Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32332d3233203d3e20323633353431.roa
File:                     3139312e352e3136362e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier:          foq0UOECIUA3AcuS4w8J0Rd6L1tFJshrthEEXZviFQs=
Subject key identifier:   E3:B8:B7:F1:B6:48:D8:84:B4:E0:27:AE:B9:1A:26:3B:91:67:22:71
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       2F82B5DC5BFDDA70B83DBE65DCCFB5E047FE2ED7
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32332d3233203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:00 +0000
ROA not before:           Mon 04 Aug 2025 15:21:00 +0000
ROA not after:            Mon 03 Aug 2026 15:26:00 +0000
asID:                     263541
IP address blocks:        191.5.166.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:82:b5:dc:5b:fd:da:70:b8:3d:be:65:dc:cf:b5:e0:47:fe:2e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:00 2025 GMT
            Not After : Aug  3 15:26:00 2026 GMT
        Subject: CN=E3B8B7F1B648D884B4E027AEB91A263B91672271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:54:29:d8:bc:94:8b:94:c0:21:9e:3c:4b:
                    1f:9c:b6:91:c3:b2:75:b7:aa:65:ee:4f:a0:5b:1a:
                    10:57:89:2e:ae:13:23:bf:3c:a5:f8:0c:aa:f5:5b:
                    1d:88:71:65:52:4a:0f:b5:99:f9:81:73:d8:ea:8f:
                    6b:50:18:20:5b:b9:35:14:4c:86:d2:29:ea:ed:73:
                    c4:94:90:25:49:61:ad:53:a8:f8:0f:53:a6:55:21:
                    f7:ee:c7:5e:62:0d:66:69:41:27:4a:4d:f2:ac:a9:
                    9a:a9:bb:3b:9a:ab:90:13:a1:72:38:ae:77:2f:34:
                    33:ca:78:11:8a:f4:39:2c:6e:fc:91:b3:9a:72:fa:
                    96:a7:9d:d0:52:ab:a6:82:b7:20:fd:4e:1d:5b:91:
                    30:c1:03:5f:16:2b:84:3d:e7:78:5b:75:cc:1e:29:
                    5a:45:41:6e:39:8d:62:24:51:0c:ff:3c:f6:bc:9c:
                    78:1d:52:5e:bf:0a:fa:b8:37:9b:07:4b:40:39:db:
                    fb:44:f5:96:e0:60:99:65:4d:e7:a2:71:f3:a4:1b:
                    9c:92:26:22:fc:28:23:8b:78:ef:7a:3f:b9:3c:10:
                    48:85:f2:d6:49:4e:b9:9a:8f:55:f8:87:8f:de:7e:
                    bf:7f:41:a5:99:27:5b:36:12:be:2c:d2:7c:95:16:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:B7:F1:B6:48:D8:84:B4:E0:27:AE:B9:1A:26:3B:91:67:22:71
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136362e302f32332d3233203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:1a:c3:48:af:a0:e3:f4:2c:0c:7a:68:2a:d7:0d:1e:15:6f:
         21:d8:71:07:1c:23:b5:95:a7:c3:59:69:c7:44:3f:87:18:5e:
         e9:aa:1a:e4:49:83:a3:cf:95:08:65:d1:ae:9f:06:bb:b8:c5:
         f2:e0:1d:a9:9f:d9:b7:5b:bf:e1:ea:d4:a5:39:c9:ff:33:2b:
         4a:66:6a:86:4e:96:92:e0:e3:80:d9:6f:a7:6b:1e:ca:07:07:
         e0:99:46:30:d7:83:55:19:bd:1b:51:1e:43:68:00:5a:db:b2:
         cd:28:c9:83:00:32:a8:52:a3:67:15:8e:12:e7:97:90:8a:98:
         a5:02:7b:6f:9d:5c:7e:89:6c:97:99:c4:46:2b:8b:d9:00:f5:
         53:0e:71:a3:6b:ee:44:b4:f8:0f:26:e7:43:76:74:3c:39:47:
         9c:0a:78:e4:6d:80:ec:bf:ec:a5:f3:54:98:4b:98:e1:af:4c:
         db:61:30:74:6f:85:df:ee:d2:ab:6d:b0:f8:22:35:8e:27:e5:
         74:07:f7:86:a1:67:05:0f:81:80:03:0a:de:a2:cd:c2:e3:24:
         66:ec:e6:2e:0e:5f:e9:b4:99:2e:d8:50:42:c6:a6:6e:a5:2b:
         3b:ad:81:4e:5b:ea:5b:57:6d:09:46:46:e1:1f:ef:c6:b5:82:
         06:80:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:15 2025 by rpki-client