Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32342d3234203d3e20323632373431.roa
File:                     3138362e3230382e3139302e302f32342d3234203d3e20323632373431.roa (raw, json)
Hash identifier:          n4s7snXEgUCidIUR5DEV0DP9Ck2R98YbJ6+52A4saEM=
Subject key identifier:   35:3D:77:97:A2:DD:37:37:53:FF:5E:46:83:38:77:DA:BB:CE:F0:08
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       7D4097E2B6C837CBE456F987EC49FFF1DE669411
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32342d3234203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:02 +0000
ROA not before:           Tue 07 Feb 2023 19:55:02 +0000
ROA not after:            Tue 06 Feb 2024 20:00:02 +0000
asID:                     262741
IP address blocks:        186.208.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:40:97:e2:b6:c8:37:cb:e4:56:f9:87:ec:49:ff:f1:de:66:94:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:02 2023 GMT
            Not After : Feb  6 20:00:02 2024 GMT
        Subject: CN=353D7797A2DD373753FF5E46833877DABBCEF008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:c2:f1:25:bf:93:09:d4:11:82:5e:92:eb:
                    ea:e9:fc:e4:19:60:21:0f:c4:d6:41:15:1e:8a:cd:
                    23:a9:b0:d4:c4:f9:a6:ec:63:48:6a:89:25:be:7d:
                    16:87:7b:07:2d:a4:b8:03:14:06:32:37:ad:17:3d:
                    a9:36:54:94:ef:18:ba:91:1e:ca:c1:f2:5e:dc:6b:
                    98:6a:98:a9:5f:90:9b:f9:92:90:3d:1a:1b:89:dd:
                    04:6a:fb:8a:3a:89:dc:be:e0:87:17:3a:4c:7a:b3:
                    89:3c:b6:a8:7f:22:d6:76:8b:b3:ec:5f:37:08:f5:
                    44:89:a5:4c:c9:d2:4e:c1:b5:94:5f:e2:7a:c1:21:
                    20:b2:ac:12:74:3c:ea:03:83:b6:68:a4:2d:de:23:
                    e2:4f:af:4a:f9:e2:0e:a0:39:7f:93:5f:31:93:48:
                    db:37:e4:ec:cb:4c:f8:2a:f2:3f:a6:2a:5a:fe:c8:
                    5e:14:00:d7:8f:e0:6e:13:32:ae:81:e5:47:42:d8:
                    4a:11:d2:0d:00:44:ac:83:3d:f9:37:64:eb:fd:50:
                    d2:1a:c0:25:ea:92:aa:50:ca:dc:ab:c4:55:0e:ba:
                    d1:2b:8b:e8:8d:00:b5:8e:32:4d:6c:6c:79:18:df:
                    49:b0:e9:0e:81:64:3d:4d:94:1b:3e:64:b5:48:68:
                    e1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:77:97:A2:DD:37:37:53:FF:5E:46:83:38:77:DA:BB:CE:F0:08
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/3138362e3230382e3139302e302f32342d3234203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d7:87:e1:d9:ed:88:c4:4f:c2:e8:fc:22:cf:eb:98:5f:7f:
         2a:ae:9a:88:a9:95:4a:ba:1b:1f:32:91:92:1a:34:6e:34:b8:
         f0:b0:09:cf:7a:19:b4:04:bb:0a:df:9f:61:d6:a1:80:8c:8d:
         65:76:0a:d0:d8:6b:2c:f7:e5:31:ca:be:e6:c6:5c:e6:be:c6:
         8e:88:c4:80:98:ea:ff:b6:1f:1c:e1:fc:e9:48:16:8c:c9:e3:
         f4:3f:d4:65:06:1b:72:35:49:5e:39:c1:f2:70:d6:80:44:be:
         11:8a:2d:4c:db:0e:27:3b:03:03:a8:37:31:08:c4:69:62:4e:
         b9:f4:9e:7a:0d:dd:50:61:81:38:95:07:25:e3:1a:ef:2d:47:
         4b:ac:72:da:79:7c:c0:b1:b6:5d:21:f5:b6:d2:8a:d6:ad:61:
         c1:2a:10:21:4e:1a:9c:21:3a:76:18:1f:0f:57:0d:61:ad:ed:
         fb:7f:7f:bc:f0:d7:b1:ee:f5:0f:ac:d3:7b:67:b4:4e:de:95:
         63:d1:4e:96:67:6e:58:ee:05:20:72:da:c7:e1:c2:37:f2:b5:
         4b:48:24:0b:9d:34:22:00:59:4f:b4:b7:8c:24:de:6f:3f:8b:
         48:4d:af:e3:89:5a:14:e0:f2:2c:ce:0f:ba:ab:3f:85:76:86:
         ef:eb:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net