Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          wj6S5aWnfDpkRrPqhFR0cAuWTbYkYM6cgsHQHXopVSk=
Subject key identifier:   D2:31:A5:1A:C7:42:D0:30:17:82:18:9A:59:82:17:14:DC:77:F4:80
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       7D201EE5902D6F2C611D876633940D62CB23E270
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:03 +0000
ROA not before:           Tue 07 Feb 2023 19:55:03 +0000
ROA not after:            Tue 06 Feb 2024 20:00:03 +0000
asID:                     262741
IP address blocks:        186.208.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:20:1e:e5:90:2d:6f:2c:61:1d:87:66:33:94:0d:62:cb:23:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:03 2023 GMT
            Not After : Feb  6 20:00:03 2024 GMT
        Subject: CN=D231A51AC742D0301782189A59821714DC77F480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:6c:9d:1d:a4:5b:41:d1:26:d5:2d:5e:01:
                    b2:75:d2:e8:b5:5b:4b:7e:7b:92:dc:9f:1b:19:e9:
                    99:6e:c7:29:7f:af:3e:69:2f:3e:82:54:7a:0f:65:
                    66:e9:df:6b:b6:ea:2c:fe:e2:82:62:03:ff:fb:81:
                    9b:9a:2e:ce:23:43:8f:22:64:4a:00:df:51:50:e7:
                    6e:92:88:df:0b:5d:db:f7:58:81:07:11:51:3b:6c:
                    27:5e:82:72:ca:bb:68:a8:d0:75:9a:2c:3f:3a:1c:
                    8f:89:58:5e:10:11:f4:f4:d4:09:4e:ab:95:b2:f4:
                    99:e9:7f:09:de:05:4f:15:7c:c7:f5:5d:73:fc:06:
                    35:8e:51:b0:8d:88:1a:3b:4b:8a:46:7d:70:d9:c4:
                    f9:3e:db:4c:0d:9f:23:8e:77:79:64:e7:0c:01:9a:
                    1a:10:eb:32:30:d9:ac:1b:1c:ee:26:f0:39:10:6e:
                    4a:db:90:ba:d1:8e:4b:ec:de:16:5e:a0:4a:08:9d:
                    fa:5f:28:c4:ed:a4:b8:32:ea:e5:be:70:e5:61:42:
                    41:3f:9b:d4:22:3c:81:87:1f:7b:0e:2a:5a:a5:94:
                    3f:92:26:b8:04:3a:4d:70:25:37:d9:d6:24:0e:3e:
                    d9:fc:95:fc:55:7f:b2:d7:58:7d:fd:e2:f5:b0:fa:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:31:A5:1A:C7:42:D0:30:17:82:18:9A:59:82:17:14:DC:77:F4:80
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:e7:ab:b6:67:7f:2e:b3:c7:33:a9:a0:59:87:f2:04:8f:
         0c:ba:f5:1f:cd:b7:ab:e4:3b:a1:5f:80:5c:c0:d9:c5:39:63:
         a1:8a:df:cb:d2:c2:8e:e9:99:4d:13:99:5b:eb:df:dd:a1:85:
         45:1f:f8:5e:48:a0:32:30:7b:40:4d:46:fc:8e:15:14:87:4c:
         ed:5f:05:c7:67:5a:49:b2:35:44:5b:9f:fb:57:c3:65:09:f8:
         aa:ac:9f:c9:79:ae:c7:f6:b7:26:d7:84:3c:1a:8a:45:82:37:
         48:18:56:93:39:bb:35:f7:65:4b:74:26:de:52:15:7a:cc:1e:
         38:3f:61:05:88:76:18:c4:c8:03:f2:13:16:a7:fe:f9:36:1b:
         83:b2:ed:be:0c:02:c1:1c:59:44:0f:2d:af:5f:3a:57:4a:8b:
         d6:06:7d:31:27:03:55:dd:f8:be:1a:49:06:10:4e:7f:6a:b8:
         fc:7e:10:cd:a6:f4:99:93:97:44:95:4c:05:e1:d5:4e:3a:ec:
         97:25:37:18:fb:c0:40:df:c9:59:4f:72:58:13:be:b6:82:aa:
         44:61:81:9b:90:ad:90:1f:cf:5c:1f:21:8a:d7:fc:7a:bd:82:
         a6:2f:06:2b:37:09:3e:f2:21:a1:ae:c1:1a:b4:40:11:a6:b6:
         cd:60:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net