Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa
File:                     3139312e352e3136342e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier:          YlNzOSYpI072tGj7Kkz34DqliVgb331pSdz1AOZmD0U=
Subject key identifier:   56:77:1B:A9:15:DB:D1:B0:CA:A9:54:FA:78:76:CF:0F:99:13:CD:71
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       2A209D416E1EABFAC3C4E0E142ACC0DCDF70DCDC
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:25:49 +0000
ROA not before:           Mon 04 Aug 2025 15:20:49 +0000
ROA not after:            Mon 03 Aug 2026 15:25:49 +0000
asID:                     263541
IP address blocks:        191.5.164.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:20:9d:41:6e:1e:ab:fa:c3:c4:e0:e1:42:ac:c0:dc:df:70:dc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:20:49 2025 GMT
            Not After : Aug  3 15:25:49 2026 GMT
        Subject: CN=56771BA915DBD1B0CAA954FA7876CF0F9913CD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:fa:92:74:da:94:97:86:4d:80:b9:5b:7d:
                    ef:f0:35:ca:15:19:17:af:e4:f2:05:ea:e2:be:17:
                    a0:0d:18:0c:57:5c:a8:4a:1e:bd:3b:a3:5e:36:07:
                    0a:05:4d:35:18:18:9b:b0:a6:83:d3:46:cb:13:c2:
                    4e:24:8f:0a:fa:a8:08:25:a5:f7:00:17:2b:1a:04:
                    8a:5a:55:61:0e:5c:df:6a:51:8f:72:10:1e:b1:54:
                    f8:84:fd:f3:65:aa:4c:1c:1f:9d:e4:2a:3d:f1:f4:
                    4c:4f:bb:f7:c7:82:be:58:1c:7c:bc:13:7b:a8:a9:
                    33:c3:68:7d:b1:6e:bc:84:39:fb:4a:98:25:f7:18:
                    67:a6:1d:b5:f1:52:e1:8a:77:e7:01:8a:53:7c:00:
                    29:d2:8c:60:e9:a3:43:bb:aa:46:9b:95:75:f9:12:
                    26:9e:dc:fc:37:99:97:68:7e:47:a4:0f:da:fe:63:
                    9d:a4:d7:2a:16:90:6c:e2:63:25:b7:42:f8:7e:88:
                    52:4b:54:d3:72:e3:fd:33:6f:7c:4e:e4:28:5c:22:
                    79:3e:23:21:3f:cd:31:59:35:22:61:1e:cf:08:94:
                    c8:ab:a5:b9:21:b8:a2:21:74:13:13:09:cf:2e:13:
                    81:86:7d:ff:50:c8:13:44:bd:ea:3e:ca:df:3c:0c:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:1B:A9:15:DB:D1:B0:CA:A9:54:FA:78:76:CF:0F:99:13:CD:71
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:af:06:83:f0:6b:b9:78:f7:3c:40:70:05:3d:70:16:0e:
         d7:44:89:e5:d9:a9:25:c9:6b:cb:0a:b7:97:b7:55:55:17:7d:
         26:ee:56:83:c6:46:6e:72:38:1b:2b:a1:d1:2b:3b:1f:aa:29:
         f6:1e:e2:f1:67:1d:a6:ac:67:21:9d:b6:b7:5c:bb:f5:ba:57:
         a5:85:b0:73:15:76:09:a8:7b:80:c9:a6:84:c3:e0:15:71:55:
         d4:c9:2a:17:fb:66:24:6b:78:f7:89:59:b1:3d:6e:01:13:ff:
         ec:0f:bc:6d:6f:33:7e:9d:90:6c:80:ed:87:40:68:e9:90:2a:
         60:b9:78:ab:41:1a:28:a3:79:51:1f:e3:74:f7:9c:17:72:9b:
         18:28:47:50:72:d6:7e:8e:01:2f:a3:1c:0d:01:97:7f:a0:32:
         85:7c:96:ca:95:e9:8a:10:d3:0a:9d:81:23:65:0e:43:d7:9f:
         17:45:31:23:6d:30:c7:88:c1:e3:cc:50:d2:8e:6d:18:18:1c:
         9c:86:e3:cd:02:f2:33:9c:54:6c:18:40:2f:17:05:b2:92:82:
         bb:ab:ce:ec:01:fd:be:32:f2:86:a0:f0:58:fe:9e:9c:12:b5:
         b3:85:24:10:91:21:0f:06:db:c8:70:57:9e:38:12:16:78:cb:
         07:70:55:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKiCdQW4eq/rDxODhQqzA3N9w3NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdCNzM1NTI2REIwMjJGMDM3MzRCMThDQzQ4NjQ1QzAx
MEU0NDQyQTAeFw0yNTA4MDQxNTIwNDlaFw0yNjA4MDMxNTI1NDlaMDMxMTAvBgNV
BAMTKDU2NzcxQkE5MTVEQkQxQjBDQUE5NTRGQTc4NzZDRjBGOTkxM0NENzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmfqSdNqUl4ZNgLlbfe/wNcoV
GRev5PIF6uK+F6ANGAxXXKhKHr07o142BwoFTTUYGJuwpoPTRssTwk4kjwr6qAgl
pfcAFysaBIpaVWEOXN9qUY9yEB6xVPiE/fNlqkwcH53kKj3x9ExPu/fHgr5YHHy8
E3uoqTPDaH2xbryEOftKmCX3GGemHbXxUuGKd+cBilN8ACnSjGDpo0O7qkablXX5
Eiae3Pw3mZdofkekD9r+Y52k1yoWkGziYyW3Qvh+iFJLVNNy4/0zb3xO5ChcInk+
IyE/zTFZNSJhHs8IlMirpbkhuKIhdBMTCc8uE4GGff9QyBNEveo+yt88DLIvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVncbqRXb0bDKqVT6eHbPD5kTzXEwHwYDVR0j
BBgwFoAUF7c1Um2wIvA3NLGMxIZFwBDkRCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC8xN0I3MzU1MjZEQjAyMkYwMzczNEIxOENDNDg2NDVDMDEwRTQ0NDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QjczNTUyNkRCMDIyRjAz
NzM0QjE4Q0M0ODY0NUMwMTBFNDQ0MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzEzOTMxMmUzNTJlMzEzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvwWkMA0GCSqGSIb3DQEBCwUAA4IBAQAl8K8Gg/Br
uXj3PEBwBT1wFg7XRInl2aklyWvLCreXt1VVF30m7laDxkZucjgbK6HRKzsfqin2
HuLxZx2mrGchnba3XLv1ulelhbBzFXYJqHuAyaaEw+AVcVXUySoX+2Yka3j3iVmx
PW4BE//sD7xtbzN+nZBsgO2HQGjpkCpguXirQRooo3lRH+N095wXcpsYKEdQctZ+
jgEvoxwNAZd/oDKFfJbKlemKENMKnYEjZQ5D158XRTEjbTDHiMHjzFDSjm0YGByc
huPNAvIznFRsGEAvFwWykoK7q87sAf2+MvKGoPBY/p6cErWzhSQQkSEPBtvIcFee
OBIWeMsHcFWC
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:18 2025 by rpki-client