Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
File:                     3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (raw, json)
Hash identifier:          Tl7uVSo5iuqENPs5OSniCOFJJRNn0uK2C+kgPZbqM38=
Subject key identifier:   2A:CE:DF:7D:A3:7F:6B:10:64:48:97:4E:25:2F:BC:61:55:35:E0:AA
Certificate issuer:       /CN=90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC
Certificate serial:       60FB011A4E3C3409368C6233A1072708AF64D449
Authority key identifier: 90:E0:0F:2D:E1:A5:C8:C9:E1:3E:2B:3B:39:26:35:42:3D:1F:68:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa
Signing time:             Mon 23 Mar 2026 10:22:00 +0000
ROA not before:           Mon 23 Mar 2026 10:17:00 +0000
ROA not after:            Mon 22 Mar 2027 10:22:00 +0000
asID:                     263567
IP address blocks:        179.109.32.0/20 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fb:01:1a:4e:3c:34:09:36:8c:62:33:a1:07:27:08:af:64:d4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC
        Validity
            Not Before: Mar 23 10:17:00 2026 GMT
            Not After : Mar 22 10:22:00 2027 GMT
        Subject: CN=2ACEDF7DA37F6B106448974E252FBC615535E0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:b4:ff:b0:ca:24:67:fc:f5:87:87:d3:7a:
                    fc:fe:58:0d:06:0f:cb:7b:2e:c7:06:0d:2b:d7:bd:
                    24:61:ce:82:d3:fb:6c:5b:6a:5c:10:3a:1f:56:45:
                    6e:eb:24:68:12:51:0e:70:81:05:42:99:7c:8e:fd:
                    fc:fc:f0:58:ef:c5:c2:79:c7:8e:ba:ad:56:7e:99:
                    cb:ca:6d:d3:6f:95:8e:f7:1b:da:a3:56:5d:e5:4b:
                    f8:42:dc:8e:53:fa:93:58:37:79:15:7b:75:47:aa:
                    8f:83:ad:53:bb:8f:1f:62:fa:31:3b:36:97:18:4e:
                    e2:a3:29:1d:32:29:ac:4e:0e:f7:7f:c9:c3:2e:86:
                    57:67:ee:6e:7d:e2:a6:3a:72:7a:ab:be:90:59:5c:
                    ad:24:4b:79:58:4c:97:88:2c:4a:f1:31:05:d3:28:
                    d8:a8:e6:bf:76:20:be:98:09:f3:7f:24:cb:b3:7a:
                    94:fa:05:06:17:7b:9e:02:4b:82:b7:c3:bb:f0:05:
                    a3:9a:2b:34:df:97:e7:cf:7b:47:83:11:95:7f:65:
                    c9:39:da:c7:25:fe:80:80:25:38:0e:d8:ca:17:a6:
                    e1:fd:40:d0:d6:ad:56:aa:0e:f6:98:b4:94:63:1b:
                    db:6b:ca:da:65:bd:c2:d8:9a:f2:8a:b8:4d:42:f6:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:DF:7D:A3:7F:6B:10:64:48:97:4E:25:2F:BC:61:55:35:E0:AA
            X509v3 Authority Key Identifier:
                keyid:90:E0:0F:2D:E1:A5:C8:C9:E1:3E:2B:3B:39:26:35:42:3D:1F:68:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90E00F2DE1A5C8C9E13E2B3B392635423D1F68FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:8a:59:e8:33:5c:db:39:78:06:f0:ab:63:e4:0d:cb:c1:0b:
         ed:e7:42:a1:51:1f:1f:d3:69:58:0c:86:46:17:1b:22:69:7a:
         b2:96:b3:fc:2d:2d:69:c5:28:2e:15:53:70:0d:cc:f9:81:ef:
         8c:c0:54:ff:c2:1d:95:c1:c3:44:93:0f:93:96:7e:23:03:0e:
         74:71:d7:24:6c:ec:13:18:3a:da:7d:f0:d8:05:e7:75:a6:37:
         50:19:1a:c9:c6:a3:ac:f4:96:64:bd:9a:cb:3f:9a:97:83:83:
         8d:ad:0d:7d:03:13:22:d2:9c:39:cf:ef:f8:bb:2b:ec:1b:f5:
         7f:e9:96:26:ce:22:7b:c9:fb:f6:6f:d4:99:87:7d:ad:f3:63:
         f8:b4:49:a2:ca:95:e6:af:7d:f8:67:23:cb:58:44:3d:27:aa:
         b1:7d:23:a1:94:69:a4:51:3c:43:3b:51:a1:e1:fa:c5:53:2e:
         75:a0:df:fd:01:e7:39:d1:dd:24:21:e9:24:1b:39:86:71:ed:
         65:b6:ec:7e:9c:e0:3a:9a:fc:d7:84:dd:62:e5:80:16:80:46:
         99:b1:f7:32:92:09:bb:32:f0:62:32:c9:ce:d4:9f:5f:98:50:
         43:a1:30:3d:5e:c9:5f:f3:20:f3:1f:f7:cc:87:da:97:b1:7a:
         6e:57:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:52:51 2026 by rpki-client