Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa (raw, json)
Hash identifier:          A0T6jiQCXNgoflY3s21vWAkbHYNS5eq0Y1Bdw9DurqA=
Subject key identifier:   AA:FA:9C:46:13:0E:F7:90:F2:D6:3D:CA:CB:3C:46:E1:AB:29:A3:8F
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       218EF3A722E00EB11FA8EF250565CEB0A961C86C
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
Signing time:             Mon 30 Jun 2025 14:27:43 +0000
ROA not before:           Mon 30 Jun 2025 14:22:43 +0000
ROA not after:            Mon 29 Jun 2026 14:27:43 +0000
asID:                     267453
IP address blocks:        181.191.48.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:f3:a7:22:e0:0e:b1:1f:a8:ef:25:05:65:ce:b0:a9:61:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:43 2025 GMT
            Not After : Jun 29 14:27:43 2026 GMT
        Subject: CN=AAFA9C46130EF790F2D63DCACB3C46E1AB29A38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:6d:cd:b7:d9:ae:38:81:2e:f2:3a:3d:c3:
                    cc:1b:d6:8d:c2:04:ce:2e:43:ce:82:7b:4a:c0:d2:
                    94:0b:79:fe:cf:21:38:e9:f3:e4:f5:d2:9e:64:b8:
                    e3:13:fc:4a:e8:f3:d3:b2:f3:3e:41:70:d5:fa:94:
                    22:04:3e:63:52:b6:42:fd:68:eb:9d:f9:d8:dd:a1:
                    65:ac:52:4c:e8:86:85:c6:32:36:43:3c:95:9b:42:
                    67:25:3c:c4:e2:da:c9:bb:ba:38:44:5d:67:31:64:
                    bf:6e:b3:1b:9e:24:d7:e4:1e:03:27:f9:22:e5:f1:
                    51:f8:c8:1f:37:b8:f3:c4:42:de:7f:c9:0a:29:8a:
                    e0:4e:ae:9f:35:99:e0:07:98:15:6b:10:1b:d9:c6:
                    2d:85:c7:56:08:1d:9e:c5:de:4c:ea:42:f4:66:c6:
                    1d:ab:18:d5:7b:5c:78:b4:d3:bf:57:c6:9d:35:b4:
                    44:87:a5:a9:d7:02:8d:08:3c:9d:20:76:b7:ed:97:
                    ed:9d:55:55:12:61:ef:09:b5:f6:f5:05:d8:61:b4:
                    be:f8:30:49:e7:05:f2:95:3e:88:54:43:79:1b:b1:
                    d3:33:18:95:2d:f6:42:29:81:08:d0:e4:ae:37:ab:
                    97:47:15:2d:a8:27:c0:d0:b1:83:fd:79:9d:ed:2c:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:9C:46:13:0E:F7:90:F2:D6:3D:CA:CB:3C:46:E1:AB:29:A3:8F
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:e0:b4:8b:43:8c:5b:ab:92:b5:86:22:4a:dc:3b:94:50:
         af:27:cf:55:1d:cf:44:99:b1:06:6f:01:64:2c:91:a2:d6:68:
         58:6b:0f:a5:06:96:fa:82:c1:2a:2e:27:82:90:a0:8f:72:85:
         7f:c4:21:99:98:3e:b3:f7:36:e0:92:3b:51:43:e4:95:65:91:
         08:e9:ff:b8:f4:a0:f9:71:fb:80:54:83:a3:d9:fc:c5:50:cc:
         f2:20:85:93:2f:28:1b:79:4f:32:2c:fd:bb:4e:e5:3b:ad:98:
         93:e3:35:2c:f9:1d:76:2e:49:a0:1e:e4:71:c7:0e:b4:d4:e9:
         ea:24:53:6b:63:46:c5:63:1d:a6:e8:2c:6d:17:4d:b1:d7:81:
         9c:3d:ad:62:9f:89:d1:53:9f:d8:91:0f:6c:21:f1:4a:d2:7b:
         2b:8c:f4:0d:f4:ae:00:52:7c:65:b4:92:19:cf:ac:08:e3:ee:
         43:5b:8b:07:5d:95:ff:e5:e7:3f:35:45:7f:ee:65:66:2b:e5:
         e9:93:00:c3:c3:65:ee:7d:71:69:cb:e3:03:22:2c:c9:82:42:
         23:7d:90:c4:48:50:85:28:1d:a0:22:7a:18:f4:e0:58:b8:b0:
         41:27:ac:a0:89:28:bb:f0:b1:9e:c2:04:45:2c:cb:30:3f:2e:
         b4:04:21:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:07:02 2025 by rpki-client