Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
File:                     3139382e35382e382e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier:          8thP056/EQzO12reLFooLLIqFfBDGRJQBuy+2ZuBzE0=
Subject key identifier:   C4:3F:2E:43:3C:4E:9E:4F:99:B6:A4:CD:D1:51:91:97:C1:94:11:A6
Certificate issuer:       /CN=06F15D186076555DEA5244605F906111464A42B4
Certificate serial:       7448D50AD44BB5938885D9941FEF9C740EA7ABD9
Authority key identifier: 06:F1:5D:18:60:76:55:5D:EA:52:44:60:5F:90:61:11:46:4A:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F15D186076555DEA5244605F906111464A42B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
Signing time:             Fri 13 Jun 2025 16:31:16 +0000
ROA not before:           Fri 13 Jun 2025 16:26:16 +0000
ROA not after:            Fri 12 Jun 2026 16:31:16 +0000
asID:                     263256
IP address blocks:        198.58.8.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:d5:0a:d4:4b:b5:93:88:85:d9:94:1f:ef:9c:74:0e:a7:ab:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F15D186076555DEA5244605F906111464A42B4
        Validity
            Not Before: Jun 13 16:26:16 2025 GMT
            Not After : Jun 12 16:31:16 2026 GMT
        Subject: CN=C43F2E433C4E9E4F99B6A4CDD1519197C19411A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:36:53:45:ed:1e:0d:e4:ad:2b:37:62:02:
                    84:76:0f:d2:06:a1:8d:77:03:21:04:33:08:af:19:
                    5d:78:c2:8c:03:d1:56:3d:23:75:f6:28:05:6d:85:
                    6b:74:a1:97:c9:2e:53:dc:27:96:4b:90:13:be:53:
                    ea:6f:01:76:02:bb:f7:38:c7:96:c6:12:6b:8a:3d:
                    34:31:c4:00:d2:0b:d8:06:8e:fc:24:27:48:54:2b:
                    54:c9:d0:28:70:b7:d4:16:cb:c1:40:96:12:77:f5:
                    d9:fb:be:0e:ae:91:27:bc:bb:7d:fe:92:6e:47:65:
                    53:93:f3:cd:77:76:32:17:18:e2:4b:b3:2e:5b:43:
                    60:7c:cc:df:cc:df:b3:95:88:ad:99:1d:60:8c:e0:
                    d7:67:f0:52:69:c4:28:cc:37:86:d2:90:bf:5d:ff:
                    a6:e7:97:cd:44:fb:4c:56:45:9b:77:a6:95:fc:8f:
                    cc:b4:52:91:e2:ea:bb:a3:bf:4e:d1:70:b7:93:ff:
                    90:30:a3:e2:f0:6a:f5:10:ff:a2:f6:5b:75:77:0f:
                    0b:8b:45:4d:57:60:b2:9a:cd:28:a0:98:b6:51:13:
                    2d:71:e4:5a:17:f9:56:cd:8b:f5:f8:e4:72:9e:b5:
                    ac:06:2c:a0:25:df:c1:c9:3c:c3:27:14:ca:32:3c:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:2E:43:3C:4E:9E:4F:99:B6:A4:CD:D1:51:91:97:C1:94:11:A6
            X509v3 Authority Key Identifier:
                keyid:06:F1:5D:18:60:76:55:5D:EA:52:44:60:5F:90:61:11:46:4A:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/06F15D186076555DEA5244605F906111464A42B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F15D186076555DEA5244605F906111464A42B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:b6:96:eb:42:c8:88:c7:83:b2:43:59:08:3b:6a:14:e0:
         92:85:f9:7e:41:da:21:55:d5:91:01:1d:41:97:56:32:ca:30:
         2a:d1:a9:93:7c:d9:d4:c6:21:fd:21:82:2e:ff:cc:2a:e8:ff:
         cf:2b:8c:38:d0:9b:68:9f:b3:0b:0d:12:ff:2e:ce:c8:bf:3d:
         e2:ab:83:76:b7:c1:ae:21:37:bc:c6:7b:0e:9e:f4:6b:a5:b2:
         4d:70:f9:3f:2d:e3:78:44:c1:de:2b:88:8e:59:ab:6d:fe:ee:
         40:7c:ca:fa:4f:e3:d7:85:6b:78:97:50:fd:1c:e4:57:1c:e1:
         9d:d4:a6:75:34:73:a2:fe:e3:38:1b:8e:53:55:78:95:21:f8:
         e9:a1:27:10:bc:34:8f:b3:fc:bd:f8:7e:41:23:86:9b:00:89:
         14:f9:20:24:94:bf:d5:de:4b:c1:2a:ac:23:37:32:33:e6:52:
         9c:27:61:95:84:7a:7c:9b:81:8b:3c:0a:5a:3d:dd:10:c8:d4:
         3e:b0:84:bc:1a:f6:b0:45:07:8f:95:3c:41:28:c7:fb:ab:79:
         83:56:61:96:1b:ed:f4:eb:b9:df:14:e0:90:33:54:c6:2d:7c:
         93:3b:71:fd:42:b9:9b:5d:d1:dd:17:9b:b1:62:82:71:07:98:
         e4:ba:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:01:16 2025 by rpki-client