Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa
File:                     34352e362e3230382e302f32332d3233203d3e20323636323530.roa (raw, json)
Hash identifier:          PBqC2UeqmRJXVuy3tqOxUHrEBWc19oGQyy0oDIuSXzE=
Subject key identifier:   27:42:2F:1B:C0:18:3F:2B:65:7D:E9:D9:90:D1:7A:71:A8:D8:B9:EB
Certificate issuer:       /CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
Certificate serial:       4BD46A0D789DC69643AE6BD931D7E40DFAEE0B4F
Authority key identifier: A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa
Signing time:             Thu 17 Apr 2025 17:42:38 +0000
ROA not before:           Thu 17 Apr 2025 17:37:38 +0000
ROA not after:            Thu 16 Apr 2026 17:42:38 +0000
asID:                     266250
IP address blocks:        45.6.208.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d4:6a:0d:78:9d:c6:96:43:ae:6b:d9:31:d7:e4:0d:fa:ee:0b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A55FD4B72C403135D20815EC6F427D2BEFEBCE58
        Validity
            Not Before: Apr 17 17:37:38 2025 GMT
            Not After : Apr 16 17:42:38 2026 GMT
        Subject: CN=27422F1BC0183F2B657DE9D990D17A71A8D8B9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:8c:28:00:a0:f0:ab:20:af:2e:f8:81:f9:
                    53:15:f5:50:5d:c0:96:ce:5d:1a:19:27:3b:d8:74:
                    f1:2c:b9:2a:fe:ef:61:36:09:37:b2:b9:31:23:c2:
                    9a:61:8d:7d:54:5c:49:65:9d:3f:2d:f4:b5:61:30:
                    b5:60:52:39:8c:b3:bf:03:d8:b1:e8:9b:e0:60:f1:
                    58:fd:28:08:15:e1:68:0d:25:1a:f8:21:34:6c:b6:
                    f6:f3:ae:8f:5d:c0:62:56:90:47:e4:b6:24:9a:62:
                    a0:65:08:32:2f:7c:df:58:dd:0b:bd:4c:41:7e:48:
                    7a:69:06:ec:b7:2e:0b:19:bd:8b:a6:9e:f4:be:dd:
                    d2:e9:a4:2c:08:21:2d:44:9e:89:63:1c:25:f9:af:
                    53:1a:05:f4:3c:11:de:29:1c:b4:99:a4:50:9c:58:
                    8b:78:57:9e:b5:3e:11:05:7e:21:f4:d4:69:cc:a7:
                    1e:d7:cb:7c:b9:89:13:45:c3:bd:9f:c4:0c:77:e6:
                    f9:46:6a:39:b4:bb:50:ae:a9:2d:9a:0a:62:43:0d:
                    72:62:30:22:89:dd:a0:d0:6e:73:95:84:d5:84:12:
                    c7:f2:d3:71:ed:81:16:54:5c:0d:b2:cd:dc:5f:b8:
                    ba:71:ba:69:a2:de:16:ec:70:0d:f4:97:08:6e:25:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:42:2F:1B:C0:18:3F:2B:65:7D:E9:D9:90:D1:7A:71:A8:D8:B9:EB
            X509v3 Authority Key Identifier:
                keyid:A5:5F:D4:B7:2C:40:31:35:D2:08:15:EC:6F:42:7D:2B:EF:EB:CE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A55FD4B72C403135D20815EC6F427D2BEFEBCE58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eWR18rkW3iWsjzaZHrvuEL87mpBqJ7Ht2eWtqmC8t6y/0/34352e362e3230382e302f32332d3233203d3e20323636323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:fc:23:f4:42:ae:22:5f:61:02:b6:c4:69:18:59:69:2b:
         41:07:66:ee:8f:f6:7f:2d:4d:2d:9b:20:94:e9:55:2d:60:16:
         cd:d0:69:c7:f1:16:4c:2a:1d:85:6a:20:f5:b2:77:2d:bc:d6:
         9c:e6:05:d1:9d:80:87:43:81:bd:a4:5d:40:42:c9:3b:3e:54:
         c0:1a:0e:d7:a6:55:f5:93:75:6e:f6:b0:88:a7:31:11:8c:f2:
         7d:e3:f3:e2:0b:3d:a3:45:b6:8c:e3:5e:55:f1:30:5b:19:2e:
         ac:34:0a:f2:4f:ac:d6:b3:50:ee:2c:bc:7d:01:ee:d1:cf:ea:
         a3:5f:98:9b:e9:cb:4e:cd:09:35:c6:a3:33:f0:89:5d:29:4a:
         c2:ee:a8:a7:d1:3e:b3:66:fe:ea:e6:87:b8:2e:9e:96:62:85:
         91:a0:99:d1:39:16:96:c2:6d:76:bf:e9:64:66:73:f8:39:7d:
         24:bf:11:d3:c3:77:52:d5:13:f4:8c:2c:4b:b0:da:a7:d9:7d:
         71:82:26:91:d5:ec:93:45:b0:7f:bc:a0:db:69:a4:56:21:8b:
         cd:e9:e1:db:b2:b8:c7:f8:7f:a2:d2:87:9a:c4:f4:5d:37:66:
         3a:eb:f6:32:4e:56:11:09:e4:9c:1c:f8:b7:30:46:99:29:a5:
         5c:06:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:38:04 2025 by rpki-client