Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          61EcmwcpO0wiv2cmDxf1MMXxFHt5T6+nhEIVbCRoTkw=
Subject key identifier:   4E:F4:6A:58:11:E6:CA:26:03:F7:9C:0E:E9:D2:F8:35:4D:4F:25:25
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       6656A00039753E7F2600210B04CF8354784BC50B
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        186.208.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:a0:00:39:75:3e:7f:26:00:21:0b:04:cf:83:54:78:4b:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=4EF46A5811E6CA2603F79C0EE9D2F8354D4F2525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:c7:e4:0c:e1:93:8f:57:e3:75:37:b1:fc:
                    16:63:99:3d:ee:71:60:0b:bc:8c:a9:d4:4d:5b:68:
                    86:5e:6b:a6:f6:a0:bd:d9:88:d4:52:7f:1a:7f:d0:
                    38:66:23:c0:04:ae:49:84:db:8d:54:da:15:77:1d:
                    28:06:62:18:83:9a:2b:67:3a:7c:6a:77:68:02:d3:
                    61:8c:56:4c:4e:66:1e:be:c0:e8:bb:95:8f:1d:d2:
                    e6:75:11:6d:83:2a:5e:47:bd:55:c1:a0:2e:15:00:
                    92:b6:d8:43:f5:08:a3:c1:3a:5a:da:36:3b:da:73:
                    97:78:48:2b:3a:04:b3:eb:ee:08:8b:50:4a:7b:e9:
                    76:6e:7c:42:82:41:b1:87:85:4c:d5:6e:b0:d6:47:
                    78:00:d8:02:7d:35:76:56:19:e3:cc:99:f6:ed:1b:
                    7e:e5:32:0d:31:da:9f:01:9c:19:dc:9e:10:bc:78:
                    f5:d0:06:e4:d9:35:a8:fd:5b:5e:72:9b:c0:56:68:
                    1c:73:b4:a8:3e:29:23:ff:c3:83:52:04:8a:fc:fa:
                    39:ec:59:ef:79:a5:f6:23:85:a2:54:3d:1e:b0:4b:
                    97:e6:3c:6c:b7:fd:8d:f0:a4:40:7e:74:c5:e8:c4:
                    cf:97:04:48:51:25:d8:41:7e:10:b3:54:f6:bf:a2:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F4:6A:58:11:E6:CA:26:03:F7:9C:0E:E9:D2:F8:35:4D:4F:25:25
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138372e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:f8:3c:e5:4c:06:84:94:d1:2d:dc:82:bf:9f:8b:3e:dc:
         01:40:a8:92:1a:2a:6e:a8:6e:d6:4f:0d:3e:a8:3f:ae:98:5e:
         3e:86:96:ab:62:fe:d5:c0:13:a4:cf:ff:ec:a2:01:96:e0:4d:
         25:fc:3e:2d:f1:f0:53:e6:ab:12:9d:1f:0c:ea:1a:03:7b:b3:
         7b:85:1d:80:28:0d:e2:d3:89:b9:fa:01:86:b4:84:fe:a8:91:
         e7:a5:7c:90:5b:49:d5:af:4d:c6:3e:1e:c4:96:9f:8c:8b:e4:
         f2:bb:b6:42:57:07:98:7f:e1:86:82:0e:d8:23:2b:d3:44:6a:
         0b:20:ad:9b:26:94:bb:34:af:7f:68:c9:2e:14:b1:8a:35:86:
         18:7d:7b:ec:bc:48:2e:31:ce:bf:78:1b:c1:a2:66:9d:12:2b:
         12:17:04:f7:71:ea:89:d9:67:97:a7:ac:5f:ed:ec:6e:85:4d:
         60:13:58:61:a8:83:46:c4:f8:d8:bf:b5:4a:8e:e7:b6:b3:a4:
         6f:9f:ff:42:d7:e4:a9:6d:43:c9:cd:c6:d8:e3:dd:6a:a6:22:
         1a:95:12:af:68:4f:87:51:41:3e:f3:db:8b:de:5d:0d:1a:1f:
         a1:8c:8c:29:b5:17:8e:a3:af:fc:9d:b8:06:3d:7a:54:b8:84:
         50:55:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net