Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
File:                     3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier:          T79E/ktDHCAULtfH68FEZ1J75gCX7jrHh0OBEHlPTyw=
Subject key identifier:   F3:17:54:7A:FF:A7:4A:22:78:B3:06:03:1C:94:92:65:82:B3:4C:77
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       7582BBC400D62FF924A33E2476F4DADC3BD0D2C5
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:06 +0000
ROA not before:           Mon 04 Aug 2025 15:21:06 +0000
ROA not after:            Mon 03 Aug 2026 15:26:06 +0000
asID:                     263541
IP address blocks:        191.241.20.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:82:bb:c4:00:d6:2f:f9:24:a3:3e:24:76:f4:da:dc:3b:d0:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:06 2025 GMT
            Not After : Aug  3 15:26:06 2026 GMT
        Subject: CN=F317547AFFA74A2278B306031C94926582B34C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:56:de:84:65:23:78:7b:83:b6:66:b4:e9:
                    2d:77:cb:c1:15:b4:39:da:86:c3:b6:31:b8:19:b4:
                    eb:5c:c8:c1:86:6c:ef:2c:c7:6e:9f:c9:a4:12:15:
                    ee:c6:b0:cb:68:5a:66:b8:87:e9:22:c0:e8:2c:b7:
                    eb:ad:ce:0e:1e:b6:f2:10:37:07:c3:fc:3d:99:dc:
                    ed:85:71:a6:24:c1:fb:8a:56:f5:dc:fa:dc:27:a7:
                    d7:d5:ea:dd:5f:e0:da:3e:e5:f9:75:62:64:60:44:
                    2d:b2:d1:6e:3a:af:18:cb:c8:76:26:10:5d:77:9c:
                    ba:78:ae:77:e2:cb:db:63:51:2e:ce:6d:1f:89:73:
                    b8:90:5d:33:91:81:be:22:a5:6b:50:e3:47:f2:57:
                    c9:25:cb:f1:fc:58:f1:9e:0d:27:70:2f:6b:a7:63:
                    45:d2:83:e9:32:fb:cb:ba:90:21:db:6d:8b:3b:68:
                    52:28:3a:2b:71:43:f4:75:81:01:8a:4a:85:05:9c:
                    91:9d:db:f8:b5:69:63:da:9a:59:15:43:7b:a6:1e:
                    73:c3:9d:ae:d5:52:76:b4:10:5f:7b:c8:1f:88:16:
                    c4:95:46:1c:16:9b:f0:d5:d2:54:75:7a:57:cf:17:
                    3c:d7:a1:3e:e4:1c:93:97:48:68:29:03:2b:66:fb:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:17:54:7A:FF:A7:4A:22:78:B3:06:03:1C:94:92:65:82:B3:4C:77
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32302e302f32332d3233203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:f0:83:2b:3a:50:59:6c:33:0d:64:15:76:ae:34:7b:4d:
         b0:26:02:5f:03:78:6d:32:f2:20:f4:ef:29:c3:82:94:6e:c3:
         6b:d9:78:81:45:e4:d2:cc:82:cf:6f:0b:48:be:b3:5c:01:92:
         54:bb:f0:74:4c:07:e5:1a:75:f5:dd:d8:87:f2:f0:eb:45:88:
         6b:e5:40:f5:ea:54:76:c3:42:d7:40:9f:4f:36:4b:a2:1d:b6:
         76:53:bf:2b:91:5a:99:73:ef:db:84:37:33:01:65:d9:db:95:
         c4:e1:90:25:6c:85:99:06:2e:6f:17:a4:ef:0f:b4:8b:83:c5:
         17:5b:9c:d8:28:de:8a:b4:0c:54:7b:96:68:be:6c:19:d4:c8:
         a0:18:a1:eb:77:46:6e:5f:45:b0:14:bd:be:be:ee:6a:93:b5:
         44:15:7c:2c:be:70:1d:bf:dd:99:94:ff:60:ff:a6:70:3c:aa:
         db:e1:97:2e:76:87:86:91:81:0a:c8:47:66:1f:20:da:1b:e4:
         ca:31:6d:42:2d:ec:c8:c5:18:8a:80:30:82:7d:7d:96:0d:45:
         6e:eb:6b:f1:77:81:81:0f:7a:7d:1f:54:70:36:8d:47:49:a1:
         9f:9e:35:fa:30:62:c9:fe:3a:de:63:0d:8d:6f:f4:77:87:ec:
         58:f9:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:47:30 2025 by rpki-client