Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa
File:                     3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa (raw, json)
Hash identifier:          ct1UGU91DoZsjOZyb13o9FPnf6CFkLR81TH9pJZv1hU=
Subject key identifier:   5A:7F:25:6D:1E:58:85:0C:AF:00:B9:20:DC:7D:91:FC:0F:83:62:9B
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       764A88A705ADF5CA944D09C62EE0E59B66157737
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:05 +0000
ROA not before:           Tue 07 Feb 2023 19:55:05 +0000
ROA not after:            Tue 06 Feb 2024 20:00:05 +0000
asID:                     262741
IP address blocks:        186.208.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:88:a7:05:ad:f5:ca:94:4d:09:c6:2e:e0:e5:9b:66:15:77:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:05 2023 GMT
            Not After : Feb  6 20:00:05 2024 GMT
        Subject: CN=5A7F256D1E58850CAF00B920DC7D91FC0F83629B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:3e:1b:2f:f2:98:40:84:0a:d2:a9:de:e2:
                    0d:b8:5d:7b:9e:da:dc:b9:18:b0:0d:5e:a6:55:37:
                    12:cc:1d:96:33:5f:63:c8:09:2c:1d:4e:96:b3:e6:
                    0b:14:d4:6e:0a:75:11:84:49:cb:3b:ad:5f:a8:3e:
                    d8:a6:06:4f:81:a7:79:e9:24:a5:6e:de:a0:3d:24:
                    d8:44:56:fd:76:34:20:ae:34:72:1b:f1:bf:36:65:
                    4d:6a:22:a8:de:6b:ae:25:65:21:82:97:ab:b0:14:
                    25:9f:bd:80:17:ef:55:85:2a:58:7d:10:de:f2:70:
                    17:ce:f5:15:b4:44:60:f3:99:5e:20:a8:8d:8c:75:
                    10:c4:72:41:99:67:1b:0b:1c:7d:99:09:71:ab:52:
                    e8:16:b8:6b:41:a0:fe:c2:6f:ae:7c:d0:2e:f2:c5:
                    12:73:17:a7:bd:13:40:5a:b3:f1:da:ae:09:d0:df:
                    a1:92:53:ab:fc:ca:94:6e:ed:fa:42:1a:ed:fb:d5:
                    ab:98:ed:95:91:ab:00:cc:c2:fd:0b:e4:46:f6:33:
                    29:8f:e5:ef:1e:99:17:99:06:79:8d:d3:46:7c:47:
                    9a:7d:de:04:1d:93:56:53:f5:f6:2d:d6:cb:b1:2e:
                    9d:89:f5:f4:31:23:d2:ab:22:df:f5:a3:22:13:9f:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:25:6D:1E:58:85:0C:AF:00:B9:20:DC:7D:91:FC:0F:83:62:9B
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32332d3233203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:23:8a:f4:d6:5a:6e:45:2e:dc:87:f2:fe:83:12:5e:5c:a7:
         9d:72:79:2c:44:1f:01:ad:e0:3a:f1:bf:d5:5b:09:33:f1:60:
         3d:77:13:8e:cd:32:ca:e3:98:7e:55:b9:bf:6d:ea:db:2f:36:
         7e:f0:5d:57:91:83:b5:f7:cf:b8:c1:72:17:81:f5:34:b0:91:
         a8:6f:fd:37:01:a6:3d:27:18:fd:5f:0f:dd:19:4f:3a:c6:10:
         c4:86:ff:c2:31:14:d7:19:4e:0c:91:8c:ea:83:8c:32:eb:f1:
         e0:c0:04:3f:04:26:9e:df:2a:5e:be:89:05:d5:53:93:c5:a3:
         80:f6:a4:fa:2e:5b:71:03:61:6b:58:29:1f:57:35:02:f0:9f:
         9c:5b:3f:b7:ff:4d:c4:24:49:cf:3f:d7:37:fe:4e:20:d2:86:
         93:ae:e5:aa:75:51:16:70:07:1f:9d:99:dc:1f:a1:22:69:b8:
         1f:9a:64:28:b6:77:82:c1:22:7c:7b:80:f6:e0:a7:47:70:d8:
         5f:a1:29:79:2a:04:3f:2c:10:99:5a:99:70:cb:63:6b:6a:1c:
         49:21:4f:ae:fa:77:f3:39:e8:e0:ec:e3:a6:85:a2:bc:35:93:
         56:47:2e:fc:78:6b:d0:da:6e:76:42:64:1d:c5:16:a5:14:75:
         e0:8e:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net