Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa
File:                     3137392e36332e38302e302f32332d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          TmNJlDuTY+9bFvYJTilGLiVMQmaBH4GGsmWlz3pPZAc=
Subject key identifier:   BE:01:C6:96:AC:21:23:5A:36:E4:CB:A8:18:E8:2A:2A:E9:74:D0:24
Certificate issuer:       /CN=80FC550543A986CDF49E05891EDEB2E91D3CD152
Certificate serial:       5CA5BA82AE83723866105571D12AF6B1F22E627B
Authority key identifier: 80:FC:55:05:43:A9:86:CD:F4:9E:05:89:1E:DE:B2:E9:1D:3C:D1:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80FC550543A986CDF49E05891EDEB2E91D3CD152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa
Signing time:             Wed 08 Jul 2026 18:51:06 +0000
ROA not before:           Wed 08 Jul 2026 18:46:06 +0000
ROA not after:            Wed 07 Jul 2027 18:51:06 +0000
asID:                     271556
IP address blocks:        179.63.80.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a5:ba:82:ae:83:72:38:66:10:55:71:d1:2a:f6:b1:f2:2e:62:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80FC550543A986CDF49E05891EDEB2E91D3CD152
        Validity
            Not Before: Jul  8 18:46:06 2026 GMT
            Not After : Jul  7 18:51:06 2027 GMT
        Subject: CN=BE01C696AC21235A36E4CBA818E82A2AE974D024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:90:16:a8:73:45:9e:95:e1:32:4f:0b:ce:3f:
                    3d:9f:e8:db:b9:67:be:51:fe:68:45:9f:7a:27:ab:
                    c5:90:c1:d5:71:4d:bf:0a:9b:4d:b8:1f:0d:a9:af:
                    9e:dd:1c:b8:64:bf:bf:92:19:a3:ed:da:2e:ce:e1:
                    b5:84:a6:45:2b:b7:c4:0f:85:81:35:57:a2:6e:58:
                    98:48:5b:65:66:32:bd:72:a6:a1:a5:b9:08:66:a6:
                    71:3e:01:5f:05:c5:56:38:8e:1b:14:39:92:6c:c2:
                    0e:79:f9:da:ff:63:33:69:75:91:cb:2a:ac:d1:1c:
                    98:af:cb:2c:8c:0e:e0:52:83:f6:1f:bb:cd:ee:f4:
                    a7:98:23:cb:0f:3d:bc:44:7e:6e:c2:94:32:7d:55:
                    26:46:fe:4e:0a:72:78:bf:84:76:67:fd:0e:fe:5b:
                    59:b6:ab:97:62:1d:f3:62:18:66:66:ed:56:63:19:
                    b1:32:52:f1:6d:87:78:b6:0f:fc:98:c9:d7:e3:c5:
                    8c:6f:d2:92:4f:68:bb:bb:d4:6b:12:2a:25:97:33:
                    72:7a:86:e5:58:98:2f:0c:b2:90:1c:26:bc:e2:b4:
                    1d:2b:34:62:95:d6:ff:66:58:97:ff:37:2e:1f:e6:
                    b5:b5:ee:10:fd:fd:85:30:03:61:4d:19:eb:cc:18:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:01:C6:96:AC:21:23:5A:36:E4:CB:A8:18:E8:2A:2A:E9:74:D0:24
            X509v3 Authority Key Identifier:
                keyid:80:FC:55:05:43:A9:86:CD:F4:9E:05:89:1E:DE:B2:E9:1D:3C:D1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/80FC550543A986CDF49E05891EDEB2E91D3CD152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80FC550543A986CDF49E05891EDEB2E91D3CD152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38302e302f32332d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:18:f7:75:31:1f:5f:68:2a:5a:d3:b8:90:da:d5:2c:62:
         76:99:f0:1b:48:0d:b5:76:a6:7d:12:b0:57:34:77:d8:0f:c7:
         cc:a4:fd:63:ff:82:d1:97:33:c4:da:06:62:dd:ca:d8:c1:67:
         31:b0:f0:fc:1c:de:54:ad:1b:06:c6:09:9e:34:bc:28:b9:c8:
         74:7b:30:1e:fa:a3:53:40:a4:5d:10:ee:86:92:cc:dd:fb:26:
         3f:f4:03:3c:44:fe:f0:93:3d:e9:33:a7:d3:f0:1d:85:d4:64:
         96:dd:5d:02:b8:ee:f2:fb:1a:0b:db:7e:1c:21:54:28:80:95:
         f1:a4:4a:35:f6:19:d7:52:63:76:36:d3:f8:b3:28:30:11:4e:
         6b:97:ab:f0:43:f0:6b:95:c1:06:c5:46:7b:8e:ce:04:12:58:
         3c:f7:8b:45:e2:28:16:e4:bd:3d:3a:36:09:01:62:ea:d4:68:
         36:a8:90:43:47:d5:d0:66:f3:5f:bb:36:a1:56:05:5c:55:5a:
         8b:b9:3d:8b:f3:82:ff:66:35:ab:86:47:cc:88:c2:dd:05:15:
         d7:85:a4:a2:98:cc:ba:1e:ff:8f:09:ea:e3:09:18:58:e1:5d:
         5b:4a:52:40:8e:63:e0:1d:45:13:29:0f:3c:93:64:36:06:4d:
         d7:e7:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:54:30 2026 by rpki-client