Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          Qu7PFoaRWhFJ2qkvgznsi8du0K0yMdnXVqSXjpp5HqE=
Subject key identifier:   3C:D1:AE:7B:F5:DB:C8:D7:04:31:BD:AD:F8:F3:C1:71:16:02:77:E8
Certificate issuer:       /CN=EE79D7B9735D56DEFFBA1DE9A2B665F0F7FC8735
Certificate serial:       39FC98B0C92C3919CFCE40187CFDCAE312B81787
Authority key identifier: EE:79:D7:B9:73:5D:56:DE:FF:BA:1D:E9:A2:B6:65:F0:F7:FC:87:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE79D7B9735D56DEFFBA1DE9A2B665F0F7FC8735.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa
Signing time:             Wed 08 Jul 2026 18:51:46 +0000
ROA not before:           Wed 08 Jul 2026 18:46:46 +0000
ROA not after:            Wed 07 Jul 2027 18:51:46 +0000
asID:                     271500
IP address blocks:        181.233.176.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fc:98:b0:c9:2c:39:19:cf:ce:40:18:7c:fd:ca:e3:12:b8:17:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE79D7B9735D56DEFFBA1DE9A2B665F0F7FC8735
        Validity
            Not Before: Jul  8 18:46:46 2026 GMT
            Not After : Jul  7 18:51:46 2027 GMT
        Subject: CN=3CD1AE7BF5DBC8D70431BDADF8F3C171160277E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:d5:a9:e2:ea:6b:59:20:f9:3b:06:02:3c:
                    2c:11:49:66:dc:74:4a:c7:41:42:64:7b:4a:ea:b2:
                    7f:c7:3f:4d:e8:b1:57:e2:c1:80:f3:bc:d5:65:a0:
                    92:10:e0:c3:4b:a9:f0:52:25:0a:79:ad:42:6a:d9:
                    d4:79:ce:59:91:15:34:47:a4:a2:23:78:64:d8:a5:
                    c4:ac:df:da:fc:13:f2:4f:f5:17:9e:8c:a7:c7:b9:
                    c0:9d:f3:c5:52:99:4f:84:91:39:2e:6c:32:bc:29:
                    95:80:df:c2:c1:8c:fb:d2:ac:09:83:66:2a:b7:0c:
                    3f:76:56:a7:3d:8a:49:3a:c3:c8:2a:c1:14:19:3d:
                    b9:11:fb:2c:35:ea:f7:fc:df:d2:21:2d:88:b5:c1:
                    6a:46:c8:89:4b:29:61:6f:3c:ce:8f:b1:c4:33:41:
                    7b:6b:19:ad:59:fe:19:98:a2:ee:7a:95:49:16:1e:
                    1f:c2:c6:54:d5:38:04:56:99:e7:53:3d:1c:7d:f9:
                    73:c9:22:f0:31:8d:81:cd:d8:b9:f1:01:df:bb:a5:
                    9c:3d:16:8a:0f:f5:ac:d2:63:37:1b:af:86:1e:c4:
                    d1:f5:88:cc:7d:28:36:e4:4f:ea:9d:ed:7d:ce:c8:
                    a1:52:5d:23:1c:83:86:e4:ba:7c:87:0a:4f:79:20:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:AE:7B:F5:DB:C8:D7:04:31:BD:AD:F8:F3:C1:71:16:02:77:E8
            X509v3 Authority Key Identifier:
                keyid:EE:79:D7:B9:73:5D:56:DE:FF:BA:1D:E9:A2:B6:65:F0:F7:FC:87:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/EE79D7B9735D56DEFFBA1DE9A2B665F0F7FC8735.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE79D7B9735D56DEFFBA1DE9A2B665F0F7FC8735.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:20:ef:a8:d2:11:ab:42:41:9e:fb:10:27:c2:b5:98:21:
         10:1f:5b:bb:bb:d8:f3:cc:c4:0b:96:62:ad:90:f0:b2:12:60:
         e9:11:b0:79:80:bd:13:cc:03:88:df:fa:ce:07:05:e9:26:7a:
         34:7b:ef:1e:00:6a:24:d3:bd:3e:76:a4:67:f7:d8:d8:a3:ac:
         0e:8d:e7:da:11:85:29:ea:8b:99:ed:17:0b:d5:7f:5e:ca:0f:
         c9:4c:32:1f:6f:6f:b7:29:63:b3:75:76:08:9c:d5:42:66:70:
         f7:23:e4:34:07:00:0a:f0:9d:21:eb:ae:c3:f2:8f:9e:ee:2e:
         04:d6:0b:79:0a:a5:94:5f:78:39:5f:d7:15:fc:6c:0e:0f:31:
         ed:b6:e7:f8:ba:5a:85:f3:cd:8d:a0:b1:e0:1f:06:1f:37:d2:
         4b:75:a4:e6:2b:f0:ad:b2:53:12:1f:04:c6:0e:38:c9:86:e0:
         d2:32:da:ed:9c:fb:68:98:e9:ea:21:cd:03:80:a8:9a:0b:c7:
         e7:51:80:87:26:30:0b:51:f8:54:34:38:59:6b:f9:5c:eb:fc:
         42:13:72:ab:2c:ba:ce:53:1a:3d:48:91:ed:f2:ac:53:bc:7d:
         19:9f:c0:33:c6:c7:39:55:03:a6:d1:a5:62:37:1d:c3:f2:f8:
         ad:25:6b:65
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOfyYsMksORnPzkAYfP3K4xK4F4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU3OUQ3Qjk3MzVENTZERUZGQkExREU5QTJCNjY1RjBG
N0ZDODczNTAeFw0yNjA3MDgxODQ2NDZaFw0yNzA3MDcxODUxNDZaMDMxMTAvBgNV
BAMTKDNDRDFBRTdCRjVEQkM4RDcwNDMxQkRBREY4RjNDMTcxMTYwMjc3RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbNWp4uprWSD5OwYCPCwRSWbc
dErHQUJke0rqsn/HP03osVfiwYDzvNVloJIQ4MNLqfBSJQp5rUJq2dR5zlmRFTRH
pKIjeGTYpcSs39r8E/JP9ReejKfHucCd88VSmU+EkTkubDK8KZWA38LBjPvSrAmD
Ziq3DD92Vqc9ikk6w8gqwRQZPbkR+yw16vf839IhLYi1wWpGyIlLKWFvPM6PscQz
QXtrGa1Z/hmYou56lUkWHh/CxlTVOARWmedTPRx9+XPJIvAxjYHN2LnxAd+7pZw9
FooP9azSYzcbr4YexNH1iMx9KDbkT+qd7X3OyKFSXSMcg4bkunyHCk95IGaHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPNGue/XbyNcEMb2t+PPBcRYCd+gwHwYDVR0j
BBgwFoAU7nnXuXNdVt7/uh3porZl8Pf8hzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRBOGt5Mm5oOHB0YXNyVW5rcGlNQUF6MUs2ZHd5TTJmNno3czZXeHdK
TDYvMC9FRTc5RDdCOTczNUQ1NkRFRkZCQTFERTlBMkI2NjVGMEY3RkM4NzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFNzlEN0I5NzM1RDU2REVG
RkJBMURFOUEyQjY2NUYwRjdGQzg3MzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0QThreTJuaDhwdGFzclVua3BpTUFBejFLNmR3eU0yZjZ6N3M2V3h3Skw2LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXpsDANBgkqhkiG9w0BAQsFAAOCAQEAd+wg
76jSEatCQZ77ECfCtZghEB9bu7vY88zEC5ZirZDwshJg6RGweYC9E8wDiN/6zgcF
6SZ6NHvvHgBqJNO9PnakZ/fY2KOsDo3n2hGFKeqLme0XC9V/XsoPyUwyH29vtylj
s3V2CJzVQmZw9yPkNAcACvCdIeuuw/KPnu4uBNYLeQqllF94OV/XFfxsDg8x7bbn
+LpahfPNjaCx4B8GHzfSS3Wk5ivwrbJTEh8Exg44yYbg0jLa7Zz7aJjp6iHNA4Co
mgvH51GAhyYwC1H4VDQ4WWv5XOv8QhNyqyy6zlMaPUiR7fKsU7x9GZ/AM8bHOVUD
ptGlYjcdw/L4rSVrZQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:36:55 2026 by rpki-client