Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/34352e3139302e302e302f32322d3234203d3e20323638393435.roa
File:                     34352e3139302e302e302f32322d3234203d3e20323638393435.roa (raw, json)
Hash identifier:          8mDxkfODzzbYcbBH5KfTctEeW/oz00yek1fmT6f81LE=
Subject key identifier:   B6:D4:1C:9C:03:7E:1F:AD:08:AA:31:F2:D0:41:89:44:49:6F:39:A6
Certificate issuer:       /CN=181B201A899153CF582A86103A0811BB84F1E769
Certificate serial:       0CDACFAC0A3224AE3AE43807CC386EB863E676FD
Authority key identifier: 18:1B:20:1A:89:91:53:CF:58:2A:86:10:3A:08:11:BB:84:F1:E7:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181B201A899153CF582A86103A0811BB84F1E769.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/34352e3139302e302e302f32322d3234203d3e20323638393435.roa
Signing time:             Mon 20 Jul 2026 16:48:32 +0000
ROA not before:           Mon 20 Jul 2026 16:43:32 +0000
ROA not after:            Mon 19 Jul 2027 16:48:32 +0000
asID:                     268945
IP address blocks:        45.190.0.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:cf:ac:0a:32:24:ae:3a:e4:38:07:cc:38:6e:b8:63:e6:76:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181B201A899153CF582A86103A0811BB84F1E769
        Validity
            Not Before: Jul 20 16:43:32 2026 GMT
            Not After : Jul 19 16:48:32 2027 GMT
        Subject: CN=B6D41C9C037E1FAD08AA31F2D0418944496F39A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:f0:eb:b2:53:39:91:2e:b4:84:b4:95:11:
                    13:38:72:7a:d6:0c:bd:a0:a7:b9:e6:e8:37:b8:5e:
                    d7:94:28:48:de:54:a1:bd:f3:20:e5:6b:1b:f5:3a:
                    00:e9:1d:7c:b6:c4:ab:d6:08:95:5c:db:4f:1b:52:
                    64:73:d5:6a:54:60:cc:67:f3:13:cc:e0:f8:56:10:
                    6d:a6:90:7b:d7:6e:28:46:a5:94:40:f5:51:6a:51:
                    98:17:36:23:da:f8:e7:ac:e0:b4:b6:67:38:61:94:
                    5a:e4:38:45:f6:20:6d:3c:1d:eb:c1:85:cd:d0:77:
                    40:1a:01:50:9f:7f:2c:99:52:4e:49:62:1d:bf:96:
                    f9:be:ad:9c:c4:68:4c:da:ac:8f:21:0b:1d:bb:b7:
                    7c:ba:24:0d:df:27:54:10:0b:be:d3:15:40:27:b8:
                    90:2f:6d:29:19:fd:78:a8:cd:4f:ca:e7:09:21:61:
                    2d:b2:4e:74:65:c3:8b:7f:ea:75:4d:ab:11:4c:7f:
                    51:f2:d4:e9:b0:e8:9d:2c:8e:85:90:09:e2:97:41:
                    50:e2:52:f3:c9:1a:d0:f6:de:3c:20:dd:e7:ec:91:
                    3d:99:e4:24:d4:dd:42:1e:1f:7d:fd:ea:fa:06:02:
                    dc:ec:19:7d:e9:6d:db:94:44:85:3e:c2:d0:f3:a8:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:1C:9C:03:7E:1F:AD:08:AA:31:F2:D0:41:89:44:49:6F:39:A6
            X509v3 Authority Key Identifier:
                keyid:18:1B:20:1A:89:91:53:CF:58:2A:86:10:3A:08:11:BB:84:F1:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/181B201A899153CF582A86103A0811BB84F1E769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181B201A899153CF582A86103A0811BB84F1E769.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/34352e3139302e302e302f32322d3234203d3e20323638393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:80:8d:16:94:ba:64:5b:d2:75:02:dd:62:68:a4:51:fd:5f:
         d1:b9:07:9d:25:b1:1e:df:dc:c1:19:2d:c8:25:27:0c:13:00:
         e1:16:21:31:d6:31:2b:28:4a:18:2c:6d:e7:90:c5:9c:6b:77:
         7a:28:ee:e2:a1:f0:00:5d:38:3f:16:16:f9:7e:bd:02:8a:9a:
         da:0a:b6:57:ba:4f:24:a7:5d:a1:4d:fb:c3:cf:45:cc:92:fd:
         78:c0:b2:88:33:64:dc:ea:dd:01:f7:e7:9d:4d:37:cf:dc:d3:
         8e:31:23:d2:29:ae:24:02:e6:26:e9:00:ba:fb:ed:a2:35:d5:
         a8:fe:2a:75:e6:1d:c7:de:32:76:bd:4a:62:1f:da:24:2d:7b:
         97:cd:78:4b:8c:b8:e2:e3:27:f1:ac:66:b8:b0:e8:f3:aa:fb:
         00:ab:9e:05:83:3c:de:24:1b:69:95:8b:a5:8c:f8:bd:dc:eb:
         71:66:53:43:89:91:d9:ee:26:7f:d3:0a:e6:0f:6b:90:01:a6:
         f0:94:c6:2c:5c:d2:bb:0a:4f:5a:e9:53:0e:ef:a2:ef:e4:b1:
         ed:d0:3f:8e:6e:f1:b1:d7:ed:29:b4:32:8b:49:e0:d6:3e:a9:
         dd:a3:f7:ba:9f:9a:9e:ee:9d:22:24:b6:60:e5:39:79:eb:ee:
         b4:b4:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:17 2026 by rpki-client