Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          icvg6OqE9i6ZYmsZSRnDwN1G1Kuu9Ko+BqMZ61qw1ds=
Subject key identifier:   41:7C:48:13:A4:13:84:9D:3B:42:E7:99:15:85:DA:99:0F:BC:37:50
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       47E6A9AACE6359BECDB2C49FB1AF3863EC4079A6
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:01 +0000
ROA not before:           Tue 07 Feb 2023 19:55:01 +0000
ROA not after:            Tue 06 Feb 2024 20:00:01 +0000
asID:                     262741
IP address blocks:        186.208.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e6:a9:aa:ce:63:59:be:cd:b2:c4:9f:b1:af:38:63:ec:40:79:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:01 2023 GMT
            Not After : Feb  6 20:00:01 2024 GMT
        Subject: CN=417C4813A413849D3B42E7991585DA990FBC3750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:6a:10:42:46:a3:4e:7e:8f:65:18:c8:20:
                    94:03:46:e6:ed:16:2d:73:53:ff:70:9f:01:1b:1c:
                    43:71:f4:d6:70:11:a4:95:43:18:9d:5b:9a:3b:7b:
                    49:2b:59:18:26:05:7d:f2:d4:c3:91:94:26:14:6f:
                    48:19:4a:79:17:fb:85:8b:b7:86:e1:2a:57:62:10:
                    94:9d:44:42:eb:91:f7:db:13:14:70:a1:8c:d1:7e:
                    60:b9:99:89:3e:f1:f6:df:1b:69:1f:43:4c:7b:de:
                    6f:26:a7:3f:b5:5d:3e:85:1c:23:e1:b5:6f:ae:50:
                    85:d8:66:e4:18:1d:d9:32:4a:23:19:87:bb:70:1c:
                    ce:44:39:e8:76:27:38:45:c4:0a:31:bf:42:dc:ef:
                    3b:5e:ab:e7:22:48:73:5f:71:81:08:a3:22:6b:ec:
                    bc:3c:ad:a2:71:2c:63:ec:65:32:be:fa:cd:4c:64:
                    5f:9e:e1:87:bb:b6:32:e1:39:17:58:b3:66:2a:12:
                    7f:e6:83:bc:61:6f:c2:f3:aa:6c:6c:15:1f:6c:d2:
                    8e:7e:55:da:f9:d6:35:45:fa:00:5a:a7:37:af:e2:
                    75:25:6c:7d:13:93:5f:99:ae:19:6f:1a:00:ad:10:
                    c4:94:22:88:12:30:d3:fa:8e:89:a0:af:f6:52:cb:
                    8b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:48:13:A4:13:84:9D:3B:42:E7:99:15:85:DA:99:0F:BC:37:50
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3138392e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:85:b7:bb:04:00:dd:9f:0e:58:0c:5e:d6:4a:c9:a4:91:
         e2:25:20:6e:c4:3b:27:78:38:a9:3e:21:d8:b4:b8:e7:7c:98:
         2f:55:e1:bc:59:6a:93:db:09:95:ef:36:cd:df:e4:bb:f6:f3:
         f3:a9:0c:ca:c8:21:1d:51:fc:1b:27:af:ef:36:3d:49:1f:7a:
         6e:b5:75:37:e8:bf:21:ca:ef:58:ec:25:b4:95:f1:95:c7:9e:
         b2:63:e6:bb:ce:a4:1d:1a:67:9f:b2:b4:30:22:11:b1:4a:16:
         b5:5d:83:eb:df:c1:ab:b0:d8:94:f7:05:14:63:67:3d:e5:41:
         4f:a2:d6:ab:0f:d1:3b:5d:d5:3e:93:b8:a5:a7:e0:c8:c7:6b:
         1b:e1:08:64:df:fb:47:df:53:5a:a5:21:02:7c:2c:5a:74:a9:
         d5:e1:52:47:dd:89:2f:34:8e:df:f1:4e:86:6d:81:6a:39:af:
         6d:1e:a0:3a:6e:2e:ea:c9:7a:9b:4b:b8:b9:f7:f0:93:47:17:
         d6:7b:40:db:40:40:34:ca:07:cd:1f:61:b2:f4:c8:af:bc:15:
         28:77:66:99:d8:aa:ea:72:c3:9d:01:c2:5d:78:36:9f:19:d5:
         a1:48:1c:ae:1f:07:66:41:69:a8:57:c4:07:cf:23:1f:a5:e7:
         43:b4:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net