Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa
File:                     34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa (raw, json)
Hash identifier:          Gp2B6Sm5E8QH4lb91CHk+nWT5hdy589nOvNEKQeOUDY=
Subject key identifier:   3F:5D:2D:0E:05:18:66:A4:E9:B2:1A:E4:E4:BC:71:60:B3:30:47:65
Certificate issuer:       /CN=813D65FBA309A9EA091B5CF0F748FC498935778B
Certificate serial:       553836F3116325D6290ECFDA4EBF308C57C7814A
Authority key identifier: 81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa
Signing time:             Tue 10 Mar 2026 14:13:32 +0000
ROA not before:           Tue 10 Mar 2026 14:08:32 +0000
ROA not after:            Tue 09 Mar 2027 14:13:32 +0000
asID:                     268991
IP address blocks:        45.177.116.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:38:36:f3:11:63:25:d6:29:0e:cf:da:4e:bf:30:8c:57:c7:81:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813D65FBA309A9EA091B5CF0F748FC498935778B
        Validity
            Not Before: Mar 10 14:08:32 2026 GMT
            Not After : Mar  9 14:13:32 2027 GMT
        Subject: CN=3F5D2D0E051866A4E9B21AE4E4BC7160B3304765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:58:93:b5:a5:44:3b:c4:51:b3:03:b8:98:e2:
                    22:4e:6b:fd:f6:ef:89:c1:66:f6:6b:65:22:fb:16:
                    3b:bc:b1:ce:6b:c9:a1:72:82:3e:43:5f:95:12:a2:
                    b8:43:7b:b4:36:3c:e0:a9:2b:bf:2d:e6:da:40:9f:
                    f0:15:ef:1f:62:f2:c6:6a:0f:01:5c:ad:44:22:14:
                    e4:2a:3f:06:d2:43:69:4b:40:63:fd:08:16:e9:b3:
                    fc:c3:e5:51:91:33:b7:92:bd:52:b5:9e:cd:bf:36:
                    3a:14:10:59:b9:3f:f9:24:a2:3d:28:43:1e:40:8d:
                    2f:d9:53:5b:80:13:18:dd:fb:b5:02:67:f4:e0:66:
                    17:b9:89:0e:f9:73:04:88:cc:12:34:44:51:79:58:
                    aa:c9:44:c3:ed:df:bf:40:fa:22:1c:e1:cd:03:bb:
                    79:c9:0a:5c:3d:02:68:5a:cc:f2:47:f8:4d:fb:43:
                    49:68:d6:a2:a3:65:09:47:ce:07:45:ce:17:e9:0d:
                    91:d0:e7:6f:8f:2a:85:35:d5:b3:53:e0:18:20:6e:
                    06:27:8f:53:b3:be:f2:81:c7:ad:30:51:55:1a:99:
                    fe:83:11:9f:f8:aa:4d:f2:03:d6:63:6a:9e:17:a4:
                    fb:c0:a5:74:b4:0a:38:11:b7:8a:e4:42:9c:a6:c3:
                    cd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:2D:0E:05:18:66:A4:E9:B2:1A:E4:E4:BC:71:60:B3:30:47:65
            X509v3 Authority Key Identifier:
                keyid:81:3D:65:FB:A3:09:A9:EA:09:1B:5C:F0:F7:48:FC:49:89:35:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/813D65FBA309A9EA091B5CF0F748FC498935778B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/813D65FBA309A9EA091B5CF0F748FC498935778B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdmsLnHNnNeqNBmQGvwNYGkz6RkouNoYAZWFeZQej7mr/0/34352e3137372e3131362e302f32322d3332203d3e20323638393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:3b:2c:7f:5e:7b:c5:ad:7d:ce:f7:62:70:44:2e:07:f0:
         93:93:fa:0c:e7:4c:ba:90:73:39:a5:d4:6d:42:58:02:e8:2e:
         6a:7a:81:8b:2f:0b:14:42:68:14:6e:69:8c:d1:e1:59:9e:11:
         08:84:b3:dd:85:bb:9c:c2:d2:41:df:6d:99:c2:ed:f4:50:b1:
         53:38:88:23:fb:70:9e:fd:cb:1c:d9:fa:45:7b:9c:ad:b3:a7:
         bb:a8:89:d7:60:45:dd:bc:16:e1:f9:0b:49:0d:ec:f4:ee:73:
         36:f7:d5:0f:41:a2:33:dd:15:99:66:91:ef:40:8b:79:6a:7d:
         38:be:a8:98:fd:26:13:4c:1e:48:7c:6b:ae:63:02:ca:6b:b8:
         24:fc:5b:ce:d3:9b:ae:8d:44:66:d6:bb:26:4a:48:56:85:73:
         85:22:50:30:42:96:ba:a1:26:82:9a:23:e4:28:d7:77:e3:09:
         44:5e:b6:f9:37:0b:df:2a:e7:1a:b2:63:42:df:bf:19:c1:88:
         70:b4:df:5a:15:9d:ac:fd:42:b3:9c:07:2f:df:25:db:42:4d:
         e1:66:fa:5c:fc:05:f8:e3:90:1b:55:fa:b7:3a:8c:a3:e3:28:
         a2:7c:2e:4c:bd:c7:b4:ed:63:a8:f6:1a:b5:9f:12:38:69:98:
         59:45:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:02:02 2026 by rpki-client