Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3233203d3e20323731353030.roa
File:                     3138312e3233332e3137362e302f32332d3233203d3e20323731353030.roa (raw, json)
Hash identifier:          2InMVEXOMl5hQxgSa4/h97OeGI3if5mmVZPtf8QhplM=
Subject key identifier:   DC:E1:15:EC:C3:55:FC:32:56:3B:EA:C5:C3:A8:9F:61:78:59:D1:92
Certificate issuer:       /CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
Certificate serial:       6327885E967A1D3247A9474C0C024A6C8112F03F
Authority key identifier: 72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3233203d3e20323731353030.roa
Signing time:             Tue 24 Feb 2026 23:22:33 +0000
ROA not before:           Tue 24 Feb 2026 23:17:33 +0000
ROA not after:            Tue 23 Feb 2027 23:22:33 +0000
asID:                     271500
IP address blocks:        181.233.176.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:27:88:5e:96:7a:1d:32:47:a9:47:4c:0c:02:4a:6c:81:12:f0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
        Validity
            Not Before: Feb 24 23:17:33 2026 GMT
            Not After : Feb 23 23:22:33 2027 GMT
        Subject: CN=DCE115ECC355FC32563BEAC5C3A89F617859D192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:d8:b9:48:ab:66:f0:eb:53:d3:09:7f:d2:
                    6b:78:7b:81:e8:01:7a:26:1f:f1:2c:00:34:24:fa:
                    e9:4f:6a:4d:1e:f3:69:c3:5a:74:e3:35:fe:99:46:
                    78:08:64:d0:44:4c:4f:74:18:e8:99:86:4d:dd:92:
                    49:87:b9:a4:37:92:a0:e8:e2:83:5c:cf:da:d5:49:
                    18:b5:ab:46:a6:53:4b:4a:8e:d4:57:d3:b9:0b:16:
                    b2:9b:57:60:73:ba:a1:c8:8d:2d:3d:8c:82:aa:9b:
                    6d:4a:52:f6:8f:39:86:88:c2:d4:74:d5:7c:39:49:
                    8f:5d:dd:97:e9:bd:16:a2:7b:b2:50:84:cd:d5:f6:
                    59:80:2e:97:b7:37:b9:2b:66:f8:8d:e4:f7:12:df:
                    4d:eb:0c:f7:8b:0d:36:1a:71:84:13:c1:8f:3a:7a:
                    32:e4:e8:b7:23:b2:91:a3:f6:fe:cb:d6:a5:5a:ff:
                    19:e4:dd:8b:43:b3:87:a7:30:1f:1b:b2:82:15:62:
                    c8:3e:ae:ce:29:25:95:08:31:27:5b:0c:b3:8b:d0:
                    a8:31:2a:de:d7:09:81:48:ee:b7:c5:cd:6a:bc:a3:
                    ed:1f:b6:04:a3:74:ff:45:f6:b6:72:3b:4a:b6:b7:
                    fd:e1:be:b7:0c:30:14:e6:40:14:cc:0c:da:27:7b:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:15:EC:C3:55:FC:32:56:3B:EA:C5:C3:A8:9F:61:78:59:D1:92
            X509v3 Authority Key Identifier:
                keyid:72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32332d3233203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:11:15:db:5e:7c:45:f3:3e:f3:51:8a:65:f0:87:88:5e:30:
         68:45:92:b1:b6:b1:47:d0:d2:31:b3:40:6d:ca:19:80:e1:52:
         5c:a2:41:ba:21:3a:e2:f9:4a:8f:1e:35:9e:6e:61:51:84:b9:
         39:ee:79:8a:be:b7:ab:12:82:4e:c9:cb:0c:32:c8:bc:c9:52:
         0f:5d:c9:91:08:23:38:26:0e:1c:ea:9a:dd:58:2e:14:35:39:
         52:93:9d:f5:48:7b:2f:71:6e:b7:c1:30:10:9d:80:f2:77:fd:
         48:15:3a:d8:56:b9:73:11:8e:eb:ce:39:ba:76:02:18:8a:40:
         38:c5:c3:01:59:a4:d2:a1:80:f9:97:8b:d9:d2:89:7a:e2:f3:
         17:01:d3:01:67:10:3f:bc:b2:a0:84:cc:14:3d:88:01:c7:69:
         11:68:9d:4c:9e:0a:51:82:b9:50:76:b6:86:90:16:39:97:0f:
         f0:44:93:be:b9:15:21:65:36:2a:a3:d0:ab:1f:8f:12:f0:ee:
         f7:16:a0:d1:c3:5a:61:57:c8:9a:8d:21:87:f0:91:c9:7f:2a:
         6b:0f:1d:13:57:f7:6b:c4:6e:72:1c:d4:62:95:b9:e4:ae:3f:
         9c:e2:e4:bd:a6:23:54:bd:10:92:3b:40:74:d0:1d:48:f1:ff:
         f8:b2:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:54 2026 by rpki-client