Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235312e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3235312e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          TbwnfsAk+v4jecd4FMyT+tMSgz3pVzKdH7Aa9a33/00=
Subject key identifier:   29:76:9F:F0:E5:28:DB:BA:07:FD:7B:02:E9:E4:B2:76:1B:3E:4C:BA
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       19E85472509C8217F83E9F0A5D31C5D772E6DC02
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235312e302f32342d3234203d3e20323634383633.roa
Signing time:             Wed 14 Oct 2026 16:56:19 +0000
ROA not before:           Wed 14 Oct 2026 16:51:19 +0000
ROA not after:            Wed 13 Oct 2027 16:56:19 +0000
asID:                     264863
IP address blocks:        168.205.251.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:54:72:50:9c:82:17:f8:3e:9f:0a:5d:31:c5:d7:72:e6:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Oct 14 16:51:19 2026 GMT
            Not After : Oct 13 16:56:19 2027 GMT
        Subject: CN=29769FF0E528DBBA07FD7B02E9E4B2761B3E4CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:68:60:eb:96:d6:19:1a:1b:f5:d9:e4:1e:
                    c3:d7:58:96:1c:90:eb:14:8d:81:15:c8:47:16:c0:
                    30:c6:b1:b0:6c:4d:49:b4:f1:e5:58:6a:5f:e0:ed:
                    ec:2a:d9:59:19:e0:25:bb:16:e5:1e:48:1e:ea:b6:
                    2e:95:c3:c4:31:6f:b9:18:85:2c:e2:c1:66:0e:88:
                    c5:c4:8b:ef:bb:07:02:0b:ac:e9:ff:37:10:8a:e2:
                    66:d5:51:1a:ad:5f:3d:cd:e1:25:55:3f:13:c5:ae:
                    32:64:28:af:3a:c4:d0:d6:bd:90:51:84:62:88:2f:
                    7a:59:1a:80:de:9e:71:29:6e:5f:b1:49:92:6d:48:
                    18:79:67:ac:62:28:f0:48:3c:70:8c:11:e9:da:bf:
                    87:43:77:c2:53:6d:c9:18:5a:fb:37:f5:20:04:64:
                    e8:e1:39:84:7f:3b:60:9a:d0:5f:93:ef:92:a1:09:
                    a4:e5:cb:c6:4c:a7:64:55:03:0e:7c:3c:5e:11:e9:
                    89:47:32:95:74:ce:0c:16:a2:74:b9:d1:6a:7e:76:
                    46:8d:60:a4:cb:27:8a:7f:92:63:80:b5:bd:7a:79:
                    d7:24:5b:f7:82:aa:0b:89:89:98:47:a6:11:94:00:
                    36:b3:d2:95:35:ab:48:e4:b3:f8:30:af:7c:4c:6f:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:76:9F:F0:E5:28:DB:BA:07:FD:7B:02:E9:E4:B2:76:1B:3E:4C:BA
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235312e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:d0:18:e7:b1:3c:36:ac:99:64:a3:7a:c8:5b:67:a6:4a:
         61:28:12:80:21:35:c2:16:42:f1:cc:24:db:3d:a9:fe:cc:34:
         80:7c:3d:54:52:bb:62:37:45:8f:8a:85:b4:cc:55:0a:8b:14:
         e9:8f:b1:e0:7f:09:fc:63:88:a9:d5:a1:70:47:d0:ab:1c:ec:
         e7:97:50:b5:7c:4a:ce:11:38:de:3c:c5:00:b1:f3:d4:51:e2:
         ce:f9:7a:4b:05:02:61:50:67:2e:13:a9:6d:8b:00:5c:af:38:
         a2:8a:4d:eb:89:5b:23:d4:a0:ec:71:ce:66:1c:1f:72:57:a7:
         02:36:24:33:14:18:9f:0c:58:00:0c:c3:62:68:f5:f6:9a:a0:
         13:cd:d2:8d:c9:f0:14:d2:87:42:c9:a0:80:2d:53:84:8e:ca:
         b3:e6:a3:46:34:a1:a8:25:7f:1d:40:93:fb:91:29:2d:d2:f1:
         02:63:52:ed:44:81:37:8b:aa:6f:d4:a3:c6:0e:4f:c2:18:1f:
         aa:38:87:19:4d:f2:a4:bd:6c:50:50:e6:4f:2b:d8:8a:f5:a8:
         82:79:0b:74:5e:04:d5:4d:5d:14:05:3d:5c:8a:34:bd:a1:47:
         29:a8:d5:37:cd:f6:ed:9e:27:7c:e0:46:04:e0:eb:5d:4f:82:
         f1:d7:c5:17
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGehUclCcghf4Pp8KXTHF13Lm3AIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg0RDU0Qzc1MTdCREYwNUJBNEFBQzA5NkQ0OEMzNTcx
MzA4ODdFMDAeFw0yNjEwMTQxNjUxMTlaFw0yNzEwMTMxNjU2MTlaMDMxMTAvBgNV
BAMTKDI5NzY5RkYwRTUyOERCQkEwN0ZEN0IwMkU5RTRCMjc2MUIzRTRDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdN2hg65bWGRob9dnkHsPXWJYc
kOsUjYEVyEcWwDDGsbBsTUm08eVYal/g7ewq2VkZ4CW7FuUeSB7qti6Vw8Qxb7kY
hSziwWYOiMXEi++7BwILrOn/NxCK4mbVURqtXz3N4SVVPxPFrjJkKK86xNDWvZBR
hGKIL3pZGoDennEpbl+xSZJtSBh5Z6xiKPBIPHCMEenav4dDd8JTbckYWvs39SAE
ZOjhOYR/O2Ca0F+T75KhCaTly8ZMp2RVAw58PF4R6YlHMpV0zgwWonS50Wp+dkaN
YKTLJ4p/kmOAtb16edckW/eCqguJiZhHphGUADaz0pU1q0jks/gwr3xMb4DzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKXaf8OUo27oH/XsC6eSydhs+TLowHwYDVR0j
BBgwFoAUOE1Ux1F73wW6SqwJbUjDVxMIh+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTNVdFRwanpLY3VvVm5BUXFFZ2V3UkxZMzRVQjVkdzkzcmZqcEJWR2hp
dWcvMC8zODRENTRDNzUxN0JERjA1QkE0QUFDMDk2RDQ4QzM1NzEzMDg4N0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4NEQ1NEM3NTE3QkRGMDVC
QTRBQUMwOTZENDhDMzU3MTMwODg3RTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzVXRUcGp6S2N1b1ZuQVFxRWdld1JMWTM0VUI1ZHc5M3JmanBCVkdoaXVnLzAv
MzEzNjM4MmUzMjMwMzUyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjN+zANBgkqhkiG9w0BAQsFAAOCAQEAsHzQ
GOexPDasmWSjeshbZ6ZKYSgSgCE1whZC8cwk2z2p/sw0gHw9VFK7YjdFj4qFtMxV
CosU6Y+x4H8J/GOIqdWhcEfQqxzs55dQtXxKzhE43jzFALHz1FHizvl6SwUCYVBn
LhOpbYsAXK84oopN64lbI9Sg7HHOZhwfclenAjYkMxQYnwxYAAzDYmj19pqgE83S
jcnwFNKHQsmggC1ThI7Ks+ajRjShqCV/HUCT+5EpLdLxAmNS7USBN4uqb9Sjxg5P
whgfqjiHGU3ypL1sUFDmTyvYivWognkLdF4E1U1dFAU9XIo0vaFHKajVN8327Z4n
fOBGBODrXU+C8dfFFw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 09:12:53 2026 by rpki-client