Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32332d3233203d3e20323639353837.roa
File:                     34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (raw, json)
Hash identifier:          HoBoo1GA/eR/ql8oBZdRyvEIvJV03tZN4bSv6wnSky8=
Subject key identifier:   75:32:AD:EA:BA:E2:37:65:89:80:D2:B9:A2:13:B2:04:3C:12:6D:A8
Certificate issuer:       /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
Certificate serial:       14D78F74A0D8D1BBEE654A3F23C87B1037F54653
Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32332d3233203d3e20323639353837.roa
Signing time:             Sat 20 Sep 2025 14:15:50 +0000
ROA not before:           Sat 20 Sep 2025 14:10:50 +0000
ROA not after:            Sat 19 Sep 2026 14:15:50 +0000
asID:                     269587
IP address blocks:        45.188.82.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d7:8f:74:a0:d8:d1:bb:ee:65:4a:3f:23:c8:7b:10:37:f5:46:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E
        Validity
            Not Before: Sep 20 14:10:50 2025 GMT
            Not After : Sep 19 14:15:50 2026 GMT
        Subject: CN=7532ADEABAE237658980D2B9A213B2043C126DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:5a:86:08:7b:c2:9e:f8:b8:83:f9:b4:a3:
                    9c:b2:dc:70:be:92:60:a2:c9:64:05:e7:52:ab:4b:
                    b5:b6:75:51:59:af:a9:9b:ee:4b:5a:56:19:be:15:
                    ff:ca:0f:2a:8c:22:4c:20:f3:27:22:8b:87:c4:36:
                    3b:53:89:20:09:d5:0d:a7:1d:d1:5c:d0:5d:b8:40:
                    f6:f9:9a:83:5a:6d:c5:95:cd:a4:f9:9a:07:fe:18:
                    55:08:5b:95:0a:76:42:ed:42:4e:fe:0d:4b:58:5e:
                    7b:fb:23:ce:74:9e:42:1c:73:46:97:d7:29:7b:74:
                    f2:9e:8c:62:fc:44:ea:b1:39:b3:bf:38:d9:fd:a2:
                    66:85:20:35:15:e8:ef:5c:87:e5:6f:09:8d:c1:49:
                    cf:a2:ba:3b:78:90:c9:a8:89:42:18:a2:fa:31:3b:
                    5b:f5:3d:67:c9:c4:8c:a4:b5:cb:5b:26:d2:d9:a6:
                    ef:26:3c:d7:68:7d:8a:0e:e2:c7:cc:10:4c:ec:34:
                    ac:ce:0f:26:af:36:2d:cc:a5:67:87:89:b8:e9:72:
                    a8:44:d0:89:78:26:90:8d:0b:02:7a:4a:2f:af:e4:
                    56:77:9b:2f:1d:21:13:ca:58:24:96:49:c3:d6:cf:
                    16:e3:15:5e:4e:3c:ea:a5:cf:8a:b6:f1:31:1b:ca:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:AD:EA:BA:E2:37:65:89:80:D2:B9:A2:13:B2:04:3C:12:6D:A8
            X509v3 Authority Key Identifier:
                keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/34352e3138382e38322e302f32332d3233203d3e20323639353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:9d:51:0b:2b:1d:7f:c2:75:c2:ef:50:a0:db:40:81:dc:
         a2:80:fc:e0:f4:03:07:60:68:6c:15:e7:b7:c5:43:ea:28:38:
         12:26:7e:2d:cf:42:13:5a:b8:a1:5e:72:85:08:24:1b:23:f3:
         68:84:14:e6:42:5a:1f:ca:82:27:55:f3:cf:d4:02:3e:5a:11:
         5a:20:9f:d4:e5:b9:14:de:49:22:92:6f:a0:93:85:eb:81:71:
         1d:bb:c8:0d:49:42:02:fb:f8:98:af:0c:c6:6c:aa:ac:36:8e:
         c6:64:6d:fc:d4:b8:50:28:79:a5:5e:00:8c:cf:ba:9e:d0:35:
         6f:85:a9:80:56:2c:65:db:f4:af:f4:07:5f:ae:99:98:25:90:
         23:f5:d2:1b:e0:46:9f:40:24:a5:34:6d:72:43:41:e1:40:93:
         24:e0:45:cf:e4:dd:46:11:ac:8c:4a:eb:22:02:26:4a:53:86:
         89:59:71:ed:ad:d1:9e:45:b7:9f:62:76:1e:12:61:39:49:56:
         79:81:af:f7:d3:a9:08:ed:3d:8e:a9:4b:41:e0:c6:6d:5a:7b:
         0e:fc:3e:62:b6:9a:d1:54:a5:8f:88:4a:9a:98:e4:2c:39:83:
         3d:ad:18:7d:84:e3:f8:40:11:cb:f9:b3:3e:78:e2:9d:26:c2:
         db:6a:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:38 2025 by rpki-client