Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
File:                     3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          rhbHCPJgoK5amS6kkkjecMMuNPpli2zh07c/OcjUpFY=
Subject key identifier:   2F:3B:F2:E9:52:C8:F4:75:C3:37:F4:CD:95:9A:B1:CC:30:D2:6B:F7
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       7C1F2DEE14CB45501CA5AF6FCE2A5C3F13DC9B36
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa
Signing time:             Tue 10 Mar 2026 19:30:14 +0000
ROA not before:           Tue 10 Mar 2026 19:25:14 +0000
ROA not after:            Tue 09 Mar 2027 19:30:14 +0000
asID:                     28584
IP address blocks:        177.129.232.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1f:2d:ee:14:cb:45:50:1c:a5:af:6f:ce:2a:5c:3f:13:dc:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Mar 10 19:25:14 2026 GMT
            Not After : Mar  9 19:30:14 2027 GMT
        Subject: CN=2F3BF2E952C8F475C337F4CD959AB1CC30D26BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:31:78:38:b5:ef:2e:da:ab:55:4b:35:18:
                    3d:ca:e3:c8:f6:db:77:f0:56:6a:1d:96:1a:14:51:
                    0a:dc:d8:ab:f3:6c:8c:16:99:22:f6:7a:24:ff:b8:
                    22:c8:45:cb:8f:22:53:97:94:80:cc:e3:62:e7:ca:
                    c8:d3:bf:f0:3f:33:50:85:48:6a:dc:04:82:9f:f0:
                    56:90:e7:ff:88:65:e2:03:cf:2f:9a:1c:2a:37:c3:
                    99:39:30:ea:81:02:40:c2:66:19:d5:db:1b:b4:a7:
                    fb:b0:16:7b:d6:0c:8f:c8:33:3a:91:29:11:23:46:
                    6a:60:f3:6a:44:a5:2b:34:4f:d4:7a:bb:d3:c2:33:
                    1e:bf:40:25:93:ed:0a:5f:88:b3:b5:7b:06:8a:d0:
                    46:04:2e:ec:37:63:3b:ad:c1:c2:b7:7a:5f:f4:e5:
                    f1:d6:c8:6b:c0:23:6a:6e:ca:34:5e:f8:05:57:0b:
                    30:c1:85:ba:9d:8f:2c:69:9a:61:d5:66:97:b0:ec:
                    15:7c:e1:5d:cd:72:49:68:09:bb:1b:34:a6:55:47:
                    87:39:b1:d7:ff:e1:8b:6f:fc:e1:ba:78:48:5c:5c:
                    8a:ca:07:ea:ef:c9:e0:95:30:e9:e2:0f:ea:7c:92:
                    72:65:16:71:cb:d4:6d:f2:e1:55:31:0c:5d:36:e5:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3B:F2:E9:52:C8:F4:75:C3:37:F4:CD:95:9A:B1:CC:30:D2:6B:F7
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233322e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:50:b0:0a:d8:93:2d:2f:f4:46:6a:79:e8:09:bc:e3:96:6a:
         22:fe:80:26:26:1e:c2:e7:f9:c3:82:95:a5:2d:b5:66:b9:22:
         e8:93:aa:2f:6f:05:fa:56:d1:a2:d2:5e:50:dc:77:cd:ab:e5:
         ee:53:f6:e7:d6:58:59:fd:69:29:6e:40:61:3b:ac:74:1a:11:
         a1:79:a5:bc:ff:7a:7a:71:b3:8e:72:31:4c:bf:7e:ed:b5:75:
         cc:4f:84:8d:51:62:ba:d6:55:72:50:5b:e9:45:63:1d:1b:52:
         53:4a:13:5e:5e:17:a0:12:de:be:9b:fd:ad:74:70:44:50:23:
         48:ef:13:ae:4c:6f:15:2f:4d:30:e3:09:67:d5:02:4a:ed:03:
         9c:47:87:1b:8d:aa:73:85:24:24:21:4d:b4:df:a9:74:f9:78:
         0d:a7:d9:fe:95:59:6b:49:8f:96:7e:c8:e3:e6:d2:76:36:11:
         be:05:28:a5:6b:ac:10:d4:41:90:77:92:93:a1:22:47:84:c0:
         62:51:7a:36:26:f1:95:3d:51:6b:b2:ac:e1:aa:57:a8:9e:0d:
         38:9f:06:40:d8:5f:ca:12:bb:f4:37:a7:d0:81:5c:c7:88:b0:
         76:9d:6f:34:ce:88:8e:c9:b1:7c:c0:5d:ed:82:8c:df:2b:1b:
         35:f7:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:54 2026 by rpki-client