Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33352e302f32342d3234203d3e203532353734.roa
File:                     3137392e3139312e33352e302f32342d3234203d3e203532353734.roa (raw, json)
Hash identifier:          YinqB7CHujJQNuQt7PrVuYYm3aUMPY8Ifv/oFbfjZ4U=
Subject key identifier:   E2:C4:48:BF:DE:AE:7F:94:DE:9E:E6:1A:69:FB:A3:9A:34:B7:D5:F3
Certificate issuer:       /CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
Certificate serial:       4CB9031528301309090DCE28E10C95A94DFF74BC
Authority key identifier: E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33352e302f32342d3234203d3e203532353734.roa
Signing time:             Tue 06 Oct 2026 13:06:27 +0000
ROA not before:           Tue 06 Oct 2026 13:01:27 +0000
ROA not after:            Tue 05 Oct 2027 13:06:27 +0000
asID:                     52574
IP address blocks:        179.191.35.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b9:03:15:28:30:13:09:09:0d:ce:28:e1:0c:95:a9:4d:ff:74:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
        Validity
            Not Before: Oct  6 13:01:27 2026 GMT
            Not After : Oct  5 13:06:27 2027 GMT
        Subject: CN=E2C448BFDEAE7F94DE9EE61A69FBA39A34B7D5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:91:22:1c:6b:fd:f9:7e:5a:6d:4e:b1:1a:
                    1f:f9:fd:28:72:d3:cd:07:df:3f:2c:5a:6b:bd:ae:
                    92:bd:d8:0b:09:cc:00:73:ad:38:4c:82:02:19:d0:
                    3e:3c:3b:47:35:9e:6d:f4:42:d1:26:d8:2f:14:a4:
                    39:e5:99:df:5d:ae:fc:c7:f8:2c:eb:00:b6:b9:3a:
                    75:bb:72:93:69:62:2d:e2:77:1b:59:60:ed:6e:e4:
                    fd:35:fb:fa:ea:e0:af:69:41:bc:73:f5:8d:24:bd:
                    c9:32:66:56:e8:c3:78:8a:06:5c:ef:e1:3a:12:2f:
                    cd:13:d3:86:3a:fe:1b:4c:f8:d1:50:33:e4:4f:f0:
                    89:26:da:36:45:e2:e9:ff:25:de:ac:f4:df:4f:c0:
                    81:fb:3d:ba:d8:d5:58:9c:9c:bf:43:e0:50:40:92:
                    fd:29:74:ee:e2:bb:7f:fe:14:3f:4b:6d:14:c4:e3:
                    50:33:a2:9c:90:2c:54:e8:16:99:59:58:07:7f:ef:
                    c2:65:48:f0:67:95:d1:ab:34:d6:07:c5:cf:a8:f7:
                    75:81:7b:35:c9:c2:61:1f:fe:26:b5:4e:c7:4d:f8:
                    f5:c1:79:4e:ae:28:74:64:9b:bd:fd:52:e6:67:62:
                    81:81:dc:5f:a6:0f:5f:9b:da:68:45:71:29:b8:a1:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:48:BF:DE:AE:7F:94:DE:9E:E6:1A:69:FB:A3:9A:34:B7:D5:F3
            X509v3 Authority Key Identifier:
                keyid:E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/3137392e3139312e33352e302f32342d3234203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fa:a0:b8:15:14:68:70:c5:14:d2:0d:42:a0:a9:4b:4c:df:
         43:bb:99:15:10:af:d7:e6:2e:4c:06:6d:23:4d:45:c5:6a:51:
         1d:02:25:f4:a1:56:a6:3d:91:60:e0:2b:ef:76:69:6e:0f:83:
         31:62:d3:5b:54:87:57:43:71:16:1a:a9:cc:f8:4e:b2:89:26:
         17:fe:31:99:8a:a3:08:23:3a:7d:4b:ec:39:e0:3c:fd:7c:cc:
         7f:9b:f5:db:aa:74:7a:3d:2b:1e:e9:70:0d:46:88:1f:f0:90:
         d0:5d:58:e2:ea:ca:de:df:95:a9:44:6f:6b:26:c8:25:d3:3b:
         b1:9a:d2:c7:81:dd:4a:65:47:73:8c:00:35:6e:61:c7:a2:80:
         98:9e:7e:73:73:c8:3d:64:d1:80:80:99:cd:a8:ae:91:06:1a:
         f8:53:28:ce:bc:39:f4:69:74:90:b9:e5:61:7f:49:b0:3a:1e:
         8e:e6:2a:c4:f1:42:c0:e8:68:6d:11:84:81:56:b6:39:01:b6:
         ef:af:94:ca:39:f1:3d:92:62:9d:61:5f:74:2c:48:65:db:6c:
         b2:ca:f0:01:1b:f3:1c:ea:3d:9f:23:92:ff:ba:93:a2:e0:c3:
         62:5d:1f:0c:18:ea:35:8f:f9:de:49:c9:ca:2d:df:8f:43:47:
         ef:77:83:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:37:20 2026 by rpki-client