Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
File:                     3137372e382e36392e302f32342d3234203d3e20323733373739.roa (raw, json)
Hash identifier:          jFzfORr2j/pqVKSgx54aXHSUhcBA+ajfB792H1BmQ+0=
Subject key identifier:   83:52:7E:22:17:92:15:78:F9:13:06:EA:F5:02:0D:76:FF:74:E9:E0
Certificate issuer:       /CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
Certificate serial:       5B416FD565E823CD9ACA4564DA2552AAD15BB870
Authority key identifier: AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa
Signing time:             Wed 18 Jun 2025 14:48:16 +0000
ROA not before:           Wed 18 Jun 2025 14:43:16 +0000
ROA not after:            Wed 17 Jun 2026 14:48:16 +0000
asID:                     273779
IP address blocks:        177.8.69.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:6f:d5:65:e8:23:cd:9a:ca:45:64:da:25:52:aa:d1:5b:b8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
        Validity
            Not Before: Jun 18 14:43:16 2025 GMT
            Not After : Jun 17 14:48:16 2026 GMT
        Subject: CN=83527E2217921578F91306EAF5020D76FF74E9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:54:24:c9:ca:95:84:2e:f4:52:9f:53:da:
                    33:5e:9e:b4:33:c0:05:8e:d9:1b:fd:87:f5:40:ef:
                    59:08:56:fd:08:d2:53:ec:d5:92:8d:79:61:7c:a6:
                    6e:9a:4b:83:22:91:ad:d5:41:12:e3:43:3f:9d:b9:
                    74:9e:29:e3:f4:2d:90:2d:7d:02:25:26:fa:45:5d:
                    d8:3c:65:20:38:29:25:13:5c:5b:f1:34:14:b0:c2:
                    30:42:7a:0b:13:24:04:b9:60:41:b9:2c:36:a9:3f:
                    e9:c3:e1:bc:61:6d:9d:6f:67:61:8a:b3:f7:b0:b3:
                    26:bc:e8:ba:0d:a4:2f:ca:78:0f:f2:3a:dc:e5:cb:
                    6c:90:33:e5:56:1d:a7:e2:b0:4d:c7:5f:7b:da:b4:
                    58:92:6f:e9:65:2a:d9:c6:41:a0:00:bf:19:ee:fe:
                    0c:a6:6c:5a:de:f8:1d:c5:dd:b9:5d:c9:92:4b:12:
                    b8:6e:0d:a0:c6:9b:30:ed:98:3f:32:8f:e7:8d:1d:
                    f1:82:47:00:29:e5:c1:42:71:98:ab:40:db:f3:36:
                    38:5d:85:54:39:18:50:68:8d:cf:74:dd:e2:65:90:
                    ab:01:97:60:8d:24:df:30:a4:55:9f:ad:8c:72:c6:
                    2a:8b:e3:80:39:36:fe:3c:e9:ac:fa:a4:74:98:4f:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:7E:22:17:92:15:78:F9:13:06:EA:F5:02:0D:76:FF:74:E9:E0
            X509v3 Authority Key Identifier:
                keyid:AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/3137372e382e36392e302f32342d3234203d3e20323733373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b0:c9:22:6c:ae:e8:08:01:6d:33:4e:7e:9a:3c:e2:0d:e6:
         73:c6:c1:96:db:b5:93:95:b1:43:4a:c0:e1:d0:96:7a:ed:f1:
         ea:30:ff:cf:49:e0:24:e2:47:bd:e5:8e:74:12:9a:92:75:a9:
         68:8a:3b:0b:29:57:07:25:82:fb:1a:53:18:c2:3b:44:f2:3f:
         6f:ef:dd:f8:c5:5e:59:13:15:40:85:33:a7:5d:bd:dd:76:6b:
         b5:b9:ee:b3:a4:4b:81:9a:a7:4c:5d:bc:bc:71:af:f7:da:28:
         bb:05:bb:7a:90:44:0e:62:82:54:96:ed:67:c3:91:24:7b:4d:
         0c:54:da:33:a8:01:1b:b7:ae:cd:6a:51:a4:97:9c:f0:72:73:
         b3:2e:28:59:81:1c:92:4d:f1:20:60:e9:c3:e0:67:9e:5e:cf:
         9e:6c:c6:43:48:3e:c9:7d:d2:14:8f:66:a0:b5:71:fc:bf:bb:
         9b:bd:d5:21:99:60:82:c9:05:ee:2d:f6:54:f6:65:0e:7c:2a:
         67:fa:3d:2b:b6:ab:e6:d9:be:94:e0:ac:1a:08:b5:c4:6f:81:
         74:e2:2d:a9:3c:46:45:f6:4f:bf:56:ca:d4:ad:2b:df:9b:b1:
         4c:3f:1b:fc:b2:7c:9e:c7:b4:61:43:cc:c5:79:d4:1e:1f:ff:
         44:79:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:38:25 2025 by rpki-client