Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa
File:                     323830343a326233303a3a2f33332d3333203d3e20323632373431.roa (raw, json)
Hash identifier:          iY4l+WyAzqi9WanTRpg+gFMMWKboTdHDfEIyJr57lh0=
Subject key identifier:   21:C2:69:F8:B3:78:C8:72:3C:70:63:1C:01:3F:D7:DC:D2:A8:A4:1C
Certificate issuer:       /CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
Certificate serial:       40528232F9C89DF52E7434E360D61E7F0602358E
Authority key identifier: 04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa
Signing time:             Tue 07 Feb 2023 20:00:02 +0000
ROA not before:           Tue 07 Feb 2023 19:55:02 +0000
ROA not after:            Tue 06 Feb 2024 20:00:02 +0000
asID:                     262741
IP address blocks:        2804:2b30::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl
                          rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:52:82:32:f9:c8:9d:f5:2e:74:34:e3:60:d6:1e:7f:06:02:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048EF9BFDD220DB27254C881CA7AFE4803C10848
        Validity
            Not Before: Feb  7 19:55:02 2023 GMT
            Not After : Feb  6 20:00:02 2024 GMT
        Subject: CN=21C269F8B378C8723C70631C013FD7DCD2A8A41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:fe:4a:90:48:00:4a:c5:8e:4f:f9:78:ee:
                    0b:03:41:7c:06:82:2c:75:af:e8:ab:ca:a2:c1:76:
                    88:e0:8f:b0:a2:70:b6:ec:34:8e:c1:64:99:0d:af:
                    5b:eb:66:b3:17:c1:74:66:0d:ea:7d:ce:3d:fc:66:
                    55:07:a9:14:7e:34:bb:a6:06:39:a6:59:be:ad:87:
                    c0:14:1f:7c:6d:56:4c:52:9f:a0:4b:e4:ed:60:61:
                    5b:32:41:c1:8f:1b:f8:20:f2:fe:10:78:2a:41:11:
                    1e:10:b2:0f:a6:13:9d:a2:d2:d3:d5:d7:58:2e:d1:
                    a3:0b:44:f0:19:73:f0:e5:3d:15:ff:c9:e5:b0:f8:
                    b5:aa:b4:8d:ee:97:21:d1:6a:1a:d5:e3:58:7c:e9:
                    33:cb:87:60:a3:bf:40:f2:6e:ca:b2:cb:b0:05:63:
                    b0:e2:c6:58:7f:1b:54:06:8f:36:40:56:af:01:84:
                    6c:05:38:99:19:92:e4:e1:ff:33:ca:35:1d:7e:f6:
                    4b:f6:26:d5:47:d6:49:ea:b6:d9:58:91:fa:20:74:
                    12:9d:be:9b:c2:92:86:82:87:ce:44:d8:e3:f5:10:
                    64:dc:e8:58:cb:93:e7:81:0e:e3:76:71:9f:ba:db:
                    da:6a:55:7d:ad:99:55:cf:8d:15:3f:3b:8f:b3:34:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C2:69:F8:B3:78:C8:72:3C:70:63:1C:01:3F:D7:DC:D2:A8:A4:1C
            X509v3 Authority Key Identifier:
                keyid:04:8E:F9:BF:DD:22:0D:B2:72:54:C8:81:CA:7A:FE:48:03:C1:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/048EF9BFDD220DB27254C881CA7AFE4803C10848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33332d3333203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:3c:64:31:ac:e2:a2:c5:bb:e2:1c:3e:4e:4c:9d:da:1c:27:
         f6:14:f8:99:dc:83:d4:aa:f3:6f:32:33:3e:f9:4c:0f:93:29:
         2f:f3:46:2f:f4:a3:68:04:07:23:9c:84:57:2a:58:7d:64:10:
         50:d6:54:11:6d:22:61:1c:ec:91:ee:40:58:ac:9d:fd:75:f2:
         f3:e5:f8:fc:89:0c:50:24:b0:5f:d8:a3:b0:4e:b8:11:2e:10:
         eb:1c:ca:72:05:e4:c4:c6:5e:3b:87:59:88:94:9f:ba:61:da:
         ba:ca:62:f1:7f:69:50:6d:35:66:80:88:81:0c:47:d6:6c:73:
         8b:c9:c5:bc:c9:1c:f3:76:64:72:01:29:86:0c:57:13:c2:13:
         9c:bd:cf:35:bc:72:da:a7:8c:b7:bc:db:06:18:55:5c:59:54:
         8a:90:86:36:1b:c6:8b:0a:87:3e:96:b6:9a:cb:4b:a0:2d:2b:
         cc:81:03:99:8f:1a:1e:b8:2c:7c:b2:99:9b:38:06:26:47:e1:
         92:0c:e2:e9:92:a0:77:1d:d1:74:e3:d5:80:11:3d:38:86:88:
         de:02:b9:d5:f7:cb:82:31:0c:f2:f3:4d:0d:03:0a:ab:81:3d:
         c4:51:95:f6:7f:ce:88:f2:ef:23:ec:f3:c1:69:a8:cc:8f:ff:
         e6:10:72:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:58:31 2024 by rpki-client on console.sobornost.net