Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa
File:                     3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          J4xjvE/MhyIgN7IT0UdiZ3E9EBM3/IDvvHkCQHE0tAY=
Subject key identifier:   0B:FC:1B:E9:D6:7B:81:89:ED:D3:6E:B6:8B:50:08:76:B8:4D:DC:26
Certificate issuer:       /CN=7FD9A86790F412DDBAFAE505975AD9C9FA2F4109
Certificate serial:       117ED9E1306CD7EF2671080582DAD73FE96582EC
Authority key identifier: 7F:D9:A8:67:90:F4:12:DD:BA:FA:E5:05:97:5A:D9:C9:FA:2F:41:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa
Signing time:             Fri 27 Oct 2023 20:29:57 +0000
ROA not before:           Fri 27 Oct 2023 20:24:57 +0000
ROA not after:            Fri 25 Oct 2024 20:29:57 +0000
asID:                     263086
IP address blocks:        186.208.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:d9:e1:30:6c:d7:ef:26:71:08:05:82:da:d7:3f:e9:65:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD9A86790F412DDBAFAE505975AD9C9FA2F4109
        Validity
            Not Before: Oct 27 20:24:57 2023 GMT
            Not After : Oct 25 20:29:57 2024 GMT
        Subject: CN=0BFC1BE9D67B8189EDD36EB68B500876B84DDC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:5b:0f:93:aa:d4:da:2d:3d:d5:ea:d3:5a:
                    7c:a4:bc:bb:78:73:6a:e7:fd:67:a9:6b:ad:2e:a0:
                    15:52:fe:7c:be:09:a4:bf:ac:d8:3a:e9:a6:92:a8:
                    65:9a:ec:05:5c:0b:2a:bf:a7:16:14:ac:51:d2:34:
                    15:55:de:92:12:a4:d3:60:b1:70:33:ea:fe:8a:15:
                    7b:5c:80:3f:b6:a5:ae:85:6d:2f:33:4a:97:f3:01:
                    19:b4:48:b4:30:89:02:90:fe:1e:ea:fa:b5:bf:0a:
                    77:f4:94:65:fe:ed:f7:d1:46:15:35:23:02:76:1d:
                    74:cb:ac:9d:f3:73:f1:90:98:bf:37:20:a1:98:da:
                    e5:65:80:6c:b6:33:e3:4a:da:fc:01:18:bd:94:ca:
                    4a:d0:91:9a:ed:f7:8b:09:a6:60:f3:43:97:b7:43:
                    c9:36:2d:8b:08:05:e5:ad:d6:38:13:85:88:47:57:
                    59:fd:80:54:bf:3b:16:7f:56:18:86:17:a5:33:fa:
                    35:1b:6d:fb:5d:4f:d8:16:ff:b7:fc:91:b1:04:a2:
                    76:4a:30:9c:f3:f1:4a:ac:2e:41:20:7b:a9:38:48:
                    31:b5:44:03:f8:3b:83:4f:4a:a5:6a:31:a0:98:6a:
                    5e:ea:8d:a1:07:f9:b8:2d:1b:ba:1c:6d:6f:e6:33:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:1B:E9:D6:7B:81:89:ED:D3:6E:B6:8B:50:08:76:B8:4D:DC:26
            X509v3 Authority Key Identifier:
                keyid:7F:D9:A8:67:90:F4:12:DD:BA:FA:E5:05:97:5A:D9:C9:FA:2F:41:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FD9A86790F412DDBAFAE505975AD9C9FA2F4109.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:fc:69:e8:7e:90:45:38:54:53:91:79:12:18:5e:31:29:
         45:95:d3:d9:e5:c9:78:1f:83:db:9e:80:41:ee:26:7d:e0:a6:
         51:30:b5:d5:9e:4a:7d:8a:38:c1:4f:c8:d8:b4:28:b3:a5:e8:
         84:fc:4c:47:62:1a:8b:d0:b7:a1:45:39:95:5e:28:d6:32:53:
         99:40:21:e7:96:f3:03:91:4d:c9:3c:31:63:fe:07:ae:79:c1:
         25:7c:46:be:b2:25:64:31:d4:64:54:5e:57:c6:05:0e:23:b5:
         e9:78:76:62:e9:dc:0e:fe:ec:28:f7:db:44:72:a3:2d:21:cf:
         0e:14:33:6f:7a:c0:fd:12:2d:63:34:e8:32:b6:a4:26:eb:27:
         22:83:bd:c9:52:8d:e5:36:46:73:32:51:eb:b1:5d:08:e8:4a:
         28:f3:1a:da:3c:c2:57:36:da:12:22:26:88:06:5c:93:04:b9:
         69:37:72:a6:2f:5a:1c:78:e7:1b:c3:54:c3:49:b0:02:0d:5c:
         1d:be:e1:0b:c5:99:6d:59:13:22:87:83:8a:d6:03:e7:44:49:
         e0:03:78:1e:6c:2c:a1:a4:25:79:d0:34:20:78:25:36:04:80:
         d7:fa:fa:6a:00:d4:98:2e:98:a1:17:63:42:ed:8b:ff:59:8b:
         b8:06:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net