Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa
File:                     3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa (raw, json)
Hash identifier:          dfm4PHTSGCUQiLHbNQqFygpbw7NGXweAW54Mh53N1dI=
Subject key identifier:   93:D1:E6:D6:E5:AA:BA:1A:BE:FF:CB:B6:86:BC:4D:DD:77:9C:F3:BB
Certificate issuer:       /CN=293C24E146AE3D251ADFCB896B963E9A88757F42
Certificate serial:       097474AE67845BA3A36958813AF9EC94A4D7C8E0
Authority key identifier: 29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa
Signing time:             Mon 30 Jun 2025 14:27:43 +0000
ROA not before:           Mon 30 Jun 2025 14:22:43 +0000
ROA not after:            Mon 29 Jun 2026 14:27:43 +0000
asID:                     267453
IP address blocks:        181.191.51.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:74:74:ae:67:84:5b:a3:a3:69:58:81:3a:f9:ec:94:a4:d7:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293C24E146AE3D251ADFCB896B963E9A88757F42
        Validity
            Not Before: Jun 30 14:22:43 2025 GMT
            Not After : Jun 29 14:27:43 2026 GMT
        Subject: CN=93D1E6D6E5AABA1ABEFFCBB686BC4DDD779CF3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:f3:67:dc:6a:be:5b:00:b0:b2:4d:f5:65:
                    e8:86:62:8c:a4:0e:1f:36:78:f9:55:0d:13:43:da:
                    a8:37:62:85:a5:2e:b0:77:56:55:31:4a:b7:c1:70:
                    05:17:72:4e:80:c4:dc:64:90:ce:ee:68:86:88:a6:
                    ea:38:79:86:aa:25:36:00:b4:5d:46:55:c4:e7:7a:
                    54:db:d9:9c:e8:c1:79:4f:fc:83:9d:ad:06:f8:43:
                    9a:58:9b:96:0a:e7:27:25:46:16:23:0d:5e:bb:38:
                    38:b3:d8:d5:14:5e:6f:33:a1:06:1f:80:2d:55:6b:
                    c3:85:12:d6:30:33:e5:ed:59:21:9f:03:1c:28:e4:
                    e6:d5:24:61:b1:9e:5c:ae:ce:da:78:ab:27:ba:31:
                    0e:42:2b:fb:1d:af:d0:89:ea:1a:eb:23:a6:0d:62:
                    4c:e1:4d:0b:00:f3:6f:17:6b:31:ae:a1:7d:f2:00:
                    7d:40:1c:22:c2:2b:fb:41:81:16:e2:a9:c5:6a:af:
                    ad:9a:d2:d6:14:f7:b1:0c:a4:e3:0d:3e:81:1a:19:
                    e0:e1:7f:9a:50:b0:46:dc:7d:2f:d3:04:a2:af:31:
                    ee:25:0d:8f:5f:98:64:9e:6e:2a:ce:26:8b:fb:25:
                    48:27:e9:38:e6:77:f5:0c:05:33:99:80:a1:11:94:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D1:E6:D6:E5:AA:BA:1A:BE:FF:CB:B6:86:BC:4D:DD:77:9C:F3:BB
            X509v3 Authority Key Identifier:
                keyid:29:3C:24:E1:46:AE:3D:25:1A:DF:CB:89:6B:96:3E:9A:88:75:7F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/293C24E146AE3D251ADFCB896B963E9A88757F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/293C24E146AE3D251ADFCB896B963E9A88757F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e35312e302f32342d3234203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:df:51:ce:ef:97:5a:2d:7a:06:36:ee:7a:0e:a6:8d:6a:
         33:f5:a3:74:28:02:d5:96:e8:75:34:c3:98:60:ad:74:2c:2c:
         a6:fa:7b:98:fb:ea:ea:23:7f:8e:d2:ec:fe:38:60:12:67:6f:
         09:88:1a:d5:fd:43:81:8a:a8:9e:10:ba:04:42:d6:5b:16:70:
         1a:4c:03:16:ae:96:de:ec:01:37:22:a5:84:32:38:63:d0:51:
         11:24:77:22:86:22:b5:89:d3:fc:b3:09:ba:6a:d3:4b:9a:cd:
         7b:6f:ab:67:6a:5b:7a:6a:2b:b4:d8:47:cc:c3:6e:7e:fb:09:
         4a:a4:a0:a6:bf:67:ca:07:e6:c1:c1:55:66:bc:33:94:7b:35:
         94:bf:84:9c:f4:26:a7:42:01:61:1a:72:ad:db:22:69:86:60:
         6a:c7:6e:68:99:5d:0b:f8:45:62:22:14:5b:96:b8:1e:22:16:
         62:25:88:1c:49:c9:cf:78:c6:4a:cb:24:03:db:fb:a7:9d:cd:
         bb:b5:d9:e2:a7:83:bd:bd:2f:a1:5f:af:22:b2:ca:43:0a:72:
         6b:89:92:06:2b:46:d1:94:67:61:ad:67:69:8f:41:a7:57:47:
         da:71:2b:b4:d5:57:b9:3b:3e:33:09:2c:c3:dd:2b:23:f3:32:
         73:6c:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:25:07 2025 by rpki-client