Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
File:                     3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (raw, json)
Hash identifier:          300O96F5VOrO8yN3/tDcthRHiIiiy7ZmuWjX/KC0fGM=
Subject key identifier:   C9:43:F7:36:D1:A9:B3:DA:64:11:88:91:89:34:F9:D6:28:B2:F6:B4
Certificate issuer:       /CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
Certificate serial:       014CC4763500989CC6B75EDBF7DABEBEC8561600
Authority key identifier: 87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa
Signing time:             Tue 24 Mar 2026 20:21:44 +0000
ROA not before:           Tue 24 Mar 2026 20:16:44 +0000
ROA not after:            Tue 23 Mar 2027 20:21:44 +0000
asID:                     270588
IP address blocks:        177.129.36.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4c:c4:76:35:00:98:9c:c6:b7:5e:db:f7:da:be:be:c8:56:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
        Validity
            Not Before: Mar 24 20:16:44 2026 GMT
            Not After : Mar 23 20:21:44 2027 GMT
        Subject: CN=C943F736D1A9B3DA641188918934F9D628B2F6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:23:08:2d:e4:f7:f0:96:78:a0:f1:b2:76:
                    36:fb:d1:ef:9d:ab:81:76:af:7d:e3:7c:40:ed:7b:
                    71:3d:fa:8a:ca:2f:3e:53:b7:82:a4:bf:25:3f:2c:
                    da:53:e4:57:b8:da:ae:bb:07:7b:1a:55:cc:97:ef:
                    20:a8:fa:15:aa:9b:94:c8:97:ff:a7:6c:13:3a:83:
                    9b:5c:33:30:ee:2b:d9:05:bb:94:02:38:64:bc:9f:
                    71:f5:c6:db:cb:cd:73:c0:7b:32:22:7c:2b:c8:c4:
                    bf:da:32:3b:52:52:60:bc:76:d0:6d:36:69:0c:49:
                    da:f2:8d:67:9f:17:d5:ea:1a:d0:11:17:af:c5:4e:
                    d4:45:6e:5c:9d:b4:03:c0:50:2f:0d:0c:fe:aa:41:
                    59:97:5d:37:b2:ad:13:bf:13:18:2f:99:ef:32:32:
                    a6:9d:01:3e:bf:34:f1:8b:0e:63:d9:18:0a:18:25:
                    7d:1d:07:d6:f9:00:d9:50:4a:ef:38:aa:80:3d:fb:
                    16:11:d3:19:b6:48:34:d1:0f:af:ae:e0:12:f1:3f:
                    43:5b:5c:30:46:d9:c5:fa:56:c6:7c:4b:9d:76:e3:
                    28:35:1c:37:b2:18:96:f6:d1:45:94:a3:d8:88:41:
                    26:14:ef:a1:53:dc:38:1e:2a:5d:f9:48:b2:74:21:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:F7:36:D1:A9:B3:DA:64:11:88:91:89:34:F9:D6:28:B2:F6:B4
            X509v3 Authority Key Identifier:
                keyid:87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:e5:f5:17:6a:26:79:f5:4c:7a:ae:df:cc:b4:70:9d:f1:
         a0:d8:65:20:58:74:8a:b1:0d:69:40:f4:d0:34:cc:e1:ad:97:
         fe:78:63:8b:93:09:8f:79:2e:5c:e8:78:2e:88:29:3b:12:db:
         3b:64:6b:69:05:be:2f:65:ae:e0:ef:53:bc:cb:8b:4c:c0:ae:
         6f:e0:6f:03:92:23:2d:74:d0:a7:a2:ba:22:e8:a1:d9:74:e0:
         9f:59:d4:71:0d:66:4f:b6:0a:ee:83:d3:fd:b0:65:7c:d4:51:
         ec:7c:e5:80:07:fc:83:3e:ea:c4:67:a8:37:dc:09:20:9f:3b:
         3c:b8:88:ed:5f:f9:f5:64:20:c8:bb:27:f7:65:71:45:7c:05:
         81:a0:e3:59:e1:63:55:32:57:43:96:28:44:ce:9e:c2:19:e5:
         b9:96:71:61:64:7b:d3:7c:4b:05:e8:95:95:91:ba:98:c1:48:
         12:7a:04:0b:05:63:51:bf:79:70:9e:a4:ee:3b:b4:77:21:a1:
         04:97:9f:8a:8d:a7:5f:91:f6:50:b5:05:b5:fe:e4:03:e9:72:
         fc:68:80:4c:3d:9c:ab:2d:7d:ee:1a:40:bb:f8:0d:f8:a9:6e:
         03:c5:c9:96:e3:e3:5c:15:8d:e1:d6:92:76:c7:71:d5:27:b4:
         09:7d:43:d9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAUzEdjUAmJzGt17b99q+vshWFgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdEMDdDQUFGRTczMTA2RDY2QzBFMTFGNzg5QjAyNDNB
NjcxNDFGOTAeFw0yNjAzMjQyMDE2NDRaFw0yNzAzMjMyMDIxNDRaMDMxMTAvBgNV
BAMTKEM5NDNGNzM2RDFBOUIzREE2NDExODg5MTg5MzRGOUQ2MjhCMkY2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHyMILeT38JZ4oPGydjb70e+d
q4F2r33jfEDte3E9+orKLz5Tt4KkvyU/LNpT5Fe42q67B3saVcyX7yCo+hWqm5TI
l/+nbBM6g5tcMzDuK9kFu5QCOGS8n3H1xtvLzXPAezIifCvIxL/aMjtSUmC8dtBt
NmkMSdryjWefF9XqGtARF6/FTtRFblydtAPAUC8NDP6qQVmXXTeyrRO/Exgvme8y
MqadAT6/NPGLDmPZGAoYJX0dB9b5ANlQSu84qoA9+xYR0xm2SDTRD6+u4BLxP0Nb
XDBG2cX6VsZ8S5124yg1HDeyGJb20UWUo9iIQSYU76FT3DgeKl35SLJ0IS/HAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUyUP3NtGps9pkEYiRiTT51iiy9rQwHwYDVR0j
BBgwFoAUh9B8qv5zEG1mwOEfeJsCQ6ZxQfkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KWlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZn
LzAvODdEMDdDQUFGRTczMTA2RDY2QzBFMTFGNzg5QjAyNDNBNjcxNDFGOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84N0QwN0NBQUZFNzMxMDZENjZD
MEUxMUY3ODlCMDI0M0E2NzE0MUY5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
WlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZnLzAvMzEz
NzM3MmUzMTMyMzkyZTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3MzAz
NTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKxgSQwDQYJKoZIhvcNAQELBQADggEBAKGD5fUXaiZ5
9Ux6rt/MtHCd8aDYZSBYdIqxDWlA9NA0zOGtl/54Y4uTCY95LlzoeC6IKTsS2ztk
a2kFvi9lruDvU7zLi0zArm/gbwOSIy100KeiuiLoodl04J9Z1HENZk+2Cu6D0/2w
ZXzUUex85YAH/IM+6sRnqDfcCSCfOzy4iO1f+fVkIMi7J/dlcUV8BYGg41nhY1Uy
V0OWKETOnsIZ5bmWcWFke9N8SwXolZWRupjBSBJ6BAsFY1G/eXCepO47tHchoQSX
n4qNp1+R9lC1BbX+5APpcvxogEw9nKstfe4aQLv4DfipbgPFyZbj41wVjeHWknbH
cdUntAl9Q9k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:00 2026 by rpki-client