Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          M6thMsgw0Tax4KHYsJc44JQsb8NLidYTIy2jI4bs4Xk=
Subject key identifier:   00:E9:8B:6D:88:55:2F:DB:F6:A5:E5:2E:33:B4:72:AE:46:D7:26:D8
Certificate issuer:       /CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Certificate serial:       319B7F3EDB0ADF45FBCE09214370654959F96455
Authority key identifier: B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
Signing time:             Thu 02 Jul 2026 15:54:24 +0000
ROA not before:           Thu 02 Jul 2026 15:49:24 +0000
ROA not after:            Thu 01 Jul 2027 15:54:24 +0000
asID:                     263995
IP address blocks:        138.255.229.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9b:7f:3e:db:0a:df:45:fb:ce:09:21:43:70:65:49:59:f9:64:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7047B095A7C54A0D935E35C988F1A341D363E06
        Validity
            Not Before: Jul  2 15:49:24 2026 GMT
            Not After : Jul  1 15:54:24 2027 GMT
        Subject: CN=00E98B6D88552FDBF6A5E52E33B472AE46D726D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:b6:f3:e0:87:49:7b:53:e3:fb:4d:50:47:
                    a5:68:1a:24:04:82:c4:d6:d2:36:45:8c:79:dd:b6:
                    3d:cd:86:53:13:43:e8:76:96:b0:c0:bd:8b:d5:25:
                    f6:9c:56:d7:14:b3:51:42:67:58:50:1d:6d:39:bc:
                    e7:4a:77:05:2f:16:82:97:82:a8:19:93:55:e3:e7:
                    9c:bf:5c:51:87:01:6f:9d:71:75:c4:1b:95:df:c0:
                    0a:80:84:6c:16:67:30:75:c3:e6:a1:6e:fd:85:bb:
                    61:fd:2e:1a:d8:1e:2e:d4:13:e2:2f:03:7a:cd:d2:
                    00:1f:8f:fa:28:21:73:31:06:a1:2e:a1:95:46:2b:
                    06:9b:b8:2a:46:28:21:1f:fc:c6:a6:6d:24:35:69:
                    9f:6d:4e:79:2d:a3:f2:e1:0f:f1:59:d5:d2:8c:26:
                    2b:17:ff:f9:e6:60:5b:bf:12:82:eb:a9:69:84:bb:
                    d8:b7:4d:0a:bd:7f:de:df:4d:94:0d:00:e6:c9:54:
                    19:25:49:69:f3:2b:b0:eb:ea:be:d0:0e:31:f9:32:
                    4c:38:0f:c1:4b:72:4c:ce:43:bd:dc:8b:4f:a9:e9:
                    89:9f:f2:2c:34:ba:eb:c3:7a:1a:d0:1a:54:ec:41:
                    f9:c3:ae:63:ab:f8:d1:fa:6a:20:21:68:e6:2b:90:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:8B:6D:88:55:2F:DB:F6:A5:E5:2E:33:B4:72:AE:46:D7:26:D8
            X509v3 Authority Key Identifier:
                keyid:B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:03:cc:34:ff:e4:ad:9d:9d:7b:5e:0d:5d:35:8a:15:91:25:
         7b:fd:0f:e0:fa:b0:dd:9b:6e:09:d2:a6:1f:1a:e1:27:03:8a:
         e0:8f:99:5b:6c:71:6d:a7:5a:14:30:d3:60:f6:6e:34:9f:9d:
         5b:6e:db:03:c1:a3:9f:d1:a2:0e:70:c5:22:2e:3a:bb:fa:d3:
         7b:81:9e:7a:5a:46:c8:57:79:3e:ea:cd:e6:ab:1c:08:d3:bc:
         45:2b:25:90:0c:c0:6d:2a:87:d7:d9:e8:12:0e:a7:23:5f:85:
         87:71:cd:76:62:ba:d4:c7:20:49:9f:e3:40:fc:79:ed:5c:9a:
         a8:2f:b3:5e:35:c5:1e:13:b6:66:43:8b:ea:14:d8:16:b2:16:
         df:29:40:31:9a:78:57:cd:89:2d:01:1a:33:c0:aa:f9:75:89:
         fc:16:40:c0:1c:81:1f:35:df:4e:6c:c9:5e:5a:8d:cc:3d:37:
         9a:9d:28:a0:24:0d:1a:01:86:86:78:92:2f:b8:99:51:e9:83:
         45:d1:99:b3:2a:9d:84:08:7d:19:35:75:68:a3:0f:73:2d:50:
         e9:8b:db:39:1a:fe:24:ba:92:97:33:16:48:3a:97:3b:1a:4f:
         dd:05:9b:fc:27:83:b1:ad:d4:5c:f0:98:3d:97:9b:2e:10:d6:
         9b:61:04:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMZt/PtsK30X7zgkhQ3BlSVn5ZFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwNDdCMDk1QTdDNTRBMEQ5MzVFMzVDOTg4RjFBMzQx
RDM2M0UwNjAeFw0yNjA3MDIxNTQ5MjRaFw0yNzA3MDExNTU0MjRaMDMxMTAvBgNV
BAMTKDAwRTk4QjZEODg1NTJGREJGNkE1RTUyRTMzQjQ3MkFFNDZENzI2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0rbz4IdJe1Pj+01QR6VoGiQE
gsTW0jZFjHndtj3NhlMTQ+h2lrDAvYvVJfacVtcUs1FCZ1hQHW05vOdKdwUvFoKX
gqgZk1Xj55y/XFGHAW+dcXXEG5XfwAqAhGwWZzB1w+ahbv2Fu2H9LhrYHi7UE+Iv
A3rN0gAfj/ooIXMxBqEuoZVGKwabuCpGKCEf/MambSQ1aZ9tTnkto/LhD/FZ1dKM
JisX//nmYFu/EoLrqWmEu9i3TQq9f97fTZQNAObJVBklSWnzK7Dr6r7QDjH5Mkw4
D8FLckzOQ73ci0+p6Ymf8iw0uuvDehrQGlTsQfnDrmOr+NH6aiAhaOYrkJ+lAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAOmLbYhVL9v2peUuM7RyrkbXJtgwHwYDVR0j
BBgwFoAUtwR7CVp8VKDZNeNcmI8aNB02PgYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMC9CNzA0N0IwOTVBN0M1NEEwRDkzNUUzNUM5ODhGMUEzNDFEMzYzRTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MDQ3QjA5NUE3QzU0QTBE
OTM1RTM1Qzk4OEYxQTM0MUQzNjNFMDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzAv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/5TANBgkqhkiG9w0BAQsFAAOCAQEApAPM
NP/krZ2de14NXTWKFZEle/0P4Pqw3ZtuCdKmHxrhJwOK4I+ZW2xxbadaFDDTYPZu
NJ+dW27bA8Gjn9GiDnDFIi46u/rTe4GeelpGyFd5PurN5qscCNO8RSslkAzAbSqH
19noEg6nI1+Fh3HNdmK61McgSZ/jQPx57VyaqC+zXjXFHhO2ZkOL6hTYFrIW3ylA
MZp4V82JLQEaM8Cq+XWJ/BZAwByBHzXfTmzJXlqNzD03mp0ooCQNGgGGhniSL7iZ
UemDRdGZsyqdhAh9GTV1aKMPcy1Q6YvbORr+JLqSlzMWSDqXOxpP3QWb/CeDsa3U
XPCYPZebLhDWm2EE3Q==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:36 2026 by rpki-client