Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          ADBTy4Ms910DZbDhKqTSmYSIrG4EniV43wLnv1htCdc=
Subject key identifier:   A0:5F:53:00:F4:74:5D:B3:6A:D3:5A:CF:BD:8F:7B:FD:14:0B:F2:53
Certificate issuer:       /CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
Certificate serial:       243D9A0880B2356FAE7C989117CD7FE36C93A028
Authority key identifier: DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa
Signing time:             Tue 13 Oct 2026 19:19:51 +0000
ROA not before:           Tue 13 Oct 2026 19:14:51 +0000
ROA not after:            Tue 12 Oct 2027 19:19:51 +0000
asID:                     267455
IP address blocks:        164.163.221.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3d:9a:08:80:b2:35:6f:ae:7c:98:91:17:cd:7f:e3:6c:93:a0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
        Validity
            Not Before: Oct 13 19:14:51 2026 GMT
            Not After : Oct 12 19:19:51 2027 GMT
        Subject: CN=A05F5300F4745DB36AD35ACFBD8F7BFD140BF253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:3c:4f:51:7b:1d:23:f8:48:f8:68:39:37:
                    36:fa:36:19:aa:5a:2b:34:b6:30:f3:6b:2f:e7:c9:
                    db:28:88:fd:8e:0f:e7:ad:50:46:69:9e:c4:29:e6:
                    84:3e:4e:55:4d:f3:a3:b7:fe:fb:4d:0c:46:63:d3:
                    88:fb:d6:8b:62:5d:56:a1:e9:a8:5f:73:55:3f:2f:
                    67:ae:72:0c:2e:dd:61:9b:0c:1d:8f:c9:06:80:e9:
                    e6:02:e9:8f:96:0d:aa:a0:bb:6a:cb:7a:05:a0:ca:
                    32:c8:30:d4:29:ca:0a:25:2f:8d:0f:2b:cd:f4:58:
                    11:96:94:98:fa:bc:e5:64:53:0b:65:3c:71:93:d5:
                    4f:41:1a:4e:f9:8b:63:d3:7a:66:48:ad:94:a2:c5:
                    3f:ce:4a:05:32:fb:78:6a:c4:c1:cd:fb:91:d0:90:
                    9d:b6:08:8b:53:8d:95:63:67:98:36:ff:49:83:e9:
                    96:ff:cf:4e:39:6c:c9:b1:13:e2:63:eb:8b:c6:00:
                    20:df:d0:31:b5:06:a0:00:d1:46:56:2c:e9:0b:1e:
                    b5:04:05:a2:73:95:f8:24:ec:6c:6e:2f:09:05:fd:
                    42:b7:ea:ab:7b:cd:b6:d7:c1:4f:c8:17:c5:e2:a6:
                    f9:a6:4a:a1:c8:d4:01:3b:ae:5e:54:a0:82:d2:0a:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5F:53:00:F4:74:5D:B3:6A:D3:5A:CF:BD:8F:7B:FD:14:0B:F2:53
            X509v3 Authority Key Identifier:
                keyid:DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232312e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:78:01:46:e8:7a:47:c2:cb:70:fc:0a:06:d8:b6:86:60:
         4f:c5:b2:d7:30:57:d9:77:52:a2:1f:78:e4:6e:d5:93:1a:49:
         e2:ed:55:66:e7:2c:b3:bb:3f:dc:ce:20:6f:50:08:17:58:80:
         af:41:91:94:93:4a:9a:6d:1b:12:89:a4:6f:57:e6:34:67:62:
         69:41:0d:85:be:ad:15:6a:bd:1b:2d:0b:c0:47:d0:86:e8:5b:
         fe:8c:74:60:2e:50:f4:55:38:37:b6:68:6d:7e:5b:c9:59:c7:
         6b:be:2f:a4:ec:f5:95:3e:04:e7:72:c5:07:e1:04:ab:87:c7:
         83:c8:08:2f:05:cb:8d:4e:f3:f5:20:66:17:7d:b5:1f:50:de:
         97:a1:2b:32:b8:a9:7c:7a:f9:b5:a9:aa:9d:45:07:99:86:10:
         a0:3a:2b:45:63:4c:66:90:db:40:fb:1a:77:6f:7e:41:e1:b3:
         6f:07:93:14:79:9c:9a:6d:d8:9d:b8:95:54:5c:6d:0f:74:d9:
         c1:08:64:94:1c:5e:7e:5a:70:83:59:60:5f:26:bb:c0:2f:ca:
         3f:d0:55:54:23:0a:be:7b:30:e8:48:d8:83:ba:76:7e:fc:4e:
         df:63:b4:d5:61:de:99:3a:65:1b:9f:40:3f:79:70:69:43:5b:
         1c:e2:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:39:27 2026 by rpki-client