Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          rA2Yt2hZJx1Wx/0vmIsgsNeVKcjBdRAnGZbGX8xMj0Q=
Subject key identifier:   55:3E:6D:87:94:48:FF:E3:5E:B4:54:FB:D6:BE:48:33:4D:96:7E:42
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       1B859943588FFB8058302B600FA7F29397F0FE1F
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa
Signing time:             Mon 30 Jun 2025 14:27:44 +0000
ROA not before:           Mon 30 Jun 2025 14:22:44 +0000
ROA not after:            Mon 29 Jun 2026 14:27:44 +0000
asID:                     267453
IP address blocks:        181.191.49.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:85:99:43:58:8f:fb:80:58:30:2b:60:0f:a7:f2:93:97:f0:fe:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:44 2025 GMT
            Not After : Jun 29 14:27:44 2026 GMT
        Subject: CN=553E6D879448FFE35EB454FBD6BE48334D967E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:65:10:2d:93:15:ba:9b:42:25:59:89:c1:
                    c6:a7:08:63:50:c2:23:e6:98:5d:d5:cb:36:3c:a1:
                    a0:b6:2a:5d:e0:d5:67:cc:a0:0e:55:59:98:84:80:
                    1e:44:9a:d5:f7:83:23:43:13:20:c4:ee:92:b5:4b:
                    68:ab:8d:7f:f0:cf:cb:e5:75:db:4b:a8:39:18:25:
                    13:55:26:5c:2f:bc:12:17:1d:13:4d:27:82:f2:d4:
                    44:2d:ad:05:48:3f:15:64:2e:f5:e6:13:19:c5:1d:
                    97:ba:73:1c:75:bd:9c:2f:59:5d:e5:f8:33:be:aa:
                    8e:cd:c5:eb:ec:5c:48:3b:c3:e1:16:c4:b6:e7:2a:
                    51:38:10:ec:4b:ea:98:2c:b9:a5:99:ef:05:90:66:
                    30:08:41:29:d1:50:94:9c:7e:b8:85:65:a0:8a:50:
                    0c:8a:a1:ef:63:28:ad:5c:d6:1a:39:a1:b3:a9:0b:
                    58:30:d3:9b:44:db:5d:8d:d2:4a:6d:7e:f1:a5:1b:
                    ad:fe:a8:97:52:f4:68:72:15:8c:30:2e:b0:a3:dd:
                    1e:75:5d:1b:c8:76:33:ec:71:7e:34:99:27:5b:39:
                    a3:6b:9a:b8:b5:a0:94:da:c5:bf:03:56:7e:7b:74:
                    03:f9:20:91:86:49:8a:1a:60:a7:b5:7e:06:49:b6:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:6D:87:94:48:FF:E3:5E:B4:54:FB:D6:BE:48:33:4D:96:7E:42
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34392e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:32:68:02:69:93:4d:29:d0:45:c7:c2:a3:57:de:94:b8:
         fd:ab:bc:2f:0d:fb:c7:3b:c7:78:1e:d8:7a:0d:dc:84:c0:f8:
         d5:11:7b:24:7d:87:d6:f6:83:e7:a1:e0:5b:fb:c0:d5:cd:64:
         26:42:98:97:f9:f9:5c:12:b2:99:f3:0a:c9:26:3b:52:86:9a:
         a4:a2:4a:42:8e:89:23:c1:c8:23:c9:85:71:57:0d:67:5f:a6:
         2e:29:8e:a4:57:23:bf:9e:e6:12:03:0c:b6:50:14:90:a5:36:
         62:76:88:95:69:0c:1f:aa:b7:cf:b3:7f:54:f7:f5:fa:d1:97:
         d0:a5:93:c5:65:7f:eb:e3:82:c2:1d:3e:5f:49:06:f6:64:66:
         b4:19:03:b2:44:48:b6:f3:66:fb:8f:71:9d:19:73:73:34:a4:
         6a:f6:b0:9b:24:23:48:91:33:59:26:e7:9b:f5:99:f2:81:ea:
         0d:f5:ce:ab:8b:f5:ff:78:ee:99:fc:a9:81:32:a9:30:24:89:
         b7:87:4a:37:ff:b3:05:ba:a2:33:1e:a1:e9:1a:ee:52:46:43:
         c2:92:9c:5a:cd:37:55:21:92:94:c1:29:bc:45:e2:4c:48:b1:
         ff:65:12:4b:01:e9:56:12:3c:e6:47:ad:d5:3e:ff:49:5d:9e:
         33:e4:d5:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG4WZQ1iP+4BYMCtgD6fyk5fw/h8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkzQzI0RTE0NkFFM0QyNTFBREZDQjg5NkI5NjNFOUE4
ODc1N0Y0MjAeFw0yNTA2MzAxNDIyNDRaFw0yNjA2MjkxNDI3NDRaMDMxMTAvBgNV
BAMTKDU1M0U2RDg3OTQ0OEZGRTM1RUI0NTRGQkQ2QkU0ODMzNEQ5NjdFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYmUQLZMVuptCJVmJwcanCGNQ
wiPmmF3VyzY8oaC2Kl3g1WfMoA5VWZiEgB5EmtX3gyNDEyDE7pK1S2irjX/wz8vl
ddtLqDkYJRNVJlwvvBIXHRNNJ4Ly1EQtrQVIPxVkLvXmExnFHZe6cxx1vZwvWV3l
+DO+qo7NxevsXEg7w+EWxLbnKlE4EOxL6pgsuaWZ7wWQZjAIQSnRUJScfriFZaCK
UAyKoe9jKK1c1ho5obOpC1gw05tE212N0kptfvGlG63+qJdS9GhyFYwwLrCj3R51
XRvIdjPscX40mSdbOaNrmri1oJTaxb8DVn57dAP5IJGGSYoaYKe1fgZJtsNdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVT5th5RI/+NetFT71r5IM02WfkIwHwYDVR0j
BBgwFoAUKTwk4UauPSUa38uJa5Y+moh1f0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZGdlp0RHN5ZGZFV2E0dkNqNWt2d2cxcldMbW1aeFhRVTdGWVJ4ODZw
bmovMC8yOTNDMjRFMTQ2QUUzRDI1MUFERkNCODk2Qjk2M0U5QTg4NzU3RjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5M0MyNEUxNDZBRTNEMjUx
QURGQ0I4OTZCOTYzRTlBODg3NTdGNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RnZadERzeWRmRVdhNHZDajVrdndnMXJXTG1tWnhYUVU3RllSeDg2cG5qLzAv
MzEzODMxMmUzMTM5MzEyZTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vzEwDQYJKoZIhvcNAQELBQADggEBACGqMmgC
aZNNKdBFx8KjV96UuP2rvC8N+8c7x3ge2HoN3ITA+NUReyR9h9b2g+eh4Fv7wNXN
ZCZCmJf5+VwSspnzCskmO1KGmqSiSkKOiSPByCPJhXFXDWdfpi4pjqRXI7+e5hID
DLZQFJClNmJ2iJVpDB+qt8+zf1T39frRl9Clk8Vlf+vjgsIdPl9JBvZkZrQZA7JE
SLbzZvuPcZ0Zc3M0pGr2sJskI0iRM1km55v1mfKB6g31zquL9f947pn8qYEyqTAk
ibeHSjf/swW6ojMeoeka7lJGQ8KSnFrNN1UhkpTBKbxF4kxIsf9lEksB6VYSPOZH
rdU+/0ldnjPk1RM=
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:11:45 2025 by rpki-client