Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36342e302f32322d3234203d3e20323638393335.roa
File:                     34352e3137362e36342e302f32322d3234203d3e20323638393335.roa (raw, json)
Hash identifier:          x2iZVfJ3dSRBExUwymondVadxzq4Ho0ahJ6dV6Ik5IY=
Subject key identifier:   BD:F7:C6:B1:3D:A4:D8:11:9E:3B:1D:A8:96:CB:75:47:CD:7C:35:1C
Certificate issuer:       /CN=F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D
Certificate serial:       6641A72FC93A767CB34EB0D97B5F6D18F8C97D55
Authority key identifier: F5:CF:AD:59:BC:46:F4:9D:51:44:D2:0A:BE:0E:99:FF:76:A8:AB:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36342e302f32322d3234203d3e20323638393335.roa
Signing time:             Tue 26 May 2026 15:18:16 +0000
ROA not before:           Tue 26 May 2026 15:13:16 +0000
ROA not after:            Tue 25 May 2027 15:18:16 +0000
asID:                     268935
IP address blocks:        45.176.64.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:41:a7:2f:c9:3a:76:7c:b3:4e:b0:d9:7b:5f:6d:18:f8:c9:7d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D
        Validity
            Not Before: May 26 15:13:16 2026 GMT
            Not After : May 25 15:18:16 2027 GMT
        Subject: CN=BDF7C6B13DA4D8119E3B1DA896CB7547CD7C351C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:e3:7b:fb:32:0e:11:72:85:19:83:75:d9:
                    db:7d:9f:f0:3e:f0:30:ba:e7:a3:76:68:96:58:64:
                    ae:93:18:7e:af:45:70:54:a7:3e:97:ac:ac:1f:8a:
                    05:8f:d5:89:3b:aa:74:37:e1:59:a9:95:d1:dc:93:
                    3c:ac:33:34:be:d4:80:26:c5:ee:08:d1:3d:f0:83:
                    ec:3e:96:7b:17:b9:49:76:70:67:07:29:c6:2c:06:
                    02:63:af:f0:fd:09:c0:7a:95:b3:b3:9d:d5:4d:58:
                    8e:45:47:08:59:50:26:a0:07:80:a7:c3:4d:b1:7f:
                    4a:fe:19:ec:95:d5:e8:32:94:54:61:e6:bc:29:89:
                    7a:4b:27:41:1e:64:29:c2:b6:3b:96:0b:4c:01:44:
                    0f:01:ed:b2:1a:b8:bc:fe:2c:dd:ae:ae:92:14:83:
                    b7:dc:45:07:e3:ca:fc:a9:7d:61:bc:2d:6e:30:bc:
                    ae:da:c9:8b:7f:fd:47:32:14:24:34:ea:79:62:8b:
                    48:4b:e5:35:36:cf:6e:dd:fe:a3:8f:58:23:6e:8a:
                    b7:30:de:dd:b7:58:47:6d:40:89:5d:d2:57:a7:74:
                    53:fb:7f:4d:4f:52:1d:e5:34:b6:ad:fc:1a:5f:7d:
                    a1:16:a0:e8:7b:d0:f3:57:37:3e:9c:89:42:bb:a7:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F7:C6:B1:3D:A4:D8:11:9E:3B:1D:A8:96:CB:75:47:CD:7C:35:1C
            X509v3 Authority Key Identifier:
                keyid:F5:CF:AD:59:BC:46:F4:9D:51:44:D2:0A:BE:0E:99:FF:76:A8:AB:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36342e302f32322d3234203d3e20323638393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:16:e3:a1:e7:f7:f9:82:08:f1:74:6b:19:12:ac:a4:8d:
         e8:ce:f4:f6:07:9e:1b:78:15:ea:14:74:04:19:5c:42:99:11:
         2c:7c:31:b1:29:c8:3e:92:7c:31:57:b2:fa:92:a8:b0:11:ad:
         25:50:2a:08:a2:7d:42:d9:fb:db:53:9b:10:f9:57:54:07:d4:
         fb:09:ba:ee:24:4f:78:a3:35:20:86:a4:db:e6:bd:6a:78:b9:
         cc:d8:f2:4e:50:6e:4b:1d:73:b1:37:ea:60:9c:47:f7:a0:a1:
         a2:fc:78:f0:a7:ca:e0:48:03:13:cb:ed:f6:ba:ab:1a:c4:6c:
         b1:7d:ae:34:a5:c6:2e:e5:e3:92:39:1a:17:4d:28:a6:0e:77:
         68:3b:83:7a:6d:76:c0:75:44:a5:e3:a6:55:73:c4:44:4c:52:
         42:38:bf:ab:a9:78:c3:b9:bb:bb:11:ba:b6:15:ec:c0:77:95:
         2b:56:67:eb:d5:76:e9:8e:b2:23:a7:eb:1f:b7:38:bb:46:38:
         75:8b:c2:4d:ad:28:06:c2:a7:00:a6:5e:d9:15:00:79:7c:80:
         7d:e1:20:33:d2:68:d8:e6:cc:f5:bc:38:a3:60:ef:ba:ce:f1:
         40:2f:5b:c1:b8:0e:ff:ed:65:b2:2d:c5:5a:88:93:f9:55:4e:
         dd:bc:65:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZkGnL8k6dnyzTrDZe19tGPjJfVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDRkFENTlCQzQ2RjQ5RDUxNDREMjBBQkUwRTk5RkY3
NkE4QUIwRDAeFw0yNjA1MjYxNTEzMTZaFw0yNzA1MjUxNTE4MTZaMDMxMTAvBgNV
BAMTKEJERjdDNkIxM0RBNEQ4MTE5RTNCMURBODk2Q0I3NTQ3Q0Q3QzM1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQuN7+zIOEXKFGYN12dt9n/A+
8DC656N2aJZYZK6TGH6vRXBUpz6XrKwfigWP1Yk7qnQ34VmpldHckzysMzS+1IAm
xe4I0T3wg+w+lnsXuUl2cGcHKcYsBgJjr/D9CcB6lbOzndVNWI5FRwhZUCagB4Cn
w02xf0r+GeyV1egylFRh5rwpiXpLJ0EeZCnCtjuWC0wBRA8B7bIauLz+LN2urpIU
g7fcRQfjyvypfWG8LW4wvK7ayYt//UcyFCQ06nlii0hL5TU2z27d/qOPWCNuircw
3t23WEdtQIld0lendFP7f01PUh3lNLat/BpffaEWoOh70PNXNz6ciUK7p7FzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvffGsT2k2BGeOx2olst1R818NRwwHwYDVR0j
BBgwFoAU9c+tWbxG9J1RRNIKvg6Z/3aoqw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRpSG8yQ2lBbjFyYVFiUXRnVHpSanJZMUJBM0RRcnA5a29MaFdEaFRl
V2MvMC9GNUNGQUQ1OUJDNDZGNDlENTE0NEQyMEFCRTBFOTlGRjc2QThBQjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1Q0ZBRDU5QkM0NkY0OUQ1
MTQ0RDIwQUJFMEU5OUZGNzZBOEFCMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0aUhvMkNpQW4xcmFRYlF0Z1R6UmpyWTFCQTNEUXJwOWtvTGhXRGhUZVdjLzAv
MzQzNTJlMzEzNzM2MmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbBAMA0GCSqGSIb3DQEBCwUAA4IBAQB+gBbjoef3
+YII8XRrGRKspI3ozvT2B54beBXqFHQEGVxCmREsfDGxKcg+knwxV7L6kqiwEa0l
UCoIon1C2fvbU5sQ+VdUB9T7CbruJE94ozUghqTb5r1qeLnM2PJOUG5LHXOxN+pg
nEf3oKGi/Hjwp8rgSAMTy+32uqsaxGyxfa40pcYu5eOSORoXTSimDndoO4N6bXbA
dUSl46ZVc8RETFJCOL+rqXjDubu7Ebq2FezAd5UrVmfr1XbpjrIjp+sftzi7Rjh1
i8JNrSgGwqcApl7ZFQB5fIB94SAz0mjY5sz1vDijYO+6zvFAL1vBuA7/7WWyLcVa
iJP5VU7dvGWA
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:18:45 2026 by rpki-client