Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
File:                     3137372e33392e3136302e302f32312d3234203d3e203238353834.roa (raw, json)
Hash identifier:          idWR9hLXII9WMmirdwidip7D0Ji2j902u70YHr5aZwM=
Subject key identifier:   F5:09:11:62:E0:6F:8A:CB:F6:1F:45:B9:A5:39:76:CB:3D:04:EB:19
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       5D3F7D2A13AC1486CB0A0C4CDF6BFD7B9D02916E
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa
Signing time:             Tue 10 Mar 2026 19:30:16 +0000
ROA not before:           Tue 10 Mar 2026 19:25:16 +0000
ROA not after:            Tue 09 Mar 2027 19:30:16 +0000
asID:                     28584
IP address blocks:        177.39.160.0/21 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3f:7d:2a:13:ac:14:86:cb:0a:0c:4c:df:6b:fd:7b:9d:02:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Mar 10 19:25:16 2026 GMT
            Not After : Mar  9 19:30:16 2027 GMT
        Subject: CN=F5091162E06F8ACBF61F45B9A53976CB3D04EB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:50:1b:9e:d7:92:16:c6:11:22:df:52:50:
                    2b:db:ce:43:1d:0d:38:2b:1a:1b:a5:35:8a:cf:1b:
                    9f:a9:23:81:e4:78:e7:88:32:b1:c8:4f:66:f2:c4:
                    f2:f3:73:7d:b5:3f:df:38:d6:1e:c2:61:65:8b:58:
                    17:c8:51:e2:18:1a:fa:b0:ba:83:06:60:88:8e:ca:
                    55:02:4e:51:50:84:da:3e:49:3b:b9:d7:e5:a2:2f:
                    53:14:d1:40:4e:f7:e4:ed:df:ae:90:53:ce:07:04:
                    40:c6:2e:5a:e6:15:d9:55:c6:ff:e0:8e:70:83:63:
                    ab:a0:67:0b:a3:26:5a:21:ad:f2:3d:35:54:0f:97:
                    72:fc:f0:d0:14:5f:87:c2:0b:fe:c2:27:0a:81:58:
                    44:74:71:71:b3:ef:df:f0:56:2e:3b:6e:e1:6e:16:
                    8c:7a:59:69:4f:55:48:a7:46:7b:96:8b:3b:2c:ed:
                    a6:de:21:c0:aa:e0:49:76:24:60:95:8d:f4:9f:fa:
                    09:6e:e1:79:53:5e:30:1c:e5:9d:ab:62:90:d9:c2:
                    76:be:8b:d5:c8:c0:93:33:80:fd:19:6b:c1:c5:f1:
                    06:ea:42:3c:fd:86:76:8d:88:7a:a7:ad:6b:9c:ab:
                    d7:22:ff:5f:ca:12:b5:9f:2c:69:64:5a:9a:8a:b3:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:11:62:E0:6F:8A:CB:F6:1F:45:B9:A5:39:76:CB:3D:04:EB:19
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:92:64:6b:17:0c:04:4e:92:a1:b0:82:39:f7:57:2e:7e:
         b2:cb:62:81:4e:21:f5:4d:56:b4:d6:78:2f:2a:31:e6:cd:58:
         76:5a:ee:5f:e3:34:ea:66:3f:d4:2d:07:4f:1b:b9:32:3b:7d:
         1c:7e:fc:85:db:24:49:8e:fc:34:05:e9:80:d6:eb:aa:b1:6b:
         31:7d:a3:74:f9:88:58:39:17:1d:ee:5e:50:86:48:af:c9:d0:
         34:4e:e4:4b:f6:3a:94:d7:f2:fb:0c:e4:17:74:6f:11:c5:a8:
         e8:8a:60:dd:04:9f:80:5b:79:d1:ae:80:21:a9:df:ca:bd:72:
         36:98:f4:36:1f:a6:42:46:d2:d0:bd:50:ad:cf:49:f8:41:88:
         ee:03:a6:8c:58:d2:5d:40:5f:03:05:e9:dc:46:1f:46:5e:63:
         aa:c5:73:be:9c:cd:09:56:dd:54:66:d2:58:a6:be:cf:d8:ba:
         c4:81:79:f0:f4:5e:89:93:f3:7e:37:98:34:ee:96:2e:3d:95:
         93:8c:fa:55:00:f5:e4:8b:b0:4b:1c:2d:4b:32:77:aa:78:da:
         2e:24:22:4d:cd:81:ac:94:9d:4b:e0:bf:16:e8:96:56:09:d8:
         fe:dc:c3:f9:d2:d4:46:a0:b1:d1:85:c9:81:0d:21:c9:40:3c:
         2c:7d:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:17 2026 by rpki-client