Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32322d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32322d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          +YycngWUnewa1MyVntQtu2nCNyFauaA7jkPrRlahSns=
Subject key identifier:   7C:B2:67:E6:9A:5C:0F:0F:0F:2C:37:27:09:1C:3B:68:CA:DB:01:B7
Certificate issuer:       /CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
Certificate serial:       EC35000C2F597BE2CC9B72520B2E4C025791CA
Authority key identifier: E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32322d3234203d3e20323731333236.roa
Signing time:             Thu 28 May 2026 04:59:05 +0000
ROA not before:           Thu 28 May 2026 04:54:05 +0000
ROA not after:            Thu 27 May 2027 04:59:05 +0000
asID:                     271326
IP address blocks:        190.123.72.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ec:35:00:0c:2f:59:7b:e2:cc:9b:72:52:0b:2e:4c:02:57:91:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
        Validity
            Not Before: May 28 04:54:05 2026 GMT
            Not After : May 27 04:59:05 2027 GMT
        Subject: CN=7CB267E69A5C0F0F0F2C3727091C3B68CADB01B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:ad:55:5f:27:95:72:b3:3b:c6:ec:34:7f:
                    42:aa:8e:4d:37:96:f9:71:fb:5b:58:af:5a:60:5c:
                    d1:44:dc:52:27:ad:21:32:90:bd:d6:29:94:4e:e6:
                    36:50:23:1e:d6:bb:08:f6:eb:86:c8:e9:d1:0b:b1:
                    d3:1c:b8:93:e0:0d:40:01:2e:c2:e4:b9:30:61:f6:
                    e2:1e:ed:b7:cd:6f:b0:3f:36:2d:c8:8d:3d:ac:91:
                    8c:e5:14:a9:61:61:c5:32:bc:5a:75:4b:cd:0e:2c:
                    2c:9f:d0:97:c6:55:d7:80:ff:6c:00:66:49:a9:c9:
                    0e:ac:65:e5:cb:d4:30:5b:54:fe:01:c8:71:70:4e:
                    67:cd:c4:27:32:0f:29:2d:49:22:b5:22:87:00:ed:
                    dc:f3:c9:3a:0a:f2:f5:18:1a:de:11:6b:0b:3d:15:
                    04:45:5f:89:84:86:5a:86:b2:ff:1d:28:b2:21:d1:
                    60:dc:cc:b9:b2:4d:c2:84:82:52:ed:66:ba:d3:dc:
                    da:c5:d0:d9:31:ed:ea:48:f1:6e:af:c5:cc:e0:2e:
                    60:93:32:26:3d:d9:9f:2b:01:48:b9:81:12:9e:b0:
                    49:9c:35:04:85:5d:a8:75:13:ec:ef:71:3e:ec:15:
                    9b:96:b7:7c:ba:b9:87:50:55:28:65:c0:22:2b:b1:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:67:E6:9A:5C:0F:0F:0F:2C:37:27:09:1C:3B:68:CA:DB:01:B7
            X509v3 Authority Key Identifier:
                keyid:E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32322d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:a8:22:9f:fd:20:42:9c:63:aa:04:6d:17:dd:32:43:ac:
         34:68:57:2e:bd:c6:1a:43:25:7b:d1:0a:d8:a0:b9:a2:a7:05:
         cd:60:6c:9b:6a:d5:bf:47:62:4e:2d:f1:ee:ed:6e:c7:3c:a5:
         12:4d:66:5c:71:49:4b:bb:ae:ea:9f:fc:e2:9b:7e:16:dd:5b:
         f9:f8:ab:d4:c6:33:74:ed:93:f4:df:3d:ca:8f:32:1d:e4:a9:
         5f:b4:76:20:28:e4:81:36:2e:aa:28:cc:e2:cf:cc:dc:80:84:
         06:55:9d:6f:67:9d:b1:a9:bf:88:c5:5f:5b:28:e3:94:ff:c4:
         d9:7f:92:36:6d:12:5c:bc:29:76:ef:55:dd:0a:3d:84:cf:be:
         9a:16:f9:df:c2:4a:3a:51:af:5a:b6:3e:4e:74:64:3b:7e:c1:
         7f:91:b7:1a:c8:5a:6c:29:d0:89:b5:66:20:8c:0f:55:b7:e8:
         27:59:b0:bf:75:06:61:12:80:30:31:9c:2e:27:80:56:eb:31:
         eb:59:d3:5a:0b:00:75:75:f6:6e:bb:57:85:98:57:7d:cc:6e:
         57:05:fd:f1:93:bd:cc:a6:58:fa:8d:2c:f8:b7:b5:c3:6e:fc:
         30:bb:e1:8f:c8:33:49:cb:57:ee:6e:8f:5a:9e:fd:7e:03:16:
         2b:e0:fe:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:54 2026 by rpki-client