Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32322d3232203d3e20323636323530.roa
File:                     34352e362e3230382e302f32322d3232203d3e20323636323530.roa (raw, json)
Hash identifier:          g0RLRKg9iIwRH+yH0WOZR5akw6nUjKn6PxvTWVZl0uY=
Subject key identifier:   D5:34:0D:6B:F0:28:AF:6D:CC:62:ED:E9:5B:A6:92:3F:37:27:F5:71
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       0956E505FB27CCBD131E198B02AB0D9589970240
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32322d3232203d3e20323636323530.roa
Signing time:             Thu 17 Apr 2025 17:42:37 +0000
ROA not before:           Thu 17 Apr 2025 17:37:37 +0000
ROA not after:            Thu 16 Apr 2026 17:42:37 +0000
asID:                     266250
IP address blocks:        45.6.208.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:56:e5:05:fb:27:cc:bd:13:1e:19:8b:02:ab:0d:95:89:97:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: Apr 17 17:37:37 2025 GMT
            Not After : Apr 16 17:42:37 2026 GMT
        Subject: CN=D5340D6BF028AF6DCC62EDE95BA6923F3727F571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ca:b8:93:fd:5a:c2:3a:fe:75:73:30:35:2e:
                    95:36:00:1c:cc:5f:2a:4f:3e:47:4e:d4:85:9b:8a:
                    a6:c8:3c:f1:2c:9a:ad:fa:95:8b:75:1d:8f:34:f0:
                    14:48:c1:36:d1:f0:b3:73:b4:73:52:12:79:20:e4:
                    bc:b6:31:84:e9:b0:2a:65:8e:1e:5b:4a:b8:4a:00:
                    f9:40:e7:00:34:e8:a4:af:46:0a:3e:03:6b:c7:bd:
                    13:75:b1:d6:d0:23:5f:33:5c:0f:8d:e2:02:4a:61:
                    c9:68:bc:28:01:9b:94:79:fc:9d:50:02:6b:6b:51:
                    ec:1c:3f:21:01:a0:9e:90:70:46:98:a7:2c:c7:f2:
                    f9:53:7b:05:90:3b:b0:f7:c0:24:3e:53:18:a3:5a:
                    a8:4f:e1:fb:db:97:bc:f6:17:fa:73:47:37:7f:ee:
                    a1:d6:b8:b5:c4:7c:b3:91:53:36:6e:c7:b4:5d:c3:
                    ba:6c:14:d6:24:03:ff:ff:0d:a6:31:4a:c4:d5:b7:
                    d7:df:8f:95:42:40:75:aa:1d:ad:d7:f8:93:a1:e2:
                    c6:fb:1e:2b:be:72:21:a3:5b:56:37:df:01:59:1d:
                    ea:64:c0:b5:2f:5f:8e:29:80:25:bc:33:08:d7:59:
                    3e:cb:95:c0:16:98:76:48:3f:2e:d2:33:5c:8e:ca:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:34:0D:6B:F0:28:AF:6D:CC:62:ED:E9:5B:A6:92:3F:37:27:F5:71
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32322d3232203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:e3:c7:f8:7d:13:cb:10:62:17:06:d2:74:32:40:01:eb:
         6f:7d:1b:57:db:13:57:71:1a:f4:9d:26:8d:0e:af:42:ee:de:
         c0:66:c6:24:b3:81:bf:d5:ed:f4:d6:95:a4:12:d9:07:bc:42:
         9e:32:ea:d7:c1:76:5a:6c:58:00:7c:76:27:3e:2d:51:b2:1e:
         dc:fa:bc:91:f2:cf:2f:85:51:ef:df:e1:8b:6c:c0:0c:c8:a9:
         88:e1:1b:03:b5:95:50:cb:a1:15:d4:cb:64:c0:2e:13:63:29:
         8c:48:ca:94:d3:c5:71:18:c2:e4:17:a3:a1:01:46:74:cc:a8:
         c3:c0:b7:a2:ab:05:28:7d:8b:a2:e7:c2:b1:67:33:49:c1:05:
         23:62:81:05:12:3b:b8:be:ff:13:52:4e:db:75:d5:6f:13:17:
         d2:10:ba:d8:24:9e:2f:da:b5:30:26:75:7d:32:44:29:4c:4d:
         f1:2a:4a:0e:ff:3f:48:a6:e0:09:05:8f:90:ca:0b:37:f0:68:
         0f:fb:4b:b9:75:55:1a:cb:c3:7c:a5:0d:41:b8:0f:47:47:da:
         c4:57:d6:cf:21:10:a8:f5:dc:cb:68:07:37:0c:40:23:e6:da:
         e2:c4:e2:7f:df:61:b3:dd:2a:aa:c5:11:9e:50:b9:ee:83:ac:
         f4:29:62:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCVblBfsnzL0THhmLAqsNlYmXAkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU1RkQ0QjcyQzQwMzEzNUQyMDgxNUVDNkY0MjdEMkJF
RkVCQ0U1ODAeFw0yNTA0MTcxNzM3MzdaFw0yNjA0MTYxNzQyMzdaMDMxMTAvBgNV
BAMTKEQ1MzQwRDZCRjAyOEFGNkRDQzYyRURFOTVCQTY5MjNGMzcyN0Y1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayriT/VrCOv51czA1LpU2ABzM
XypPPkdO1IWbiqbIPPEsmq36lYt1HY808BRIwTbR8LNztHNSEnkg5Ly2MYTpsCpl
jh5bSrhKAPlA5wA06KSvRgo+A2vHvRN1sdbQI18zXA+N4gJKYclovCgBm5R5/J1Q
AmtrUewcPyEBoJ6QcEaYpyzH8vlTewWQO7D3wCQ+UxijWqhP4fvbl7z2F/pzRzd/
7qHWuLXEfLORUzZux7Rdw7psFNYkA///DaYxSsTVt9ffj5VCQHWqHa3X+JOh4sb7
Hiu+ciGjW1Y33wFZHepkwLUvX44pgCW8MwjXWT7LlcAWmHZIPy7SM1yOymnRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1TQNa/Aor23MYu3pW6aSPzcn9XEwHwYDVR0j
BBgwFoAUpV/UtyxAMTXSCBXsb0J9K+/rzlgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmVXUjE4cmtXM2lXc2p6YVpIcnZ1RUw4N21wQnFKN0h0MmVXdHFtQzh0
NnkvMC9BNTVGRDRCNzJDNDAzMTM1RDIwODE1RUM2RjQyN0QyQkVGRUJDRTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NUZENEI3MkM0MDMxMzVE
MjA4MTVFQzZGNDI3RDJCRUZFQkNFNTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlV1IxOHJrVzNpV3NqemFaSHJ2dUVMODdtcEJxSjdIdDJlV3RxbUM4dDZ5LzAv
MzQzNTJlMzYyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjMy
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0G0DANBgkqhkiG9w0BAQsFAAOCAQEAbi3jx/h9E8sQ
YhcG0nQyQAHrb30bV9sTV3Ea9J0mjQ6vQu7ewGbGJLOBv9Xt9NaVpBLZB7xCnjLq
18F2WmxYAHx2Jz4tUbIe3Pq8kfLPL4VR79/hi2zADMipiOEbA7WVUMuhFdTLZMAu
E2MpjEjKlNPFcRjC5BejoQFGdMyow8C3oqsFKH2LoufCsWczScEFI2KBBRI7uL7/
E1JO23XVbxMX0hC62CSeL9q1MCZ1fTJEKUxN8SpKDv8/SKbgCQWPkMoLN/BoD/tL
uXVVGsvDfKUNQbgPR0faxFfWzyEQqPXcy2gHNwxAI+ba4sTif99hs90qqsURnlC5
7oOs9CliOw==
-----END CERTIFICATE-----
Generated at Mon May 12 19:47:54 2025 by rpki-client