Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          Dw8Gtro3k3+rBQZivej+yWNt1diCWmZJjVVlO3nj1zA=
Subject key identifier:   D4:04:AC:F1:A5:48:27:B5:E7:A2:82:85:2C:93:1E:5C:B2:52:17:5D
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       38796710EE31A9FD3FC8CC7584EA0F191C86CD7F
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa
Signing time:             Mon 30 Jun 2025 14:27:42 +0000
ROA not before:           Mon 30 Jun 2025 14:22:42 +0000
ROA not after:            Mon 29 Jun 2026 14:27:42 +0000
asID:                     267453
IP address blocks:        181.191.48.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:79:67:10:ee:31:a9:fd:3f:c8:cc:75:84:ea:0f:19:1c:86:cd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:42 2025 GMT
            Not After : Jun 29 14:27:42 2026 GMT
        Subject: CN=D404ACF1A54827B5E7A282852C931E5CB252175D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:4e:19:10:b7:11:3f:2c:60:80:d7:e6:5a:
                    a7:db:8e:b9:09:de:ca:33:04:2b:61:50:2e:82:ed:
                    31:aa:cf:18:b7:b7:39:3b:b9:5c:38:02:54:4b:c6:
                    23:00:6e:48:07:9b:16:9e:80:34:24:21:01:22:42:
                    75:82:c5:ac:f0:5c:a4:34:11:e4:80:10:ce:8d:5e:
                    20:b8:d2:13:b8:17:35:ee:02:59:2d:50:25:cd:08:
                    6f:ca:f3:bf:b1:e0:53:6c:c0:1e:77:88:09:fb:fd:
                    4c:46:7b:2b:cd:20:66:b6:8f:9d:86:eb:c2:22:bd:
                    31:d6:04:71:7e:e1:08:0d:cc:ac:37:cc:87:44:96:
                    52:30:5c:de:77:bc:12:fe:18:1d:5b:9a:09:30:ac:
                    12:63:29:f3:2e:c3:21:57:25:ad:39:3b:04:c3:4e:
                    ca:ea:84:9e:82:a8:4f:9b:68:a5:d1:99:fd:91:0f:
                    5c:fb:52:a8:7c:e7:13:ba:ab:18:1e:d6:0e:ef:16:
                    c8:91:f4:7b:9a:9d:d1:b3:d2:58:5a:4b:2d:76:87:
                    68:c5:0d:0d:2a:06:33:60:5a:46:a2:d3:26:22:e0:
                    97:8b:5a:1b:6b:68:58:4b:9d:30:55:b8:52:ec:b2:
                    5d:30:a9:a4:4a:7f:ee:74:02:b9:c5:50:30:dc:97:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:AC:F1:A5:48:27:B5:E7:A2:82:85:2C:93:1E:5C:B2:52:17:5D
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:27:3d:69:ba:e9:bc:c6:b9:b4:3a:fb:22:1f:de:7b:bf:37:
         37:dd:9e:14:3e:45:08:20:34:c3:b8:df:ac:f6:72:e7:23:ca:
         15:24:68:4b:94:99:97:c8:cd:6c:da:c2:4f:8e:ed:49:09:54:
         c6:d4:67:d0:6c:a4:b6:3d:60:30:df:71:d3:59:b2:12:24:95:
         4b:5b:a5:cf:d8:b1:f5:88:12:11:85:8e:95:3c:be:ce:d9:f2:
         02:68:ec:65:eb:18:41:ae:0b:14:6e:82:c2:23:d3:ab:f5:da:
         9f:37:e4:11:dc:6d:63:07:d6:d0:03:60:cc:45:69:fb:cf:dc:
         a5:22:ea:97:ce:44:9b:31:9b:0e:95:56:95:b6:23:3c:0e:2d:
         31:fb:d0:d8:4a:b3:d5:31:50:36:95:88:45:05:f6:77:54:ee:
         60:09:44:b7:21:ce:b4:be:a0:8f:b5:d9:9c:62:dd:7d:4a:01:
         a9:4b:94:9f:c4:eb:ac:f9:7e:94:78:d7:b8:a9:c8:bb:76:88:
         aa:ee:40:f2:4c:fc:f6:30:c7:a4:dc:0d:f3:82:b3:17:6c:75:
         fa:71:29:e2:50:fa:c7:10:e2:b6:b9:c1:08:6a:bd:2e:ac:44:
         fc:02:92:a0:9b:39:39:9b:87:8a:89:32:34:8b:97:b2:b1:36:
         d2:84:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:14:21 2025 by rpki-client