Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33332e302f32342d3234203d3e203532353734.roa
File:                     3137392e3139312e33332e302f32342d3234203d3e203532353734.roa (raw, json)
Hash identifier:          YiZisRe09mGpgROvQgqdklT0oiV8iyJYtTiUBSb5Mqw=
Subject key identifier:   99:83:29:7C:33:FC:1B:22:5E:8B:1A:65:56:61:36:4C:35:FF:FF:05
Certificate issuer:       /CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
Certificate serial:       45DD553BFCD08212F8CAD228312878BB05CC3E2D
Authority key identifier: E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33332e302f32342d3234203d3e203532353734.roa
Signing time:             Tue 06 Oct 2026 13:06:27 +0000
ROA not before:           Tue 06 Oct 2026 13:01:27 +0000
ROA not after:            Tue 05 Oct 2027 13:06:27 +0000
asID:                     52574
IP address blocks:        179.191.33.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:dd:55:3b:fc:d0:82:12:f8:ca:d2:28:31:28:78:bb:05:cc:3e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
        Validity
            Not Before: Oct  6 13:01:27 2026 GMT
            Not After : Oct  5 13:06:27 2027 GMT
        Subject: CN=9983297C33FC1B225E8B1A655661364C35FFFF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:bb:51:d8:71:23:1d:65:ac:2f:d1:d5:20:
                    bf:65:d2:9c:ce:67:e0:ef:4d:66:e6:f9:bf:f0:e8:
                    0c:94:42:ce:56:13:b4:e8:72:65:d6:72:04:04:2a:
                    ab:c2:cf:fe:55:78:06:bc:37:03:58:e6:20:4b:dd:
                    1f:a2:51:41:d9:fb:b1:13:0e:0a:d2:80:d9:46:71:
                    de:b9:9a:61:90:f9:46:fb:fb:12:ac:59:56:2c:31:
                    f1:b6:cd:05:c5:90:ab:b9:4e:e4:e2:0b:26:2d:1b:
                    56:16:e6:17:37:66:b6:f5:4a:f3:00:fd:b2:ac:39:
                    d1:2a:b0:3d:f8:bf:3a:9e:63:45:1f:8f:85:87:00:
                    d7:6c:99:27:d7:53:5a:01:b1:df:e8:b4:4c:7d:18:
                    52:68:fa:74:79:57:53:98:9a:97:98:99:87:46:3a:
                    02:72:02:c1:1c:12:bd:ad:15:d5:8d:fa:df:04:6a:
                    5a:1e:8c:f7:4b:6f:a5:e5:0e:84:93:ba:b1:0a:93:
                    19:3e:eb:8e:31:2a:b1:a4:0f:02:d5:89:a4:2c:af:
                    31:4e:ae:27:dd:e6:93:d4:6e:e4:74:06:d4:e9:e0:
                    81:94:1e:d0:d4:fb:b2:05:54:5c:05:ae:e4:65:52:
                    2e:68:2a:6f:5c:5b:28:6f:c7:b0:9e:19:ef:4d:0a:
                    d6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:83:29:7C:33:FC:1B:22:5E:8B:1A:65:56:61:36:4C:35:FF:FF:05
            X509v3 Authority Key Identifier:
                keyid:E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33332e302f32342d3234203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:a4:aa:f8:ad:35:55:d2:94:ec:cf:eb:2a:36:27:1c:c5:
         9e:cd:fc:63:5f:16:48:a6:56:2b:1a:00:5b:40:a3:f0:f5:e6:
         ff:04:cd:62:79:25:e2:88:58:96:13:6a:5d:5d:19:8d:11:c8:
         83:f8:6a:82:3a:ed:63:f5:12:41:7d:a6:ee:eb:d7:89:bf:cd:
         df:e0:ed:75:d8:da:e8:61:5a:74:56:d9:fa:38:f9:6b:66:36:
         d7:f1:77:5d:9e:d5:f0:b3:af:dc:2e:42:44:f4:fd:cb:f5:e1:
         b1:82:78:d5:37:1e:be:9e:48:31:c1:fb:ac:5a:ad:5b:06:a4:
         4a:24:d9:51:94:66:05:17:f8:51:bf:b7:53:14:3f:35:2e:b9:
         f8:13:02:a8:3c:13:ff:82:66:b8:84:bf:e8:aa:4d:a6:06:98:
         a9:93:13:74:81:a7:99:50:e8:f0:6e:ac:31:5e:ea:f8:0d:55:
         df:d7:97:dc:87:8b:87:ba:a6:1a:e7:14:6b:f6:63:aa:92:37:
         1a:bb:56:2e:e5:b4:9c:09:1e:06:9e:3a:0f:ce:19:af:df:9d:
         7f:c5:98:cf:21:0a:f8:e4:3c:04:2b:f2:62:a7:82:10:1d:c1:
         53:31:6f:2c:63:be:d2:36:74:6f:21:ea:23:f4:07:1f:81:66:
         f5:b8:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:47:09 2026 by rpki-client