Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139302e302f32332d3233203d3e20323639343334.roa
File:                     34352e3138362e3139302e302f32332d3233203d3e20323639343334.roa (raw, json)
Hash identifier:          wbI/SNVVtVf4eSWPklhqc7svwXY+SrfaXBcmlQZJzzg=
Subject key identifier:   A9:27:53:3D:6E:4C:1C:D3:AF:F7:0E:B0:A7:F6:84:93:B8:73:B0:5C
Certificate issuer:       /CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
Certificate serial:       2F6E42A0E4D3C130512A79478A8F99A820AC1D2A
Authority key identifier: F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139302e302f32332d3233203d3e20323639343334.roa
Signing time:             Fri 20 Jun 2025 00:32:20 +0000
ROA not before:           Fri 20 Jun 2025 00:27:20 +0000
ROA not after:            Fri 19 Jun 2026 00:32:20 +0000
asID:                     269434
IP address blocks:        45.186.190.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6e:42:a0:e4:d3:c1:30:51:2a:79:47:8a:8f:99:a8:20:ac:1d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AD919FCCA00BC383D6D6398B96B1D77AAFB476
        Validity
            Not Before: Jun 20 00:27:20 2025 GMT
            Not After : Jun 19 00:32:20 2026 GMT
        Subject: CN=A927533D6E4C1CD3AFF70EB0A7F68493B873B05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:57:4e:5f:4f:80:a0:b7:b7:bd:4f:d6:fc:
                    3c:f7:41:1c:fd:47:dc:8a:d0:bf:fe:3e:f3:8d:f4:
                    1f:cc:48:fc:42:36:61:df:55:c5:0b:cf:d5:ea:97:
                    72:3e:b5:2b:ef:44:74:97:0d:3f:72:a3:a5:b7:bc:
                    cb:70:5d:81:06:e5:64:28:c4:23:1e:72:93:fc:c8:
                    01:ba:73:7f:8f:be:93:b4:2c:cf:37:69:22:45:da:
                    ca:8d:e1:34:cc:f9:2d:5f:22:88:88:e9:99:e0:cc:
                    8f:f0:f1:93:a3:9b:ef:77:9b:f8:44:c5:66:a4:41:
                    1e:4e:5b:15:78:bd:4f:51:28:47:01:12:52:9d:de:
                    28:f6:67:85:d2:14:57:d1:6d:d8:3b:4c:92:f2:6c:
                    8b:64:c0:be:4b:88:8c:6d:cf:b4:da:a5:2f:be:c5:
                    9a:2b:78:5d:84:fb:02:f0:ad:6f:02:e4:b0:74:be:
                    15:d9:55:df:25:f6:ff:80:76:cc:5f:fa:bc:13:71:
                    7d:55:49:1a:96:d0:69:fa:41:f6:c3:58:59:39:47:
                    fa:df:fc:b4:a1:3d:83:24:ca:bd:83:65:83:79:04:
                    71:f1:35:f4:09:a9:99:f6:17:92:4e:70:52:2e:d9:
                    21:d6:3f:6d:68:4b:3b:2a:1a:ec:6b:01:7f:5c:42:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:27:53:3D:6E:4C:1C:D3:AF:F7:0E:B0:A7:F6:84:93:B8:73:B0:5C
            X509v3 Authority Key Identifier:
                keyid:F3:AD:91:9F:CC:A0:0B:C3:83:D6:D6:39:8B:96:B1:D7:7A:AF:B4:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AD919FCCA00BC383D6D6398B96B1D77AAFB476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LvikKHA4obx6insTPjPTULbyeoqHhmh48uZdhHh2J8w/0/34352e3138362e3139302e302f32332d3233203d3e20323639343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:a1:ac:35:b1:37:25:c3:61:7b:a6:4c:d5:a1:60:a3:84:
         19:83:08:a7:49:7f:ea:8e:a5:cc:cd:9a:67:5d:3b:31:2f:98:
         1b:f0:5a:3a:01:19:90:2c:49:1a:45:92:ca:e0:94:4f:9e:9e:
         47:57:c9:81:c8:53:6b:c7:58:d2:c4:eb:fc:c5:96:2b:17:af:
         e1:cf:ab:cd:b0:17:2d:8f:ca:16:f7:c1:52:ec:65:a2:4b:bc:
         6b:01:9a:06:6d:95:46:42:69:6c:e3:19:76:84:da:87:f9:1a:
         e3:8e:85:92:28:23:a0:29:0b:d6:5f:43:13:24:5d:50:e9:4a:
         58:29:51:a7:ea:f5:08:15:0e:7a:d9:c7:79:10:21:08:7a:61:
         10:f4:dc:5f:75:0d:ca:79:39:98:48:ef:cf:f5:eb:68:3c:11:
         b2:4c:f8:3d:0f:54:99:0e:f5:01:97:87:71:13:b2:d4:ff:22:
         ba:4e:60:ce:35:10:db:38:05:dd:8e:8c:f8:89:ee:a4:34:c8:
         8b:77:c7:35:a7:ad:8b:82:e3:69:b9:e6:3e:67:a2:e1:c0:c8:
         bf:a2:74:14:7a:00:5e:3c:fa:27:ff:34:74:0d:bf:ce:c7:df:
         ea:52:e6:39:0f:62:23:43:a6:40:3b:f7:38:2f:be:71:82:7a:
         3f:db:a7:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL25CoOTTwTBRKnlHio+ZqCCsHSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBRDkxOUZDQ0EwMEJDMzgzRDZENjM5OEI5NkIxRDc3
QUFGQjQ3NjAeFw0yNTA2MjAwMDI3MjBaFw0yNjA2MTkwMDMyMjBaMDMxMTAvBgNV
BAMTKEE5Mjc1MzNENkU0QzFDRDNBRkY3MEVCMEE3RjY4NDkzQjg3M0IwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09ldOX0+AoLe3vU/W/Dz3QRz9
R9yK0L/+PvON9B/MSPxCNmHfVcULz9Xql3I+tSvvRHSXDT9yo6W3vMtwXYEG5WQo
xCMecpP8yAG6c3+PvpO0LM83aSJF2sqN4TTM+S1fIoiI6ZngzI/w8ZOjm+93m/hE
xWakQR5OWxV4vU9RKEcBElKd3ij2Z4XSFFfRbdg7TJLybItkwL5LiIxtz7TapS++
xZoreF2E+wLwrW8C5LB0vhXZVd8l9v+Adsxf+rwTcX1VSRqW0Gn6QfbDWFk5R/rf
/LShPYMkyr2DZYN5BHHxNfQJqZn2F5JOcFIu2SHWP21oSzsqGuxrAX9cQsRlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqSdTPW5MHNOv9w6wp/aEk7hzsFwwHwYDVR0j
BBgwFoAU862Rn8ygC8OD1tY5i5ax13qvtHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkx2aWtLSEE0b2J4Nmluc1RQalBUVUxieWVvcUhobWg0OHVaZGhIaDJK
OHcvMC9GM0FEOTE5RkNDQTAwQkMzODNENkQ2Mzk4Qjk2QjFENzdBQUZCNDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUQ5MTlGQ0NBMDBCQzM4
M0Q2RDYzOThCOTZCMUQ3N0FBRkI0NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMdmlrS0hBNG9ieDZpbnNUUGpQVFVMYnllb3FIaG1oNDh1WmRoSGgySjh3LzAv
MzQzNTJlMzEzODM2MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtur4wDQYJKoZIhvcNAQELBQADggEBAJBtoaw1
sTclw2F7pkzVoWCjhBmDCKdJf+qOpczNmmddOzEvmBvwWjoBGZAsSRpFksrglE+e
nkdXyYHIU2vHWNLE6/zFlisXr+HPq82wFy2Pyhb3wVLsZaJLvGsBmgZtlUZCaWzj
GXaE2of5GuOOhZIoI6ApC9ZfQxMkXVDpSlgpUafq9QgVDnrZx3kQIQh6YRD03F91
Dcp5OZhI78/162g8EbJM+D0PVJkO9QGXh3ETstT/IrpOYM41ENs4Bd2OjPiJ7qQ0
yIt3xzWnrYuC42m55j5nouHAyL+idBR6AF48+if/NHQNv87H3+pS5jkPYiNDpkA7
9zgvvnGCej/bp5I=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:58:19 2025 by rpki-client