Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
File:                     3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa (raw, json)
Hash identifier:          vWKBevZplYuMONrhIgRWixnOGrDl/gm1awDcTYXuX5c=
Subject key identifier:   65:11:02:DC:15:45:0F:62:AF:A5:E3:E7:42:2E:A3:0C:7C:33:F2:3C
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       2DA55878DD6F824C88B036BE71BF825FAF09F879
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:38 +0000
ROA not before:           Mon 04 Aug 2025 15:21:38 +0000
ROA not after:            Mon 03 Aug 2026 15:26:38 +0000
asID:                     263541
IP address blocks:        191.241.23.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:58:78:dd:6f:82:4c:88:b0:36:be:71:bf:82:5f:af:09:f8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:38 2025 GMT
            Not After : Aug  3 15:26:38 2026 GMT
        Subject: CN=651102DC15450F62AFA5E3E7422EA30C7C33F23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:25:d0:87:eb:4b:34:d4:d2:56:69:b3:4b:
                    78:a0:84:d1:cb:c0:7f:59:cb:f0:5f:5d:8e:6d:c8:
                    e0:8d:1e:4d:82:96:86:c6:75:89:7f:e5:fc:37:ed:
                    9f:0e:46:7b:21:d5:e1:26:94:c4:61:e5:ec:f4:52:
                    8c:04:59:6f:42:5a:f5:82:a1:ae:ed:0e:df:46:d0:
                    10:4b:f9:ef:1b:23:7e:43:b9:7b:e5:c9:7e:36:88:
                    70:96:1a:79:0c:4e:fb:5b:ab:7d:4c:d9:55:dd:90:
                    45:08:b4:cc:8f:b0:c2:45:24:ca:49:fa:10:da:75:
                    8c:44:11:d3:a8:43:56:4f:9b:f1:83:d8:56:e1:eb:
                    60:65:a1:e3:e1:b2:80:6e:7e:f4:87:d5:ed:4e:d3:
                    82:db:53:44:1d:af:aa:31:21:a6:28:fb:57:83:58:
                    e1:2c:7e:f7:fd:29:06:02:1e:fb:35:f3:27:1d:57:
                    cd:68:0b:45:42:6e:7e:80:42:78:71:72:90:cf:25:
                    ce:d3:90:42:2d:7d:2e:58:ad:d7:2f:e8:4d:2f:79:
                    15:76:88:70:31:fd:7e:b5:aa:db:5e:01:57:92:a5:
                    0f:51:64:ca:b6:3a:ff:72:0f:ee:97:47:76:9a:e0:
                    3e:93:a0:fd:01:f7:6d:3f:97:40:b0:3a:31:74:20:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:02:DC:15:45:0F:62:AF:A5:E3:E7:42:2E:A3:0C:7C:33:F2:3C
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e3234312e32332e302f32342d3234203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:2b:b0:6d:28:15:7b:8d:92:79:68:60:73:cf:2c:a0:aa:dc:
         71:8c:df:82:e2:8a:65:34:7d:52:27:82:de:68:65:1f:a2:3f:
         fa:c0:3f:35:c7:e0:9b:fb:8b:9d:c4:7c:01:bb:2e:47:2b:5a:
         b6:22:64:de:f5:3d:19:75:3c:8f:6e:be:6c:cd:1c:de:4c:0d:
         86:fc:0b:61:2c:3e:4c:04:92:92:bf:13:f6:24:ce:10:72:cb:
         11:fd:82:cf:9a:7d:2e:09:c4:e3:b4:a5:bc:ea:c6:79:a3:ae:
         08:54:1a:f9:c1:10:9c:ba:64:dc:93:22:0b:1d:ea:93:eb:c4:
         73:8f:8e:b9:61:e0:63:32:91:20:58:33:26:c5:e7:ad:48:c7:
         8e:bd:cb:fe:c0:98:4d:bd:00:96:12:d5:ef:01:6b:41:dd:1b:
         4f:5e:5e:92:46:00:ad:54:fd:2a:02:e9:f0:57:64:78:dd:f5:
         6a:a4:04:fa:a8:cf:c0:92:6c:2d:fd:6a:5d:4b:14:20:01:ce:
         0e:07:1f:50:06:4d:2f:92:09:5e:86:6d:bd:7d:3d:cc:6a:68:
         cf:08:9d:92:86:0b:b9:66:da:96:8a:ed:24:5b:a1:c9:b6:65:
         05:c5:82:b9:6d:d4:df:05:88:64:43:26:a1:ec:28:30:18:07:
         9c:5f:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:49:06 2025 by rpki-client