Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233322e302f32322d3234203d3e20323730373238.roa
File:                     3138372e3130322e3233322e302f32322d3234203d3e20323730373238.roa (raw, json)
Hash identifier:          L4fj2gU7PPY+o301GXiqMMP7Mh6Hztcy/SSlY72JqK0=
Subject key identifier:   29:88:77:81:EF:A2:A0:6C:14:71:49:8B:14:0C:95:01:22:1D:79:39
Certificate issuer:       /CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
Certificate serial:       03776D07A389246D029695647145E6852F1B73DB
Authority key identifier: B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233322e302f32322d3234203d3e20323730373238.roa
Signing time:             Sun 27 Jul 2025 01:52:22 +0000
ROA not before:           Sun 27 Jul 2025 01:47:22 +0000
ROA not after:            Sun 26 Jul 2026 01:52:22 +0000
asID:                     270728
IP address blocks:        187.102.232.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:77:6d:07:a3:89:24:6d:02:96:95:64:71:45:e6:85:2f:1b:73:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
        Validity
            Not Before: Jul 27 01:47:22 2025 GMT
            Not After : Jul 26 01:52:22 2026 GMT
        Subject: CN=29887781EFA2A06C1471498B140C9501221D7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:1f:5c:87:62:aa:3d:89:8b:eb:d2:23:6e:
                    f3:f8:7c:25:a1:52:72:4c:ad:91:bc:d9:b2:6c:67:
                    30:f0:ce:d4:17:af:2a:dc:08:1b:d5:2b:11:b0:41:
                    ea:7a:9a:b5:a6:40:b5:84:1d:af:d6:51:60:8f:81:
                    82:22:aa:82:8b:b2:e4:82:a5:73:79:3a:13:5f:b3:
                    db:98:3d:3c:40:c5:00:d4:90:d1:2a:86:f4:a6:cf:
                    de:2e:92:35:a4:bd:e0:e4:70:6e:70:5b:6e:04:92:
                    ff:82:e6:3a:a4:f6:26:72:f0:cd:f2:ee:09:fb:83:
                    5b:12:b9:ba:63:43:38:bb:c2:9e:16:51:52:5b:6c:
                    db:c1:99:b2:8e:27:db:14:ae:4e:0d:61:4b:e1:e3:
                    3c:fc:e8:8f:c0:f2:ed:c3:66:6a:34:0c:99:d4:38:
                    9f:e2:95:d4:b1:09:5b:da:bf:7e:df:db:10:42:2e:
                    50:0d:fb:8b:82:11:fa:92:b2:1d:cd:dc:a5:2d:b9:
                    3b:a0:45:0e:69:f0:fc:4e:f3:79:dd:fb:a6:f8:23:
                    c9:fc:59:57:a7:59:f6:6f:60:d0:fd:e8:c2:b4:22:
                    20:40:41:16:d5:77:c3:ed:3f:0a:84:d9:ba:06:fb:
                    e7:28:c5:c8:f9:ec:f4:bc:5f:0f:bb:e6:e1:61:e9:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:77:81:EF:A2:A0:6C:14:71:49:8B:14:0C:95:01:22:1D:79:39
            X509v3 Authority Key Identifier:
                keyid:B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233322e302f32322d3234203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:41:54:77:de:9a:54:89:a6:c3:10:5b:93:c7:92:38:88:
         d9:ce:c7:b5:86:34:07:65:af:f7:21:43:fb:82:74:da:1a:9b:
         b4:f1:d1:56:95:b2:98:7c:d1:1e:f4:db:f1:bb:60:d1:69:8e:
         ca:3a:a8:68:0d:9b:d0:ca:fe:57:d5:39:f2:45:f4:a2:be:ea:
         f1:cf:7c:83:52:61:27:ec:1f:81:37:cc:d4:99:ae:22:06:5e:
         92:83:32:9d:60:58:03:54:c3:ff:36:85:64:42:7c:d9:84:80:
         38:ff:51:94:9c:4d:e6:1c:6a:ad:44:15:17:09:4a:1f:1d:c0:
         ba:52:fe:86:32:36:eb:37:73:77:8f:9f:d1:d1:1e:46:c8:45:
         f7:0a:70:a4:d9:9e:7e:e9:52:50:1c:62:ee:36:b9:cb:c6:49:
         e6:87:a2:4d:49:09:bb:0d:22:24:1e:dd:fa:0a:02:e4:6e:a4:
         45:1b:2b:c1:60:e3:05:ca:ad:5c:a1:9b:c9:cf:5b:f9:d9:d3:
         28:4e:d5:26:d1:a3:34:4e:11:18:bf:53:c8:25:ec:c0:af:9a:
         ab:7d:00:2b:95:58:89:a3:6f:e2:1e:7d:4e:3b:61:a4:53:04:
         d1:2c:c2:91:0c:01:d8:2b:23:98:b1:65:aa:bb:dd:99:41:14:
         35:45:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:25 2025 by rpki-client