Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa
File:                     3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa (raw, json)
Hash identifier:          o6UFYCTWUcf06Eo1Wqa4ht1GUTKj0fO6vCDSz5pcR9M=
Subject key identifier:   2F:88:32:0C:03:25:9D:7B:C1:6B:82:55:AE:1A:0F:9C:DD:CF:82:CE
Certificate issuer:       /CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
Certificate serial:       60ECAD0E04FA2243BD2D1D906200A88716E118FF
Authority key identifier: CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa
Signing time:             Mon 16 Mar 2026 20:56:11 +0000
ROA not before:           Mon 16 Mar 2026 20:51:11 +0000
ROA not after:            Mon 15 Mar 2027 20:56:11 +0000
asID:                     271691
IP address blocks:        190.185.99.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:ad:0e:04:fa:22:43:bd:2d:1d:90:62:00:a8:87:16:e1:18:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5F7E7DD50663318415A698EE3C1D9FA70014AA
        Validity
            Not Before: Mar 16 20:51:11 2026 GMT
            Not After : Mar 15 20:56:11 2027 GMT
        Subject: CN=2F88320C03259D7BC16B8255AE1A0F9CDDCF82CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:47:72:29:8a:d4:72:19:3a:1b:ae:04:d4:
                    dc:42:58:e3:76:54:4c:17:49:78:54:df:27:a3:43:
                    6f:7a:b5:07:58:58:fa:bb:f5:33:4f:d4:d6:8e:4d:
                    ce:8e:6e:3d:2a:25:61:8e:46:9f:00:86:d1:9a:75:
                    02:7f:02:c3:b9:5a:38:9e:fc:6d:c6:26:70:1e:32:
                    de:7b:7d:f3:00:53:b8:c8:1d:20:d4:55:96:4d:7f:
                    57:72:6d:14:ee:a9:1d:7d:14:12:74:3f:70:cb:ca:
                    d9:cc:40:4d:2f:54:fe:0f:4d:15:bf:c6:a0:4b:05:
                    85:b7:06:a8:41:9a:52:fd:4a:8c:b5:81:ae:62:73:
                    f0:cb:fc:a5:3b:0c:4e:23:27:af:15:8c:84:94:fb:
                    ed:c1:fb:94:51:81:be:48:40:e1:da:8e:6c:97:6c:
                    63:66:74:bd:99:db:81:d2:fc:68:cf:ec:3e:a8:31:
                    72:3c:ce:2c:78:d5:5b:bc:b7:ae:fc:ce:b0:21:db:
                    d4:7a:38:06:da:cc:01:84:af:a7:14:e1:bb:43:dc:
                    28:b9:03:07:5b:de:24:5b:47:f2:0b:f7:a0:ca:b6:
                    ac:6e:c9:45:d7:7d:41:96:f2:aa:6d:3f:1c:09:a8:
                    87:53:76:4d:4c:4e:f3:6a:48:44:f9:0f:b6:2d:ff:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:32:0C:03:25:9D:7B:C1:6B:82:55:AE:1A:0F:9C:DD:CF:82:CE
            X509v3 Authority Key Identifier:
                keyid:CD:5F:7E:7D:D5:06:63:31:84:15:A6:98:EE:3C:1D:9F:A7:00:14:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD5F7E7DD50663318415A698EE3C1D9FA70014AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:24:8b:63:53:5a:d1:6f:4b:47:78:35:a6:ab:93:02:6d:96:
         77:44:b0:07:9e:81:71:25:ba:44:b0:bf:8c:11:98:d5:8e:71:
         9c:04:4e:42:49:de:6f:a6:44:ab:cb:f7:0c:06:ad:15:49:87:
         6d:a6:6f:ee:2f:d4:ef:47:ac:08:a9:8d:84:e9:d4:0b:eb:69:
         16:ed:93:92:15:d9:dc:98:dd:7d:6e:cf:0d:50:c0:95:ef:c3:
         a7:d0:26:aa:6b:7f:c4:dd:60:d9:9c:94:c3:94:d3:ee:68:3a:
         a7:b9:a1:92:66:82:44:5a:16:51:7b:ac:aa:f4:b5:63:88:03:
         ec:ae:54:b4:c4:46:07:87:53:c0:4c:0b:92:de:ff:97:1d:e2:
         e4:75:f3:01:70:0a:8c:90:8e:07:a3:bf:dc:39:d0:ff:64:98:
         03:68:7c:97:19:9c:1f:30:be:57:36:6f:de:6c:0d:03:a1:7c:
         2d:fb:7d:f3:1b:7c:41:66:0e:40:26:6b:7b:06:af:f3:40:dd:
         28:7c:df:b9:fd:ac:5f:65:37:ae:03:dc:c0:dd:11:93:c0:ad:
         2a:a2:25:2f:e9:99:39:86:08:7b:54:fd:0f:17:1d:70:e2:bc:
         51:63:bc:c2:4f:37:8d:d8:38:1c:9d:43:2d:a6:4e:6f:53:49:
         02:19:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:36 2026 by rpki-client