Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33322e302f32332d3233203d3e203532353734.roa
File:                     3137392e3139312e33322e302f32332d3233203d3e203532353734.roa (raw, json)
Hash identifier:          3VCNRl89+fl5wNgZf7W49+eXB0OMz93CKIYx/GNiW1s=
Subject key identifier:   0D:9D:10:2A:9D:83:AD:F0:CD:1E:B3:79:8F:74:94:1D:CD:E3:15:02
Certificate issuer:       /CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
Certificate serial:       531F81AEECF7E717ADE64FB26599081CEC86C47D
Authority key identifier: E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33322e302f32332d3233203d3e203532353734.roa
Signing time:             Tue 06 Oct 2026 13:06:26 +0000
ROA not before:           Tue 06 Oct 2026 13:01:26 +0000
ROA not after:            Tue 05 Oct 2027 13:06:26 +0000
asID:                     52574
IP address blocks:        179.191.32.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1f:81:ae:ec:f7:e7:17:ad:e6:4f:b2:65:99:08:1c:ec:86:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
        Validity
            Not Before: Oct  6 13:01:26 2026 GMT
            Not After : Oct  5 13:06:26 2027 GMT
        Subject: CN=0D9D102A9D83ADF0CD1EB3798F74941DCDE31502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:16:ee:b6:8b:45:9b:37:0d:7a:a7:2a:ff:
                    50:f1:75:d8:17:ca:83:a8:df:6f:f3:e1:f1:be:bb:
                    26:9b:be:60:a2:39:32:78:3e:f9:28:ca:39:ee:03:
                    ee:c1:49:35:b8:b6:a2:4e:a3:d0:ac:1e:bf:f0:f4:
                    aa:1e:6a:1f:87:ea:67:08:c6:79:d3:2b:84:24:40:
                    f3:6f:31:ba:b7:ae:13:53:4b:90:a9:20:b7:94:55:
                    fb:ff:61:99:2e:12:38:96:3d:97:66:ec:6a:cf:f1:
                    da:12:14:24:22:4c:6b:5b:71:56:78:64:e7:ad:a8:
                    1f:01:6b:71:7f:81:39:c1:c3:fb:6f:3d:ba:89:99:
                    a8:6a:4d:fe:37:95:1a:93:4c:73:4a:f8:80:66:41:
                    cd:99:98:1d:da:0a:86:c8:2d:8a:c8:dd:a0:7f:f2:
                    5e:39:b0:49:03:34:35:93:11:c4:ce:4f:d6:0a:0a:
                    cc:8b:e3:62:78:b1:da:a4:9f:6b:36:f8:ce:ff:b3:
                    32:c4:55:09:80:9c:36:8e:53:01:e4:3a:77:33:8c:
                    cf:c8:29:22:81:7c:39:9a:f2:b4:d9:80:32:66:5c:
                    52:6e:a7:0b:2e:61:75:a6:c8:f2:20:38:38:d0:51:
                    9b:3f:0e:3a:10:22:6f:eb:6c:70:d6:f7:ae:75:ec:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:10:2A:9D:83:AD:F0:CD:1E:B3:79:8F:74:94:1D:CD:E3:15:02
            X509v3 Authority Key Identifier:
                keyid:E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33322e302f32332d3233203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:e3:cb:1f:cb:74:e4:90:6f:82:0b:01:60:9b:4d:89:cb:
         3c:cf:3b:7a:5a:2d:ff:70:18:69:59:5f:df:a4:2e:6a:58:02:
         62:7e:02:99:54:99:6b:0c:fc:b6:8d:bc:02:67:bf:dd:b0:7e:
         a5:f0:24:b1:e6:4c:fd:8f:d2:e7:b2:3a:78:f4:88:b8:fd:73:
         ca:7c:44:80:51:2f:97:9b:6e:fe:94:88:c9:7f:74:78:e2:4d:
         12:00:3c:f9:c6:5e:44:90:73:68:3a:0b:8d:d7:c9:f2:3f:85:
         4f:03:93:47:e0:c2:d0:6e:7e:ae:40:52:98:95:c8:a3:98:8f:
         ae:da:6a:89:08:ba:48:cc:a9:c3:ea:74:26:40:22:83:61:03:
         f3:e8:64:de:ea:7a:70:dd:32:4a:f3:e8:6c:4c:9e:d7:8b:03:
         da:9a:d3:d5:40:ff:11:39:5a:dc:32:3e:0d:0d:67:ab:f7:f4:
         53:41:f6:0e:32:d8:27:5b:23:ce:25:1a:a5:55:fe:a8:1e:a3:
         70:f6:0a:82:6e:63:5f:4e:fe:d3:37:c8:f7:cc:52:1d:18:3d:
         cf:8c:9c:c0:0c:0a:04:5e:6c:c4:51:1c:15:2e:ad:f5:cb:0e:
         13:3b:96:d2:41:3f:05:45:23:e3:2c:76:7e:19:15:a9:46:bc:
         2e:5b:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:35:58 2026 by rpki-client