Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          QM9Wgrv+SITF3g8MsSIS/75eH/HxckIzbOZM8lN1LUw=
Subject key identifier:   45:EC:ED:46:28:E4:A8:40:CB:2B:53:8B:C6:1F:00:BD:82:B2:E4:BF
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       3ADD6F75B7E73B5E31360415641A7B07714C5701
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa
Signing time:             Mon 30 Jun 2025 14:27:42 +0000
ROA not before:           Mon 30 Jun 2025 14:22:42 +0000
ROA not after:            Mon 29 Jun 2026 14:27:42 +0000
asID:                     267453
IP address blocks:        181.191.50.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:dd:6f:75:b7:e7:3b:5e:31:36:04:15:64:1a:7b:07:71:4c:57:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:42 2025 GMT
            Not After : Jun 29 14:27:42 2026 GMT
        Subject: CN=45ECED4628E4A840CB2B538BC61F00BD82B2E4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:79:18:a3:f2:c8:2d:45:8f:f5:53:7c:06:
                    c5:73:15:df:06:03:74:42:44:94:d1:95:f3:4e:40:
                    04:ea:fd:aa:22:24:0d:ba:3f:25:e2:71:2c:c3:a5:
                    89:aa:9a:a0:96:34:25:d7:52:95:ef:6b:cf:01:a0:
                    67:b3:ad:1b:e3:96:44:24:45:e1:1f:3e:f1:95:b3:
                    d5:42:e2:3a:5a:aa:22:db:6f:e7:28:1b:18:f2:d4:
                    0b:5c:35:09:74:15:51:09:d1:c9:83:be:e6:61:f9:
                    a0:d1:fd:de:73:5a:01:a2:3f:ac:6a:8a:18:57:f1:
                    89:50:13:d9:42:93:98:a6:8e:e0:70:04:db:18:1c:
                    f4:2f:57:34:2c:44:2e:70:e5:b3:aa:4f:f0:01:72:
                    78:89:dc:ee:7f:f6:7b:50:7d:20:cb:a6:a7:6e:d3:
                    f6:27:25:cf:c5:38:ef:a1:4d:a6:6a:15:5f:46:dd:
                    bf:f5:ef:b2:95:61:e6:4d:3a:1e:b6:79:f4:12:ce:
                    9f:5a:4a:71:5b:b3:7d:2c:ff:8b:ca:b3:4d:be:2a:
                    6a:9e:e8:ca:aa:8c:ad:37:60:d0:85:21:f6:64:f5:
                    79:7e:dc:cd:9d:39:2d:a3:f7:df:9b:39:27:95:3a:
                    17:c2:f5:4d:f1:b5:a1:15:ee:b1:ef:aa:15:96:01:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EC:ED:46:28:E4:A8:40:CB:2B:53:8B:C6:1F:00:BD:82:B2:E4:BF
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35302e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:be:57:f7:8a:2e:83:a7:1b:53:e8:22:82:5e:47:72:3d:cc:
         2e:67:bf:06:07:d8:a5:fa:b1:18:14:54:5e:db:b8:d9:fb:c8:
         22:7d:cd:10:9a:e4:5a:d1:00:63:2e:a6:d6:da:31:61:ec:51:
         e9:b6:f8:15:94:62:3e:18:48:de:ac:43:98:43:66:d8:90:06:
         ca:60:35:fd:13:8a:c9:76:61:6c:7a:f9:72:b8:39:f2:b6:2a:
         9d:45:d4:6e:ee:31:54:ed:55:c6:dc:15:ec:ee:8f:eb:c4:76:
         58:21:a8:0a:7b:ab:75:e4:a6:5e:5f:a6:d7:66:4a:88:bd:fc:
         0f:b2:37:c3:b4:50:f0:3b:cd:26:57:ee:25:cc:32:30:31:ff:
         74:ed:5d:05:8f:ef:97:2e:a0:e9:42:21:97:19:f6:ba:8f:7a:
         30:9f:d7:04:4d:6d:33:2f:40:d6:74:f9:92:7e:bb:09:46:23:
         aa:1a:77:9c:59:33:4c:a5:82:60:ec:92:62:b3:1e:69:fd:cb:
         39:b2:0f:61:eb:b0:86:16:41:21:e0:3f:7c:8a:d3:7e:57:4c:
         23:78:b2:98:e7:28:07:2f:1a:93:a3:b6:9e:7f:3f:cb:70:1e:
         a8:ad:4e:1a:3e:63:90:d6:b0:fb:35:1f:a2:ff:ab:7d:a7:90:
         03:bc:c5:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOt1vdbfnO14xNgQVZBp7B3FMVwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkzQzI0RTE0NkFFM0QyNTFBREZDQjg5NkI5NjNFOUE4
ODc1N0Y0MjAeFw0yNTA2MzAxNDIyNDJaFw0yNjA2MjkxNDI3NDJaMDMxMTAvBgNV
BAMTKDQ1RUNFRDQ2MjhFNEE4NDBDQjJCNTM4QkM2MUYwMEJEODJCMkU0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRxnkYo/LILUWP9VN8BsVzFd8G
A3RCRJTRlfNOQATq/aoiJA26PyXicSzDpYmqmqCWNCXXUpXva88BoGezrRvjlkQk
ReEfPvGVs9VC4jpaqiLbb+coGxjy1AtcNQl0FVEJ0cmDvuZh+aDR/d5zWgGiP6xq
ihhX8YlQE9lCk5imjuBwBNsYHPQvVzQsRC5w5bOqT/ABcniJ3O5/9ntQfSDLpqdu
0/YnJc/FOO+hTaZqFV9G3b/177KVYeZNOh62efQSzp9aSnFbs30s/4vKs02+Kmqe
6MqqjK03YNCFIfZk9Xl+3M2dOS2j99+bOSeVOhfC9U3xtaEV7rHvqhWWAZVPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUReztRijkqEDLK1OLxh8AvYKy5L8wHwYDVR0j
BBgwFoAUKTwk4UauPSUa38uJa5Y+moh1f0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZGdlp0RHN5ZGZFV2E0dkNqNWt2d2cxcldMbW1aeFhRVTdGWVJ4ODZw
bmovMC8yOTNDMjRFMTQ2QUUzRDI1MUFERkNCODk2Qjk2M0U5QTg4NzU3RjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5M0MyNEUxNDZBRTNEMjUx
QURGQ0I4OTZCOTYzRTlBODg3NTdGNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RnZadERzeWRmRVdhNHZDajVrdndnMXJXTG1tWnhYUVU3RllSeDg2cG5qLzAv
MzEzODMxMmUzMTM5MzEyZTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vzIwDQYJKoZIhvcNAQELBQADggEBAIK+V/eK
LoOnG1PoIoJeR3I9zC5nvwYH2KX6sRgUVF7buNn7yCJ9zRCa5FrRAGMuptbaMWHs
Uem2+BWUYj4YSN6sQ5hDZtiQBspgNf0Tisl2YWx6+XK4OfK2Kp1F1G7uMVTtVcbc
Fezuj+vEdlghqAp7q3Xkpl5fptdmSoi9/A+yN8O0UPA7zSZX7iXMMjAx/3TtXQWP
75cuoOlCIZcZ9rqPejCf1wRNbTMvQNZ0+ZJ+uwlGI6oad5xZM0ylgmDskmKzHmn9
yzmyD2HrsIYWQSHgP3yK035XTCN4spjnKAcvGpOjtp5/P8twHqitTho+Y5DWsPs1
H6L/q32nkAO8xTE=
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:10:55 2025 by rpki-client