Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          DVbgaPpgnYFUEtW23ivwTbDGUeSaDEl9WxZyj2+tNJQ=
Subject key identifier:   01:05:A9:95:E5:57:3E:8F:1B:70:99:D0:8A:AA:3C:1C:65:CF:5F:5B
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       2F5EEECD85F8669A2C73B880531AD1185B44F399
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:00 +0000
ROA not before:           Tue 07 Feb 2023 19:55:00 +0000
ROA not after:            Tue 06 Feb 2024 20:00:00 +0000
asID:                     262741
IP address blocks:        186.208.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5e:ee:cd:85:f8:66:9a:2c:73:b8:80:53:1a:d1:18:5b:44:f3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:00 2023 GMT
            Not After : Feb  6 20:00:00 2024 GMT
        Subject: CN=0105A995E5573E8F1B7099D08AAA3C1C65CF5F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:56:ed:63:d7:d6:99:28:da:ad:4e:3d:cf:
                    53:15:7b:fc:f0:c0:7d:f2:06:31:e6:d6:e3:3c:2d:
                    f8:67:91:29:6a:4d:c9:fc:39:8a:32:45:fa:94:8c:
                    f4:13:3c:d8:6a:b5:bd:50:a2:00:04:1c:bf:73:09:
                    4a:68:c8:4e:5b:77:3a:06:b8:73:db:22:4a:ec:43:
                    b0:67:e2:de:fd:06:57:52:f2:09:4a:ac:1a:25:0b:
                    5c:30:b1:d2:ae:a7:cb:7e:a6:1c:33:de:8b:70:77:
                    b6:d2:23:bf:c7:e3:cb:42:2e:eb:0e:d6:2a:99:f4:
                    8b:5b:fb:65:06:1b:0e:67:5a:1a:9b:0c:6c:30:a3:
                    bb:ce:6e:3e:81:34:7d:05:c5:f3:de:c5:09:7e:00:
                    06:c1:e4:24:b5:ab:69:06:c1:76:ba:e6:1f:44:dc:
                    c5:28:e0:fe:f8:c1:38:0a:79:e7:93:cd:72:0e:31:
                    b1:5d:64:32:59:a8:a8:e7:b3:3f:66:82:42:a5:56:
                    a3:e0:e7:4b:ef:89:09:6c:f4:a9:dc:fb:50:a6:dd:
                    ca:d0:ca:57:2d:f1:1d:a4:c2:66:01:49:d6:89:bb:
                    d1:8e:f9:02:2e:6f:eb:85:04:c7:64:96:ef:e0:b7:
                    ee:e5:76:7f:c8:ba:d0:93:f7:58:36:04:2a:70:71:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:A9:95:E5:57:3E:8F:1B:70:99:D0:8A:AA:3C:1C:65:CF:5F:5B
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138382e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:04:3e:ac:b5:44:c9:e1:53:51:bf:2d:76:a5:17:3b:24:
         6b:c1:e6:d0:11:7f:1b:5c:d4:d4:23:17:ba:ab:76:12:0b:15:
         89:75:50:19:43:1d:cb:2c:bd:e7:cc:77:69:6e:81:f7:2d:ee:
         33:25:6a:c5:c4:25:56:9d:44:bc:1a:ae:ce:20:10:97:03:f6:
         f8:43:a0:ad:a5:87:d4:08:0f:f9:b2:eb:44:28:25:d7:01:37:
         2d:c3:31:3e:c9:97:eb:7a:e7:b9:80:0e:46:1b:51:13:3f:62:
         aa:73:8e:f2:64:e4:cb:b7:00:a2:0a:3f:7a:d3:c1:4d:9d:f5:
         9a:34:cc:d3:e5:e9:77:aa:86:5a:d6:15:fe:4a:46:14:8a:5f:
         cf:db:77:45:e3:82:81:46:3d:37:5c:57:68:e4:7d:ef:b0:9a:
         c0:d5:b1:00:14:b8:2f:d5:83:06:db:d9:db:1c:9b:74:f1:08:
         1f:48:ad:a2:97:61:a5:f0:29:de:d3:23:c5:7d:c8:f9:9d:e3:
         b6:b0:48:57:27:7d:1e:d4:bf:d1:71:ac:51:25:db:14:5d:04:
         9f:8c:d8:f8:c3:e7:f6:5a:75:c1:33:67:63:10:dd:9c:24:4c:
         ac:21:94:7e:df:af:84:98:80:9e:f1:e4:cb:01:85:2c:ae:d9:
         65:9d:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net