Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          SL5bLjTg97idpsq7yw/nwclYdwCWJrrO151zlJWd0sY=
Subject key identifier:   4B:98:B5:B5:0D:B6:D0:54:2E:5B:74:C5:73:9A:5F:69:64:D2:DC:D5
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       44600EB4F2D77AB7F805B889A7BF2BC4DB1DEE88
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa
Signing time:             Wed 14 Oct 2026 16:56:05 +0000
ROA not before:           Wed 14 Oct 2026 16:51:05 +0000
ROA not after:            Wed 13 Oct 2027 16:56:05 +0000
asID:                     264863
IP address blocks:        168.205.248.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:0e:b4:f2:d7:7a:b7:f8:05:b8:89:a7:bf:2b:c4:db:1d:ee:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Oct 14 16:51:05 2026 GMT
            Not After : Oct 13 16:56:05 2027 GMT
        Subject: CN=4B98B5B50DB6D0542E5B74C5739A5F6964D2DCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:97:b4:5d:fd:60:c0:f1:ae:c0:a0:16:d3:
                    56:d1:2d:fe:a7:bb:25:83:30:c9:a0:f9:6b:f7:5f:
                    af:8a:e2:f1:43:60:01:37:49:a5:dd:d7:4a:53:ac:
                    9e:42:2a:b4:b0:43:d0:66:6b:07:ae:e1:c2:c9:93:
                    b6:35:15:7c:36:e2:5f:07:38:8f:f7:b0:0c:e9:2c:
                    a0:33:30:da:0c:03:9f:b3:a4:a7:02:2f:a7:63:4d:
                    5f:89:3c:a4:bb:d2:c5:45:bc:e2:d4:79:af:c8:09:
                    40:73:cb:b7:3c:95:0e:62:97:0d:93:93:a9:c8:d6:
                    e5:25:32:b5:7c:7b:b7:a7:16:45:6b:e2:45:ad:4f:
                    bd:05:47:1d:97:61:d6:26:b0:60:3c:08:ac:18:0c:
                    c5:87:5b:a6:8b:1e:90:6f:e4:a8:2e:bb:0a:1d:bf:
                    f1:92:d6:ba:4c:36:cc:4c:a4:2b:9f:02:48:9a:ff:
                    29:9f:0a:17:7d:0d:9c:75:ff:9b:52:2f:99:39:ed:
                    a3:ab:c9:ea:df:65:87:a7:06:f4:bc:d6:5e:16:80:
                    a1:61:f8:0c:d7:c3:cc:93:ac:f2:e5:19:ad:24:a2:
                    ed:e9:74:dd:f9:9f:55:1c:7f:38:28:68:cf:42:0e:
                    79:0c:6e:82:6d:21:85:55:ab:6d:87:77:f5:57:18:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:B5:B5:0D:B6:D0:54:2E:5B:74:C5:73:9A:5F:69:64:D2:DC:D5
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c6:b0:46:40:bc:af:58:97:01:71:03:56:ab:47:0f:67:9a:
         bd:35:68:dd:4a:be:3d:42:a5:01:e4:6c:c9:79:c9:42:c3:11:
         8b:b5:e3:e8:3e:34:13:3c:78:75:ca:62:f0:2e:c2:91:c4:c3:
         55:5d:3f:80:a7:b2:da:96:5d:10:5f:30:40:4b:51:71:f4:a6:
         ab:7b:87:64:07:fa:22:43:4a:14:5f:48:73:1b:4d:13:6a:2d:
         55:83:02:ae:69:8f:d8:6a:56:b3:93:00:3e:25:64:2a:0b:1e:
         d9:e8:73:fb:ca:42:44:8e:1f:ad:6b:28:96:07:08:33:d5:f0:
         0d:6e:e5:7e:65:e7:00:5e:35:ad:a1:53:a5:04:ad:c1:ad:e5:
         15:78:5c:a2:6e:ec:5d:e9:06:6d:72:37:ce:88:1d:2c:db:f7:
         df:cf:97:58:ff:12:0d:93:cf:14:24:a9:39:ba:d8:bd:a3:f8:
         5d:92:56:37:8a:57:0c:d5:a4:10:70:8c:5f:9b:0e:f5:eb:c9:
         62:17:0d:88:71:8a:f6:7c:f4:2e:74:60:7f:49:06:89:15:2b:
         ee:43:6a:01:50:96:41:22:be:ff:dc:7e:be:82:81:b4:8d:9b:
         d9:8e:3f:59:b4:1a:26:37:9d:de:e4:05:3d:19:c9:3b:3b:ef:
         41:79:9f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:56:49 2026 by rpki-client