ROA not after:            Tue 06 Feb 2024 20:00:05 +0000
asID:                     262741
IP address blocks:        186.208.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:e6:f8:55:d6:9a:c8:2e:d6:17:24:08:e9:43:23:cb:6f:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:05 2023 GMT
            Not After : Feb  6 20:00:05 2024 GMT
        Subject: CN=7BC9A71924E0B1D282D75102EAC90FF35A311DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:52:99:b1:1e:8b:cf:0c:a0:9c:e6:64:6c:
                    6b:c6:a5:2d:e3:de:32:b8:3d:2d:e1:9e:7d:9e:b3:
                    7a:d1:4a:db:8f:be:2a:e4:66:c4:d6:49:f4:9b:08:
                    4f:58:8f:bb:fa:69:7f:7f:48:b9:f2:81:02:1a:bc:
                    2b:1c:3f:ba:53:65:2a:4e:76:57:de:76:bb:d4:29:
                    30:2c:6c:04:cf:c8:90:70:cf:3a:a5:12:7f:eb:58:
                    b0:38:96:84:00:be:f0:79:49:a0:e1:ba:62:4c:89:
                    b8:74:a6:24:cb:17:8e:7c:e2:5a:ef:65:77:34:31:
                    61:3d:52:76:66:77:56:0d:f3:9a:f1:1c:b5:3c:9f:
                    35:f6:96:20:72:f5:62:24:c4:13:ae:be:9f:26:d9:
                    40:15:e7:2c:52:26:6b:16:64:45:1a:53:19:74:60:
                    28:a1:f9:f5:c5:84:18:c3:ee:1e:50:3c:08:78:ba:
                    a3:29:61:bd:f5:62:ac:84:28:11:5d:3f:d9:21:07:
                    7e:18:01:65:57:c7:5e:59:6b:4f:de:57:cc:0c:40:
                    81:d0:b2:4e:86:cf:07:ec:32:13:41:98:43:30:4a:
                    05:e6:be:95:f8:0b:db:05:d7:bc:10:f8:ad:69:86:
                    4a:5e:24:8d:78:00:85:9f:16:a2:f4:cd:81:47:56:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:A7:19:24:E0:B1:D2:82:D7:51:02:EA:C9:0F:F3:5A:31:1D:B1
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:db:ee:84:28:8b:47:68:da:4c:c0:0b:e8:7d:36:d8:a8:
         49:d9:29:b8:90:fe:bd:ae:35:35:81:90:89:2d:16:ca:0a:38:
         97:c6:ee:52:ef:39:bb:e9:d1:7e:06:f3:2c:ce:74:06:ac:e3:
         c6:45:df:7c:79:ef:7a:fb:82:bb:f7:61:e1:76:e4:a8:1c:43:
         03:04:8e:9f:88:92:bd:28:5b:45:8f:e8:a9:a6:8b:d5:a7:ba:
         04:3a:5e:d7:3d:51:cd:d3:a4:df:34:ac:3b:e6:35:eb:e2:65:
         ac:d5:0f:6f:25:17:cc:e2:9f:81:9e:6a:c2:b1:2f:eb:46:f4:
         03:af:7f:1c:e3:03:87:4d:49:c3:72:df:d3:a7:b0:ea:f3:1e:
         e5:b8:58:30:70:34:f8:f9:27:11:b4:c3:3e:44:90:ac:8e:1b:
         6c:d3:a3:45:88:e1:79:01:e4:de:28:39:c2:a0:a5:55:d9:e9:
         8a:c4:e7:bd:fb:28:4b:e2:dd:12:1a:6e:d8:97:7a:60:fb:73:
         80:18:de:21:97:2f:1b:0b:8e:da:45:53:a9:b9:fb:db:eb:26:
         88:0b:e7:dc:3d:e9:b4:e1:27:15:da:d4:44:21:c7:d7:6a:cd:
         73:fe:dc:c3:c0:d7:c4:a2:41:f5:57:70:4a:a8:92:c0:f7:a2:
         42:80:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net