Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33342e302f32342d3234203d3e203532353734.roa
File:                     3137392e3139312e33342e302f32342d3234203d3e203532353734.roa (raw, json)
Hash identifier:          +gUJUoxkEA06eHoA5bbtiV27OgRa2v1Nu5B+irA8ylQ=
Subject key identifier:   2B:DA:FA:81:FA:6C:60:9A:08:78:5A:04:BA:3E:A8:68:1A:92:59:74
Certificate issuer:       /CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
Certificate serial:       6A4C75F10B2715D50F2F7357708848C135B51B4A
Authority key identifier: E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33342e302f32342d3234203d3e203532353734.roa
Signing time:             Tue 06 Oct 2026 13:06:27 +0000
ROA not before:           Tue 06 Oct 2026 13:01:27 +0000
ROA not after:            Tue 05 Oct 2027 13:06:27 +0000
asID:                     52574
IP address blocks:        179.191.34.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4c:75:f1:0b:27:15:d5:0f:2f:73:57:70:88:48:c1:35:b5:1b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
        Validity
            Not Before: Oct  6 13:01:27 2026 GMT
            Not After : Oct  5 13:06:27 2027 GMT
        Subject: CN=2BDAFA81FA6C609A08785A04BA3EA8681A925974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:08:fa:0a:33:e9:1e:55:36:2a:2f:84:dc:
                    40:de:16:e3:6c:e3:71:72:8b:43:57:99:1b:7d:cf:
                    a5:76:42:1d:c9:92:e8:af:72:25:ce:a8:e1:c9:b2:
                    70:4d:95:fb:da:1a:18:90:bb:53:99:f3:cf:88:11:
                    51:78:a0:3d:81:6b:74:d2:aa:c6:fc:8c:e6:0e:e6:
                    9f:b3:7d:d0:78:6f:80:71:1e:80:fd:e7:90:1f:58:
                    eb:06:63:1c:82:0b:5a:40:c7:76:bd:c9:7d:ac:4e:
                    17:75:8a:93:50:cb:44:3f:21:04:e3:6a:7d:34:3f:
                    d1:d8:29:4e:29:86:18:ad:18:c4:84:44:dc:d9:5e:
                    b4:c1:71:88:96:6d:74:41:71:f1:b7:cf:4b:44:bd:
                    e0:a8:41:dd:62:fc:c7:49:29:ed:c9:d3:fd:f0:4e:
                    58:de:5d:e9:f1:f4:60:9f:56:b5:3e:8a:b2:bc:dd:
                    f2:dc:85:ad:7e:6e:cc:5e:06:48:b2:f4:f3:03:f4:
                    c7:75:33:0f:80:80:af:fd:1c:76:f5:27:ee:0b:e9:
                    7e:9d:d0:26:1c:33:75:ac:70:48:f6:d0:3f:5c:d3:
                    77:df:6b:c5:cd:2e:51:1e:29:05:93:da:5a:cb:ec:
                    82:61:31:7f:21:c8:fa:8e:fb:0a:d9:cb:32:65:b7:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:FA:81:FA:6C:60:9A:08:78:5A:04:BA:3E:A8:68:1A:92:59:74
            X509v3 Authority Key Identifier:
                keyid:E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33342e302f32342d3234203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:60:f4:90:48:1c:4a:49:50:d5:90:9b:00:d6:11:6a:19:54:
         d8:f3:bd:ec:60:79:9f:f9:37:13:16:e7:ec:81:93:49:53:3a:
         8b:9a:bb:56:f7:2d:f0:35:22:be:2d:c5:8b:93:25:bb:fb:9f:
         fe:f4:ce:76:b4:fb:b8:74:26:94:8f:6f:ab:c0:55:3b:b1:21:
         42:73:40:4f:21:78:88:04:5c:0a:13:1d:76:69:87:c1:74:34:
         54:9c:4a:e2:23:0e:bd:db:43:8e:7b:f0:28:af:e7:c4:f4:d5:
         20:2e:69:74:b3:96:e2:8d:61:ce:d6:75:0b:da:e7:b0:c7:86:
         1a:29:7d:43:c9:86:0c:e1:58:e8:42:1e:f2:29:12:05:46:45:
         25:ca:39:08:fa:91:f9:95:26:d6:c5:ae:dc:cc:a7:da:f5:6d:
         0a:b5:31:7f:73:9e:52:75:16:1c:3d:db:2c:29:d2:81:58:5d:
         a1:6d:85:81:80:12:fc:ae:7b:bd:71:3a:d1:49:9a:2d:d0:7e:
         15:02:ff:42:f3:b5:c9:2f:a7:c0:51:84:64:0e:d3:28:c7:17:
         35:03:fc:60:9f:61:cf:ac:16:10:96:63:13:5a:77:82:ea:06:
         ce:44:54:f9:97:5e:4e:16:0e:d3:fe:2a:c3:1f:84:4d:be:1b:
         d8:48:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:28:01 2026 by rpki-client