Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231382e302f32342d3234203d3e20323638323939.roa
File:                     34352e3233372e3231382e302f32342d3234203d3e20323638323939.roa (raw, json)
Hash identifier:          9biMvRpI24YrXb99YYBNJ2p1nbzZEjYmU1znP7NUyX0=
Subject key identifier:   F3:97:97:48:0F:8F:A2:1B:51:8E:39:76:8A:DB:58:5D:71:EC:7A:7B
Certificate issuer:       /CN=1DB352FB189B016E05AAE98CAC7385C15DC0F584
Certificate serial:       30D9B7B041AE948ED4687A4E8A7684F73EB5DD00
Authority key identifier: 1D:B3:52:FB:18:9B:01:6E:05:AA:E9:8C:AC:73:85:C1:5D:C0:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DB352FB189B016E05AAE98CAC7385C15DC0F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231382e302f32342d3234203d3e20323638323939.roa
Signing time:             Fri 01 Aug 2025 23:08:42 +0000
ROA not before:           Fri 01 Aug 2025 23:03:42 +0000
ROA not after:            Fri 31 Jul 2026 23:08:42 +0000
asID:                     268299
IP address blocks:        45.237.218.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d9:b7:b0:41:ae:94:8e:d4:68:7a:4e:8a:76:84:f7:3e:b5:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DB352FB189B016E05AAE98CAC7385C15DC0F584
        Validity
            Not Before: Aug  1 23:03:42 2025 GMT
            Not After : Jul 31 23:08:42 2026 GMT
        Subject: CN=F39797480F8FA21B518E39768ADB585D71EC7A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:90:f2:90:35:e9:80:f4:43:0f:b0:22:14:9e:
                    e6:a4:86:5e:81:ed:06:3b:ba:3c:86:bb:f6:f9:30:
                    6c:12:e7:3f:76:81:ef:74:de:7c:09:a6:38:33:7e:
                    5a:98:e4:a7:65:18:84:20:08:b1:ae:58:01:64:49:
                    68:26:af:ed:ff:01:50:6b:fe:ff:7f:30:36:06:a0:
                    97:ca:b8:41:64:0d:a6:90:69:8f:13:c9:c0:87:51:
                    3c:37:08:83:bd:d1:47:48:99:d5:b3:6c:7d:70:4f:
                    af:ff:f9:b9:37:49:2c:10:b0:0a:a5:ad:96:98:67:
                    67:ab:41:25:b1:da:f5:0d:ac:ed:c7:b5:14:c5:e0:
                    66:18:59:a2:e5:fc:f4:40:cd:1b:a3:6f:af:4a:43:
                    2c:81:8c:f0:3b:71:27:04:e8:c2:9d:c5:b4:2a:dd:
                    4d:72:67:a4:9d:53:52:d8:c1:c0:64:e3:00:79:0e:
                    2b:70:da:2b:4e:a3:3d:df:e1:90:33:fb:d0:f2:52:
                    5a:84:f6:bd:e6:21:e5:fc:5c:0a:f2:d8:29:29:fa:
                    7a:61:b2:63:08:07:23:3e:7b:27:90:6a:b5:a5:07:
                    0f:e9:3f:46:50:da:29:95:4d:41:a1:56:cb:bb:bc:
                    69:6a:53:d1:94:1c:f6:75:69:49:dd:d0:51:eb:c2:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:97:97:48:0F:8F:A2:1B:51:8E:39:76:8A:DB:58:5D:71:EC:7A:7B
            X509v3 Authority Key Identifier:
                keyid:1D:B3:52:FB:18:9B:01:6E:05:AA:E9:8C:AC:73:85:C1:5D:C0:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/1DB352FB189B016E05AAE98CAC7385C15DC0F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DB352FB189B016E05AAE98CAC7385C15DC0F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6b7U4uggvJMSKPdYnhmxQEwwCn6TApnoy6Ghoyw5ABV2/0/34352e3233372e3231382e302f32342d3234203d3e20323638323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:14:d8:fa:6b:b3:b5:3a:e6:ed:f2:76:82:b0:27:76:a2:
         ed:b9:15:68:9c:e8:fc:00:3d:41:8b:08:ab:a6:79:e4:48:58:
         7a:60:d7:2d:f3:8c:59:b5:e8:b6:15:42:fd:ac:b9:ef:c1:ee:
         06:d1:d1:30:9c:c2:74:82:93:9e:a1:9a:dc:21:92:c0:36:85:
         73:64:cb:05:d6:72:9a:2c:ad:34:50:90:c8:86:b8:06:6a:07:
         4f:06:17:99:d1:68:56:ce:c6:9e:ae:51:12:bc:e6:a9:93:28:
         e7:91:ef:c1:6f:4a:22:73:a5:47:99:b7:48:39:d6:c8:23:fe:
         53:34:ad:0c:2b:85:57:d2:e7:ba:2d:43:1e:ed:19:eb:b0:72:
         45:1d:d3:55:f5:d7:8b:a1:3f:5f:06:45:44:3c:73:94:48:07:
         10:e1:c3:da:fe:34:94:bf:f4:98:07:52:32:38:e8:30:f7:d3:
         1b:28:fb:fa:81:2a:26:47:b6:e3:d4:75:ff:9d:1a:ae:6b:bf:
         39:25:1d:43:1f:f8:4f:4d:a2:99:53:88:29:fa:cc:11:0b:11:
         7d:d3:7b:59:d4:76:2b:68:0d:e9:cb:85:e0:52:f7:0d:27:51:
         c4:d9:e6:29:e9:4f:8f:5d:94:03:31:ff:47:c3:b7:45:59:6a:
         34:b3:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:14:51 2025 by rpki-client