Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa (raw, json)
Hash identifier:          MkYOkcM12KZ638XUtWO+p/oEkgNcUYhmjOANtFdmuus=
Subject key identifier:   BA:27:2E:AB:F7:5A:4B:50:FE:CC:C7:4E:8F:A1:5F:9F:7E:99:6D:8D
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       734C51263EE260F2121214EF44BB36E74307B8A9
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:06 +0000
ROA not before:           Tue 07 Feb 2023 19:55:06 +0000
ROA not after:            Tue 06 Feb 2024 20:00:06 +0000
asID:                     262741
IP address blocks:        186.208.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4c:51:26:3e:e2:60:f2:12:12:14:ef:44:bb:36:e7:43:07:b8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:06 2023 GMT
            Not After : Feb  6 20:00:06 2024 GMT
        Subject: CN=BA272EABF75A4B50FECCC74E8FA15F9F7E996D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:5b:fa:de:11:63:a1:2e:c5:cc:3b:53:d0:
                    96:8b:3b:d4:bd:cd:cc:2d:fc:8c:d9:dd:e6:bc:11:
                    04:9c:90:76:7c:49:55:f1:51:9d:ed:97:d4:a5:ec:
                    f8:d8:cc:16:03:e4:47:a0:e5:e5:68:b8:fc:13:1d:
                    27:bc:3a:02:95:71:47:dd:6b:c5:b6:a6:a7:bb:07:
                    3f:b2:90:45:62:80:03:0b:0d:fd:6a:eb:d6:7c:8d:
                    b0:48:71:01:56:5c:18:5d:80:49:97:69:c3:31:d6:
                    5a:fd:f8:1c:35:a7:b2:13:da:a2:57:48:3a:3e:e0:
                    65:a5:e4:8f:99:d8:cb:26:24:33:7b:6e:76:14:a6:
                    25:09:7b:ed:8d:4f:b4:4a:22:de:92:e3:3b:85:4d:
                    3d:09:27:00:fa:81:03:b9:e0:ef:b0:ee:e7:68:c5:
                    65:d4:82:34:bb:9c:43:19:b8:5b:57:21:c2:b6:95:
                    f6:13:1e:57:c6:2a:1f:e3:4b:8e:ac:77:6a:ec:67:
                    e5:c1:f1:5d:3e:74:2f:44:10:01:a7:ef:ec:1d:a0:
                    49:82:af:be:a6:31:c6:26:50:a9:b5:29:84:bd:e2:
                    89:dd:5c:77:c2:b3:cb:81:5a:63:97:9e:1b:6c:6b:
                    24:cb:ca:17:fa:ca:77:3c:07:d1:03:a8:7c:43:08:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:2E:AB:F7:5A:4B:50:FE:CC:C7:4E:8F:A1:5F:9F:7E:99:6D:8D
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32322d3232203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:26:2f:b0:a7:2d:e6:b3:80:99:b0:6a:96:b9:70:6e:2a:ce:
         47:38:a3:0c:05:66:9e:9d:2a:77:39:5d:f2:52:95:07:e5:9d:
         f7:41:af:b2:bb:7d:19:fb:f3:e3:be:07:e5:5a:90:77:f9:47:
         ce:c7:71:6f:ff:df:fb:fc:5f:6f:00:81:6e:77:ee:ca:9a:8f:
         93:ad:84:61:f5:8e:f8:e4:1c:92:03:06:9a:d2:94:96:30:86:
         b4:3f:71:6b:57:b3:3b:7e:ef:0c:0d:bf:24:35:8e:45:d9:70:
         cb:18:a2:f5:f1:2f:96:c7:76:0c:fc:d9:ef:b5:f5:1e:7e:a7:
         09:cd:ab:af:ab:80:3d:87:fa:84:77:7e:05:e9:21:24:69:9e:
         7d:d4:a1:40:a7:3a:a1:4b:12:e7:c6:9a:58:4e:48:d0:90:7f:
         aa:a0:8d:93:f2:14:61:14:01:87:6e:41:d9:79:07:e2:ae:2e:
         37:ef:2f:d3:d4:c1:ac:54:54:43:dd:64:ec:73:0c:c2:b2:30:
         4f:9f:ce:b5:a5:13:95:b6:7f:1b:88:29:d8:e9:8d:10:ab:47:
         a3:5f:3a:3e:31:88:ba:e1:e6:4b:79:48:62:f9:d1:51:44:d2:
         06:79:7b:03:ff:f0:97:c5:72:f1:b9:58:ed:b4:74:a9:6b:9b:
         e5:9b:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net