Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          sJSZVyNFNhmS3V6R6T69pzAIQgYknD3ZjNr4zeaEJrA=
Subject key identifier:   74:91:22:4A:EF:5E:7F:90:4C:7E:36:47:54:ED:C5:BC:22:F6:DF:50
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       6C0D4B7C6AA813E8D83159C59D1699C7F6D454F5
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:34 +0000
ROA not before:           Mon 04 Aug 2025 15:21:34 +0000
ROA not after:            Mon 03 Aug 2026 15:26:34 +0000
asID:                     263541
IP address blocks:        191.241.22.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:4b:7c:6a:a8:13:e8:d8:31:59:c5:9d:16:99:c7:f6:d4:54:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:34 2025 GMT
            Not After : Aug  3 15:26:34 2026 GMT
        Subject: CN=7491224AEF5E7F904C7E364754EDC5BC22F6DF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:5f:3c:ee:a7:04:38:d8:0f:a6:cf:26:cc:
                    cb:4c:a7:a3:88:d0:57:78:6d:99:33:5b:7a:d0:62:
                    a4:f0:f9:1a:bd:df:a7:a1:80:f4:2b:cf:81:c4:4a:
                    36:dd:30:7c:89:b8:de:9a:51:1f:f5:f7:26:db:f6:
                    80:7f:a7:d6:39:2a:17:4e:1b:7b:27:25:51:80:d4:
                    7d:42:2d:17:03:e2:d4:83:23:8c:3e:c5:45:70:15:
                    5f:92:76:5f:7b:25:ad:00:03:85:9d:c7:8e:54:ff:
                    64:df:91:9b:8c:2f:d7:85:4d:03:03:1a:61:fc:96:
                    c4:62:c0:f5:92:83:e4:1d:5b:3e:16:ce:10:e2:f4:
                    ad:2a:c3:48:04:75:ae:26:d3:ff:b0:c1:7a:95:e0:
                    bd:8a:ec:47:22:d8:d1:59:b3:d8:4a:fb:28:14:98:
                    f9:1f:ba:1f:dd:e9:f1:c6:e8:90:ce:08:c9:6d:2b:
                    ff:22:2d:f2:07:59:94:ef:91:d9:c5:97:66:df:64:
                    6d:13:80:75:d4:0b:ea:1b:36:6c:87:6b:88:b6:a2:
                    74:b9:99:fa:22:d7:2a:0a:b3:c5:40:c1:29:35:d0:
                    82:9a:8f:5d:48:4c:d8:b7:61:2d:63:af:3a:1b:bb:
                    d6:da:1a:dd:fb:e5:9c:f3:7d:55:c8:9a:a5:ed:26:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:91:22:4A:EF:5E:7F:90:4C:7E:36:47:54:ED:C5:BC:22:F6:DF:50
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32322e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:e4:30:86:31:fa:78:d7:d6:3d:81:ee:95:cb:ae:93:06:
         70:e7:ef:44:aa:ba:4e:26:9e:18:db:7b:56:c6:51:d2:78:e2:
         c7:23:f8:23:93:d8:54:c8:1a:2a:29:26:6f:cb:aa:c1:fc:9f:
         d5:25:67:87:42:72:d3:b7:c3:02:34:aa:69:63:ab:db:e3:96:
         c4:34:aa:6d:04:a2:69:a1:57:bb:f5:f4:48:34:e7:cb:68:30:
         75:d7:61:27:ee:88:7e:f6:96:82:2a:ae:cb:36:ed:4d:61:92:
         d8:b7:76:46:22:c5:0d:93:6f:43:04:d0:96:20:92:74:95:de:
         40:00:30:f8:b8:e3:f8:c3:7b:af:6a:64:36:63:1c:c3:c9:a6:
         e1:71:cf:18:6c:3e:14:35:0d:59:68:6b:ed:1a:02:83:ea:1f:
         e3:96:9c:b9:4c:82:aa:4b:81:6e:4e:bd:c7:16:f3:2c:25:57:
         0c:ad:85:12:d0:a8:68:53:74:87:0e:4d:07:47:94:55:74:8a:
         0c:f3:12:63:b1:46:70:02:6b:8c:6a:57:d9:2a:41:bb:45:dd:
         23:f9:6d:9e:3c:55:3c:37:41:28:08:42:a2:35:88:25:05:24:
         3e:90:31:f9:45:85:cb:89:60:bb:fc:20:49:f1:fc:14:29:18:
         74:58:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:32 2025 by rpki-client