Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39382e302f32342d3234203d3e20323731363931.roa
File:                     3139302e3138352e39382e302f32342d3234203d3e20323731363931.roa (raw, json)
Hash identifier:          cSXHV++55pOWnLocacSMqoR1rcihU+1DWWrX4RmBSlY=
Subject key identifier:   1B:9C:A7:33:72:32:2C:A4:17:C0:E4:2D:EE:32:5A:FE:24:DE:8F:36
Certificate issuer:       /CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
Certificate serial:       7E2C8377411B6BC84D61E2AADE635B08F3B8D10B
Authority key identifier: CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39382e302f32342d3234203d3e20323731363931.roa
Signing time:             Mon 16 Mar 2026 20:56:08 +0000
ROA not before:           Mon 16 Mar 2026 20:51:08 +0000
ROA not after:            Mon 15 Mar 2027 20:56:08 +0000
asID:                     271691
IP address blocks:        190.185.98.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2c:83:77:41:1b:6b:c8:4d:61:e2:aa:de:63:5b:08:f3:b8:d1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
        Validity
            Not Before: Mar 16 20:51:08 2026 GMT
            Not After : Mar 15 20:56:08 2027 GMT
        Subject: CN=1B9CA73372322CA417C0E42DEE325AFE24DE8F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:51:5d:1b:17:61:9b:62:51:17:aa:11:11:
                    53:bb:7f:6d:74:59:73:ca:cf:90:5a:82:39:c1:20:
                    e5:cb:7a:d8:dd:a4:15:c1:2a:51:ee:cd:36:53:7a:
                    75:fc:8d:48:e7:9f:5c:4e:71:6e:94:7a:70:01:0f:
                    23:74:fb:c4:50:47:bd:ca:0e:90:7a:e5:88:50:4b:
                    f3:f3:99:f8:18:cd:3d:9a:12:68:d9:07:90:97:97:
                    c1:15:cc:fb:18:0a:06:ad:7a:2f:41:7d:f8:33:20:
                    b8:39:e6:e0:d4:c5:df:98:74:20:7e:23:46:d0:ca:
                    9d:35:90:c5:62:12:9f:ab:4a:e1:71:2a:f4:5e:6b:
                    d4:23:09:85:af:11:eb:4f:66:62:d6:fa:f1:4d:1a:
                    2f:59:32:a5:b4:0d:59:14:c9:41:b9:98:72:5a:db:
                    b6:2c:c7:31:58:f8:21:02:1f:42:23:4d:5a:e0:e7:
                    65:13:6c:bd:8b:b0:10:47:00:7d:00:f0:0a:93:a4:
                    3d:86:31:e6:12:31:73:1f:31:a5:0f:0d:86:76:66:
                    57:8c:1e:fc:16:8d:93:7a:0c:81:d7:6b:d5:a5:c6:
                    1e:01:f2:f3:6c:48:96:6b:a4:bb:6e:f2:b0:c7:eb:
                    c7:52:78:86:af:ec:2a:88:93:66:13:1b:07:5f:46:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9C:A7:33:72:32:2C:A4:17:C0:E4:2D:EE:32:5A:FE:24:DE:8F:36
            X509v3 Authority Key Identifier:
                keyid:CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39382e302f32342d3234203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:74:96:b6:0f:35:52:a1:ad:ba:5d:0b:ae:af:de:fb:66:36:
         1e:4e:d4:49:11:27:98:27:f0:3e:06:e4:af:b1:a7:1c:54:08:
         4f:02:b8:73:5a:13:7e:8d:74:d1:b8:06:e0:df:9e:cc:3b:25:
         0e:42:88:2e:fe:9b:1e:02:14:b9:29:34:ea:c4:ec:28:74:e7:
         ef:04:b5:44:3f:68:7a:5f:55:34:43:fe:60:7a:74:86:54:48:
         f4:70:3e:be:6f:a5:be:90:fc:5d:cb:85:90:f8:ca:b3:35:80:
         a1:f2:e1:9e:b2:40:cb:1f:1d:c7:49:f6:00:ef:dd:95:b6:c8:
         9a:ac:e9:1b:a1:72:30:09:3f:4c:41:39:15:95:b6:d1:72:cb:
         dd:3f:16:1e:38:df:dc:c4:75:8c:a2:70:3a:eb:ef:31:d1:12:
         e7:dc:19:cb:27:e0:fe:3c:d9:76:0c:94:41:0e:b5:83:7d:b2:
         fa:3d:b5:c2:13:4c:39:15:ba:68:79:f4:17:60:01:c4:94:a7:
         43:97:b4:12:6f:2a:5f:09:b1:30:c5:47:ed:b4:74:df:7d:9a:
         c8:71:c3:4f:d7:06:2b:bb:5e:31:e9:6a:f8:4f:03:4a:d6:fa:
         84:2f:41:75:4e:77:48:14:62:25:6a:4c:f6:07:fd:f1:35:40:
         65:c2:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:39 2026 by rpki-client