Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a383030303a3a2f33332d3333203d3e20323632373431.roa
File:                     323830343a326233303a383030303a3a2f33332d3333203d3e20323632373431.roa (raw, json)
Hash identifier:          wG2NpaFogo9+vyg26F1HSFisGH4eumSS9mOEVlEiLOE=
Subject key identifier:   21:B2:3C:AA:93:8D:87:DE:A4:25:55:AA:FD:F0:CF:D8:87:B8:60:D9
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       387611BB7A884E85CD8DD03A58AD75FD183EA388
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a383030303a3a2f33332d3333203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:04 +0000
ROA not before:           Tue 07 Feb 2023 19:55:04 +0000
ROA not after:            Tue 06 Feb 2024 20:00:04 +0000
asID:                     262741
IP address blocks:        2804:2b30:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:76:11:bb:7a:88:4e:85:cd:8d:d0:3a:58:ad:75:fd:18:3e:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:04 2023 GMT
            Not After : Feb  6 20:00:04 2024 GMT
        Subject: CN=21B23CAA938D87DEA42555AAFDF0CFD887B860D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:0b:cb:62:28:37:d4:d9:a4:f2:43:64:23:
                    8e:e8:ec:85:f5:4c:31:0c:37:07:0e:e7:3d:95:ba:
                    de:14:81:6a:71:e8:37:7b:61:6e:aa:60:7d:51:25:
                    0e:25:d5:1e:1a:23:68:5b:6e:63:e4:56:5e:4f:49:
                    ea:bf:7c:24:99:96:a8:a1:19:d6:81:70:8a:72:9b:
                    b0:63:34:76:f4:d9:97:ea:51:07:d8:f7:57:5a:c5:
                    df:67:6c:96:cf:bc:34:f5:c3:04:60:1d:64:45:2c:
                    7c:af:a5:1f:37:97:c9:91:b0:a8:84:17:37:a2:53:
                    e8:7d:df:c2:c0:f7:d3:e4:0b:e8:cd:60:f3:05:65:
                    1b:e2:be:aa:1d:e0:2d:ea:ea:43:26:c2:4f:ff:54:
                    ba:df:4f:a3:64:05:b1:42:a2:30:70:5b:ec:de:ad:
                    07:27:ec:11:45:c3:45:dd:01:64:94:47:06:a4:51:
                    aa:0d:db:fa:0c:5d:3a:d3:71:ca:9c:ab:af:a8:bb:
                    48:56:c4:1b:79:a9:cd:dc:45:e0:77:5d:4a:65:a9:
                    1d:58:dd:cb:5a:cf:46:ea:93:ac:d4:19:11:3e:84:
                    3c:cf:cd:c3:0a:21:1e:c1:25:99:9b:ec:52:2c:1d:
                    09:b2:a5:07:2c:cf:a6:bd:97:16:4b:94:67:d2:0e:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:3C:AA:93:8D:87:DE:A4:25:55:AA:FD:F0:CF:D8:87:B8:60:D9
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a383030303a3a2f33332d3333203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:38:fd:aa:f9:32:4a:ed:ff:a6:f4:c5:2f:c2:74:c8:b6:
         5d:3c:14:e4:1e:68:b5:35:cf:b8:4c:9c:88:57:c0:2b:d4:f4:
         4a:8b:08:16:4f:95:e0:ad:77:d4:15:d3:67:e7:81:14:c9:79:
         45:29:bb:25:be:e0:ec:ba:e9:a8:4d:18:6d:f8:a5:14:7a:59:
         d3:97:0d:a6:d2:f0:c2:1c:8b:22:03:90:e5:ae:7b:b9:6d:01:
         4e:35:ec:f1:59:fd:d6:d6:cf:c8:7c:e1:9d:de:09:6d:87:ee:
         1c:44:37:da:91:89:f4:0a:0f:de:b9:c6:14:39:bc:29:4f:c2:
         b3:3e:41:5a:0c:e2:f4:ab:bc:c9:a3:98:21:63:42:45:97:42:
         0d:67:3c:ee:30:2d:e9:00:d0:76:c8:e5:77:56:93:b9:d1:03:
         3b:9e:55:bd:ca:54:76:3c:de:3d:25:11:40:4b:04:03:7c:5b:
         82:80:a2:81:a6:38:91:ee:2e:8e:cc:24:fb:41:00:5d:c1:19:
         0b:9a:4c:76:4b:6e:27:62:ea:74:4d:a8:67:fd:17:09:9f:22:
         52:af:cc:ab:67:ae:49:38:c0:83:d8:1a:53:40:bf:0e:15:5c:
         df:c5:3e:0f:88:5f:f1:f7:80:a7:b1:71:e9:c6:31:c0:e3:9d:
         0d:ec:7a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net