Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138362e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          7XrXzb6jeOOZQMCz2K5tklSxebWXvbxsdQnKZs55dmQ=
Subject key identifier:   5D:2B:08:85:B6:19:C6:85:9F:8B:BD:FC:A4:F1:F6:62:CD:39:8A:9F
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       3712424788F6C7A4D42157E65FD5C22106D0B70E
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:02 +0000
ROA not before:           Tue 07 Feb 2023 19:55:02 +0000
ROA not after:            Tue 06 Feb 2024 20:00:02 +0000
asID:                     262741
IP address blocks:        186.208.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:42:47:88:f6:c7:a4:d4:21:57:e6:5f:d5:c2:21:06:d0:b7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:02 2023 GMT
            Not After : Feb  6 20:00:02 2024 GMT
        Subject: CN=5D2B0885B619C6859F8BBDFCA4F1F662CD398A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:c5:26:39:14:2e:35:4b:9b:62:68:e9:b8:
                    65:62:a9:d2:82:61:8c:e7:60:93:de:60:d3:53:c9:
                    5a:03:84:a8:8a:e0:09:88:86:33:83:6c:82:58:13:
                    aa:a1:35:e6:18:20:9a:1f:94:76:85:27:2a:53:54:
                    8a:1c:e9:69:1a:6f:fd:44:cc:57:e2:97:2d:df:5c:
                    e9:38:5d:bb:aa:11:2c:86:d6:7b:09:fa:1b:27:66:
                    d0:91:70:74:9f:ba:f6:69:02:22:77:64:7c:ca:51:
                    b3:e8:5f:8c:69:aa:4e:fb:f3:1a:82:1c:a3:9a:8a:
                    c9:80:47:9d:d1:db:e9:f1:c1:db:48:2a:a3:69:51:
                    ce:22:71:e9:72:0c:60:19:c6:34:7d:4b:16:68:41:
                    40:d4:46:c2:12:81:71:1c:f1:6e:e6:15:e3:39:77:
                    be:53:a1:16:ad:22:ca:61:1f:15:0e:54:94:ce:bb:
                    21:e2:29:12:2e:68:d4:3a:bf:ed:02:44:74:82:ed:
                    00:33:58:e4:62:25:06:5b:8c:ed:f7:33:b6:7a:b8:
                    66:78:80:c2:4e:55:86:de:eb:09:6a:c9:1e:49:c3:
                    3b:8c:b7:c1:d1:c2:57:6a:01:49:2a:63:4c:9b:4d:
                    d5:b5:f0:be:42:0f:6f:ad:00:d9:97:7b:4d:60:7b:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2B:08:85:B6:19:C6:85:9F:8B:BD:FC:A4:F1:F6:62:CD:39:8A:9F
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138362e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:da:a6:10:30:84:9a:ca:b7:a5:f2:ec:ba:d3:67:b4:8e:5b:
         3c:24:f3:6b:7a:10:7f:30:c5:f4:ba:a2:0d:5a:a1:0d:2a:b3:
         40:dc:63:ab:f5:7a:6a:e4:e4:d7:71:72:d7:b1:45:25:9b:d0:
         8c:44:d9:ea:22:a8:0f:1f:ba:d3:17:f3:68:b8:3f:9c:41:66:
         b5:35:bc:a2:e1:99:28:01:bf:96:41:44:8b:b1:f1:7b:da:ef:
         d8:07:81:de:7d:32:e5:dd:b4:1d:c1:f7:b6:a8:96:54:dd:20:
         b3:04:71:ef:39:51:a3:6c:57:87:a1:5c:de:7c:b5:52:d8:01:
         29:2f:4a:33:f3:57:2e:88:f3:6f:06:8b:22:10:b7:eb:1e:31:
         d9:b6:48:25:23:d5:ed:8b:db:48:2a:6a:cd:75:f0:8c:cf:0a:
         26:3b:3d:c0:43:25:25:b4:ba:1e:07:e8:a4:6c:2e:e0:4a:05:
         7a:10:b2:d1:d6:67:1b:98:e6:e2:bb:8f:c7:2d:58:fc:ed:d9:
         3d:90:8c:78:8c:42:c0:94:a0:97:9e:d3:04:5c:b5:e3:4b:32:
         b1:8b:d1:cc:9e:51:10:14:e4:ba:21:fb:e5:03:96:15:cb:4e:
         bd:ff:26:fb:97:30:6e:e2:17:0c:21:93:4d:84:bf:b5:86:9a:
         ed:84:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net