Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          I/vEpvx4UOM35nkPvP6eeLgdvbJsVHiHZWCJ5iZaOO0=
Subject key identifier:   0F:02:06:44:08:BF:3F:4F:52:34:1D:CD:03:9B:36:BB:4C:85:5D:75
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       2B1424E431639221DE24356F2F2A7F4C28E1525A
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
Signing time:             Wed 14 Oct 2026 16:56:12 +0000
ROA not before:           Wed 14 Oct 2026 16:51:12 +0000
ROA not after:            Wed 13 Oct 2027 16:56:12 +0000
asID:                     264863
IP address blocks:        168.205.250.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:24:e4:31:63:92:21:de:24:35:6f:2f:2a:7f:4c:28:e1:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Oct 14 16:51:12 2026 GMT
            Not After : Oct 13 16:56:12 2027 GMT
        Subject: CN=0F02064408BF3F4F52341DCD039B36BB4C855D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:84:a6:10:72:72:24:17:92:a9:75:63:22:
                    d0:a8:de:c9:c0:fd:60:c6:91:85:9d:11:33:3e:d2:
                    a5:46:69:45:9f:b3:05:31:51:57:11:85:84:f6:52:
                    b4:79:65:ed:3c:af:74:70:c0:37:c8:e2:0d:26:4b:
                    77:aa:67:d7:b0:dc:a4:85:e6:a5:d2:45:2d:3b:d1:
                    67:1a:62:f6:03:3e:cf:3a:14:fb:e6:01:45:33:fa:
                    2f:2f:7f:ad:bf:e2:69:48:eb:5f:6a:61:7b:c1:2a:
                    0d:63:a8:04:3d:ad:54:b5:3f:40:8e:81:a8:a6:2e:
                    c7:f6:49:83:11:2b:e5:b0:63:75:5c:8f:2d:43:a5:
                    b7:db:f9:e3:88:10:40:b1:a5:d7:73:f0:a9:6f:71:
                    c5:aa:f8:8d:0f:6e:71:49:df:f8:a4:91:10:05:42:
                    1d:0d:9b:42:bb:39:7a:25:90:1b:f4:fd:ae:c7:01:
                    7e:b3:36:89:03:1b:b0:97:70:93:c0:d1:0d:27:0d:
                    3a:78:04:0f:46:23:fc:50:5e:b5:89:d5:50:0a:ea:
                    61:7b:0f:da:f7:60:79:ae:eb:3b:cf:99:f3:9d:2a:
                    51:6a:a8:32:5d:74:7c:45:5a:50:35:03:ed:25:3c:
                    1f:a8:40:3e:97:44:21:d8:a1:f5:4d:20:06:98:05:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:06:44:08:BF:3F:4F:52:34:1D:CD:03:9B:36:BB:4C:85:5D:75
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:dc:b5:6b:be:c9:9b:f9:c5:6a:d9:eb:b7:5c:4b:11:5b:
         70:6b:be:e4:25:6b:c1:4f:8c:43:e3:08:c0:4c:95:d9:54:07:
         ac:ea:5c:1b:da:5b:61:e1:5d:d8:6b:e1:d5:48:12:b4:cb:49:
         f7:4a:d5:4e:6e:8b:d5:ec:76:2e:c2:34:d9:e9:5c:ae:94:73:
         75:e3:7f:9a:e8:f0:3b:bb:c3:2a:84:ea:b5:5c:d7:cf:bd:ac:
         6a:e4:6f:18:67:ee:60:9e:bf:c3:4d:a9:f2:8d:f0:85:a0:ca:
         79:70:e3:47:8f:0b:92:98:e1:05:20:76:41:84:b4:6e:b5:b9:
         b8:49:53:93:94:83:e1:01:6d:b1:17:73:6a:83:32:72:e7:00:
         f1:09:62:84:32:19:ed:ef:eb:f9:fe:f9:cb:ac:c0:10:7b:00:
         22:39:53:00:7d:e5:08:a5:8a:a6:a1:a2:c2:e0:f0:99:f5:02:
         a7:aa:13:72:f6:b6:54:a2:d1:c4:de:18:e5:31:86:df:15:73:
         07:11:82:6c:31:8c:3b:a0:72:46:64:2d:64:4c:af:fe:aa:9c:
         44:3e:d4:ad:0e:f2:60:62:b5:81:d6:e0:b2:62:d9:57:06:60:
         fb:88:c0:d6:f6:d5:b2:8f:3c:06:23:93:84:6f:66:4b:ed:0e:
         5f:2c:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:31:56 2026 by rpki-client