Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/34352e3233352e3231362e302f32322d3234203d3e20323638323031.roa
File:                     34352e3233352e3231362e302f32322d3234203d3e20323638323031.roa (raw, json)
Hash identifier:          HJv1HV3wg4egs3QSnqpGXwAQHggjqb/lHrFXt4k+zx4=
Subject key identifier:   51:1C:04:9B:A3:44:5D:DD:AF:30:46:8F:AD:72:E9:F0:02:9C:1E:F2
Certificate issuer:       /CN=4F99615A0908E41E72A698BE51C999A6D53191C5
Certificate serial:       132355AC1B7F8080E2D5E11B31DF6E8F32BA405D
Authority key identifier: 4F:99:61:5A:09:08:E4:1E:72:A6:98:BE:51:C9:99:A6:D5:31:91:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F99615A0908E41E72A698BE51C999A6D53191C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/34352e3233352e3231362e302f32322d3234203d3e20323638323031.roa
Signing time:             Wed 03 Jun 2026 13:40:30 +0000
ROA not before:           Wed 03 Jun 2026 13:35:30 +0000
ROA not after:            Wed 02 Jun 2027 13:40:30 +0000
asID:                     268201
IP address blocks:        45.235.216.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:23:55:ac:1b:7f:80:80:e2:d5:e1:1b:31:df:6e:8f:32:ba:40:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99615A0908E41E72A698BE51C999A6D53191C5
        Validity
            Not Before: Jun  3 13:35:30 2026 GMT
            Not After : Jun  2 13:40:30 2027 GMT
        Subject: CN=511C049BA3445DDDAF30468FAD72E9F0029C1EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:77:8b:92:c5:95:e0:22:c0:fa:30:a6:b1:
                    c7:11:c6:b3:0e:e3:b0:00:a8:83:49:66:d6:f6:4d:
                    e6:1f:e8:5b:33:de:1a:3a:9c:a1:47:fe:dc:c4:d6:
                    d6:f8:82:52:6d:28:a9:5c:0e:a3:f8:4f:b0:50:55:
                    70:0b:28:7a:ee:ab:b9:db:98:92:8a:26:3d:13:1b:
                    78:0a:06:0e:a8:86:ea:29:38:4b:46:63:27:f5:2a:
                    9c:5e:66:65:3d:04:9f:8d:6d:53:22:75:6d:7d:96:
                    f2:16:6d:24:92:5c:47:c3:88:12:eb:b7:06:ec:f9:
                    8a:9e:7d:18:51:bd:05:bd:b2:6a:ec:ea:bd:a7:04:
                    5f:70:36:e3:df:67:38:11:a6:6d:d5:8f:fe:96:84:
                    4f:88:41:a5:cd:0d:ce:54:37:9f:02:5d:65:54:f5:
                    e9:59:0f:16:c4:cf:00:86:dc:83:a5:ab:62:36:a4:
                    02:9b:43:69:b5:a2:64:58:54:06:82:e7:56:c3:2c:
                    55:77:b2:09:5a:94:08:da:24:27:df:cb:54:31:a9:
                    b9:cf:fb:8d:61:e1:12:7b:13:21:58:17:a3:59:5c:
                    1d:38:3f:b3:a3:91:b5:4b:29:36:c0:ef:5e:4f:ae:
                    57:20:1f:10:a0:08:fb:9f:40:6a:0d:5c:96:fc:b5:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:04:9B:A3:44:5D:DD:AF:30:46:8F:AD:72:E9:F0:02:9C:1E:F2
            X509v3 Authority Key Identifier:
                keyid:4F:99:61:5A:09:08:E4:1E:72:A6:98:BE:51:C9:99:A6:D5:31:91:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/4F99615A0908E41E72A698BE51C999A6D53191C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F99615A0908E41E72A698BE51C999A6D53191C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/34352e3233352e3231362e302f32322d3234203d3e20323638323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:7d:29:5b:7d:62:8e:cb:3e:34:ad:51:c3:4f:21:0d:d0:6b:
         47:c7:f9:3c:68:0f:e6:09:d3:9d:c1:a0:1f:56:d0:db:93:68:
         2e:98:e8:f6:be:8c:a8:df:3e:3b:47:f3:f0:9f:dc:0f:7c:ec:
         f0:a0:ab:01:88:9c:52:c7:dc:fa:ec:25:7e:93:a7:ad:76:a2:
         b3:48:46:45:6f:7b:89:b3:e8:de:d2:84:8d:65:f9:43:57:d8:
         f3:a9:0f:3b:69:c6:83:b8:8f:2a:34:64:8e:fc:52:d4:22:99:
         cf:d9:d5:21:d2:87:a0:42:58:53:4e:6e:8a:3b:bd:62:f2:6d:
         9d:e7:d8:4e:2a:99:43:35:48:44:1e:45:cf:fb:a7:6b:18:94:
         56:4e:b8:82:86:ca:e5:67:7e:0b:10:49:2b:28:4a:bc:09:75:
         59:6a:81:af:0d:07:46:8d:c7:15:2d:41:fd:f5:50:4c:bf:9c:
         22:80:1c:7f:ea:4f:7f:27:57:3b:8e:77:01:ae:2c:8c:44:42:
         1a:e7:6a:da:c6:9c:83:c4:07:cd:b9:58:51:6a:a5:3b:61:8a:
         25:b3:18:96:55:c5:58:9a:5e:9d:65:1f:09:9a:ca:9c:61:44:
         f4:d9:46:1e:07:c9:24:6d:11:95:83:ad:76:e2:7d:f5:d2:f9:
         6b:28:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:12 2026 by rpki-client