Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3233203d3e20323731353030.roa
File:                     3138312e3233332e3137382e302f32332d3233203d3e20323731353030.roa (raw, json)
Hash identifier:          m00VgSdxORFdyTQPH715gBomfa7hqAzp12lA7LmkAuE=
Subject key identifier:   F9:4E:29:0D:18:E9:B5:FE:44:C5:53:61:D2:8E:70:EF:AA:9E:F5:65
Certificate issuer:       /CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
Certificate serial:       086745DCBCDA04B50B235121B72BAFE4FED989AE
Authority key identifier: 72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3233203d3e20323731353030.roa
Signing time:             Tue 24 Feb 2026 23:22:32 +0000
ROA not before:           Tue 24 Feb 2026 23:17:32 +0000
ROA not after:            Tue 23 Feb 2027 23:22:32 +0000
asID:                     271500
IP address blocks:        181.233.178.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:67:45:dc:bc:da:04:b5:0b:23:51:21:b7:2b:af:e4:fe:d9:89:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
        Validity
            Not Before: Feb 24 23:17:32 2026 GMT
            Not After : Feb 23 23:22:32 2027 GMT
        Subject: CN=F94E290D18E9B5FE44C55361D28E70EFAA9EF565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:07:c1:f8:64:eb:76:7c:dd:8c:43:b3:5b:
                    ef:3e:97:72:f7:9d:a0:31:ab:31:f9:0b:0d:a3:b2:
                    5b:97:98:c8:44:af:8d:93:f9:55:12:51:67:1f:0b:
                    34:af:f4:11:5c:83:38:11:cd:46:de:c0:f0:3b:26:
                    a5:7a:98:6c:50:bc:24:8c:3a:83:3e:5d:b9:8e:6f:
                    1c:41:ce:c7:57:d2:b6:e3:85:36:aa:27:23:c7:a5:
                    24:47:47:08:35:39:b0:c7:da:26:25:39:da:e9:ef:
                    de:a4:b9:f0:a9:1b:99:b3:55:f2:e6:ac:bc:fa:1f:
                    ec:84:86:cd:16:a0:ac:87:f4:6e:35:39:77:1d:e4:
                    01:55:a7:ea:a5:d5:a8:3e:73:28:00:0e:34:e5:eb:
                    08:a6:46:a4:e6:da:cc:31:fa:17:fd:12:64:d2:b4:
                    16:43:13:5d:5f:25:2e:05:32:8e:80:66:a9:bc:bc:
                    b4:a6:90:e9:19:b4:7e:8f:54:3f:ab:11:3c:67:9b:
                    92:cd:8b:28:17:8e:7d:cb:31:94:e0:9c:3c:29:b4:
                    42:59:b5:02:74:af:51:cf:7b:e7:1e:1a:33:2f:39:
                    e2:a1:11:e3:36:0d:bb:67:5d:f9:6b:2d:31:e1:34:
                    ce:74:97:a3:98:9f:bd:8f:02:cb:e2:f3:2d:b5:f7:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:29:0D:18:E9:B5:FE:44:C5:53:61:D2:8E:70:EF:AA:9E:F5:65
            X509v3 Authority Key Identifier:
                keyid:72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3233203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:d7:b7:6c:c7:21:37:a0:60:1c:e0:fb:ce:59:dd:54:55:
         55:70:7f:08:83:18:90:24:df:dd:5a:58:a1:0c:9c:12:ee:bf:
         85:7f:48:44:5a:c0:31:9f:c7:d5:91:ec:ad:7b:58:f1:be:af:
         b2:bd:5e:84:cc:d4:07:c0:be:b0:e5:f7:af:b3:b2:6a:3d:12:
         27:2f:9f:ec:f9:49:f8:d1:c7:d2:63:a3:a1:61:18:6d:ef:0c:
         9a:fa:c5:b5:60:10:25:a2:5c:d6:b3:b1:3b:72:29:e6:ac:71:
         cd:47:f0:25:36:2d:2b:18:c1:84:06:7e:ba:5f:0b:b0:de:81:
         ea:fa:cb:a7:4f:b1:bb:3b:c7:a5:b8:9d:e5:f4:70:ef:4a:95:
         4e:ac:f6:78:e5:15:da:38:99:d3:eb:3c:8f:66:5e:df:ee:91:
         94:36:65:4c:9c:ed:c9:1c:92:d2:62:22:3b:98:6a:79:3d:89:
         49:79:68:ab:54:c8:67:49:59:58:2a:17:d5:24:82:ad:42:3d:
         72:3b:c3:60:b3:33:a1:55:5e:35:02:a4:dd:65:b6:5d:46:a9:
         fe:00:52:dd:9f:fe:07:c6:5f:d0:3b:38:56:35:44:f6:26:56:
         eb:d4:f3:62:fa:93:2c:d3:73:2a:88:66:48:6e:25:92:d8:9f:
         30:5f:a8:83
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCGdF3LzaBLULI1Ehtyuv5P7Zia4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI1MEUyN0E3MzJCRDgyQkYwQkVBRURBRTBGMDlBRkM0
NTI5MkVBNzAeFw0yNjAyMjQyMzE3MzJaFw0yNzAyMjMyMzIyMzJaMDMxMTAvBgNV
BAMTKEY5NEUyOTBEMThFOUI1RkU0NEM1NTM2MUQyOEU3MEVGQUE5RUY1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnAfB+GTrdnzdjEOzW+8+l3L3
naAxqzH5Cw2jsluXmMhEr42T+VUSUWcfCzSv9BFcgzgRzUbewPA7JqV6mGxQvCSM
OoM+XbmObxxBzsdX0rbjhTaqJyPHpSRHRwg1ObDH2iYlOdrp796kufCpG5mzVfLm
rLz6H+yEhs0WoKyH9G41OXcd5AFVp+ql1ag+cygADjTl6wimRqTm2swx+hf9EmTS
tBZDE11fJS4FMo6AZqm8vLSmkOkZtH6PVD+rETxnm5LNiygXjn3LMZTgnDwptEJZ
tQJ0r1HPe+ceGjMvOeKhEeM2DbtnXflrLTHhNM50l6OYn72PAsvi8y2196cfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+U4pDRjptf5ExVNh0o5w76qe9WUwHwYDVR0j
BBgwFoAUclDienMr2Cvwvq7a4PCa/EUpLqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRBOGt5Mm5oOHB0YXNyVW5rcGlNQUF6MUs2ZHd5TTJmNno3czZXeHdK
TDYvMC83MjUwRTI3QTczMkJEODJCRjBCRUFFREFFMEYwOUFGQzQ1MjkyRUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyNTBFMjdBNzMyQkQ4MkJG
MEJFQUVEQUUwRjA5QUZDNDUyOTJFQTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0QThreTJuaDhwdGFzclVua3BpTUFBejFLNmR3eU0yZjZ6N3M2V3h3Skw2LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzczODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXpsjANBgkqhkiG9w0BAQsFAAOCAQEAhm3X
t2zHITegYBzg+85Z3VRVVXB/CIMYkCTf3VpYoQycEu6/hX9IRFrAMZ/H1ZHsrXtY
8b6vsr1ehMzUB8C+sOX3r7Oyaj0SJy+f7PlJ+NHH0mOjoWEYbe8MmvrFtWAQJaJc
1rOxO3Ip5qxxzUfwJTYtKxjBhAZ+ul8LsN6B6vrLp0+xuzvHpbid5fRw70qVTqz2
eOUV2jiZ0+s8j2Ze3+6RlDZlTJztyRyS0mIiO5hqeT2JSXloq1TIZ0lZWCoX1SSC
rUI9cjvDYLMzoVVeNQKk3WW2XUap/gBS3Z/+B8Zf0Ds4VjVE9iZW69TzYvqTLNNz
KohmSG4lktifMF+ogw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:46 2026 by rpki-client