Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa
File:                     3139312e352e3136342e302f32322d3232203d3e20323633353431.roa (raw, json)
Hash identifier:          XCbRUMPQo3cvoH9h8MHTx1lRJ/Mdnr+Q2XcSWM1wjvI=
Subject key identifier:   19:45:29:7A:04:73:61:2B:E5:24:29:AF:98:69:F4:61:69:50:BF:10
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       07BE76D8A5ABAB448161CA0894ED165D0377281D
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:25:35 +0000
ROA not before:           Mon 04 Aug 2025 15:20:35 +0000
ROA not after:            Mon 03 Aug 2026 15:25:35 +0000
asID:                     263541
IP address blocks:        191.5.164.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:be:76:d8:a5:ab:ab:44:81:61:ca:08:94:ed:16:5d:03:77:28:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:20:35 2025 GMT
            Not After : Aug  3 15:25:35 2026 GMT
        Subject: CN=1945297A0473612BE52429AF9869F4616950BF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c4:3b:52:ca:ae:f3:69:1c:88:7e:b5:5a:46:
                    d4:ab:09:3f:c1:4c:fc:6e:35:5a:7c:f4:e2:5c:0f:
                    9e:0a:15:7e:88:18:4b:79:41:32:8d:d6:39:29:6a:
                    34:d3:d5:a3:c3:10:68:e0:0d:a3:51:03:75:5b:52:
                    ab:e3:78:95:a3:89:42:62:27:31:4d:33:7b:18:2a:
                    bd:52:5b:5e:ee:66:f2:f2:6c:e4:1e:eb:5f:0d:95:
                    05:ec:a0:b8:41:48:95:63:79:62:87:9a:23:19:c3:
                    89:17:8e:04:95:6a:a8:10:9f:fb:ec:73:03:59:57:
                    ac:20:02:58:bb:c4:48:4a:51:c1:3e:f5:1b:fc:84:
                    55:64:fb:98:6e:ba:e7:48:88:db:88:37:52:ef:ae:
                    8a:40:1b:6d:a6:89:e8:fd:e2:67:3f:01:c3:ad:c2:
                    92:60:f4:a4:77:8d:d8:b1:95:01:17:7d:9d:ea:9d:
                    0a:2a:3a:61:9a:56:51:f0:0f:a7:a0:c7:37:4f:f0:
                    fc:e8:ca:4a:73:a9:33:dd:23:89:5d:f2:a5:b0:0c:
                    55:b6:2e:12:8c:84:9d:47:17:f6:c9:ef:b4:b0:5c:
                    45:a5:39:d5:73:5e:cf:8b:d6:c9:97:8f:49:55:00:
                    5e:97:83:62:fe:4c:8b:71:50:af:ce:03:d6:39:4c:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:29:7A:04:73:61:2B:E5:24:29:AF:98:69:F4:61:69:50:BF:10
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:c0:ab:b8:e0:64:14:89:ac:98:79:df:f1:a7:0f:9f:38:
         e6:95:9e:8f:de:66:df:db:b5:38:34:50:b1:dd:ab:91:f1:b6:
         8e:3c:46:0d:23:84:50:c0:68:68:d8:e7:29:e1:48:e1:60:32:
         7b:6a:05:58:88:bc:b5:c1:32:08:c9:45:8d:d9:c1:f6:f2:9e:
         14:0c:8b:3d:cf:2e:86:ab:4f:16:68:b4:a4:b9:11:eb:7f:c0:
         46:f4:fc:2e:31:93:65:ad:a3:47:23:81:a0:76:cd:40:83:7a:
         8e:3f:e5:70:85:85:b9:4b:61:55:14:b4:fa:46:27:26:c8:76:
         1b:d1:c2:75:f8:81:fa:40:ef:16:af:11:77:92:98:f9:49:0d:
         d2:df:24:ab:e2:92:2e:36:57:df:74:5a:f0:b1:f8:10:ad:4d:
         ab:ad:07:32:3d:99:31:db:48:d7:84:66:4c:f3:26:71:ae:f9:
         53:29:d4:57:86:58:27:04:98:0f:d8:6b:2b:39:31:9b:aa:26:
         af:71:bd:78:3e:f7:10:60:16:e2:e3:92:87:6a:6b:53:6f:05:
         26:16:0c:42:ee:45:af:f1:76:9e:8d:f7:42:41:4e:dc:93:f3:
         76:88:d0:a3:7d:20:2e:85:3a:a7:fe:7f:67:22:8b:8a:a4:28:
         b3:76:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:23 2025 by rpki-client