Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
File:                     3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa (raw, json)
Hash identifier:          dM5U45ljDDHT5VB+UE/AUpArf/RZTjG8gGzdd7YVi/4=
Subject key identifier:   DE:D2:68:C1:22:81:AE:74:63:F4:14:59:75:37:E9:73:80:E6:F7:82
Certificate issuer:       /CN=DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9
Certificate serial:       04493DF1F9BED22836123142C02C35185EE4ABD0
Authority key identifier: DC:CF:B9:AD:AF:DC:53:EF:E4:8C:DE:3B:EF:0C:EE:DC:6B:35:6D:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa
Signing time:             Tue 24 Feb 2026 18:10:09 +0000
ROA not before:           Tue 24 Feb 2026 18:05:09 +0000
ROA not after:            Tue 23 Feb 2027 18:10:09 +0000
asID:                     270797
IP address blocks:        177.131.140.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:49:3d:f1:f9:be:d2:28:36:12:31:42:c0:2c:35:18:5e:e4:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9
        Validity
            Not Before: Feb 24 18:05:09 2026 GMT
            Not After : Feb 23 18:10:09 2027 GMT
        Subject: CN=DED268C12281AE7463F414597537E97380E6F782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:12:70:41:8e:19:4a:34:9f:73:30:91:d4:d9:
                    2c:72:f5:09:df:92:22:44:da:ea:41:9e:a6:3a:da:
                    db:8f:df:32:72:ca:4c:a1:40:1b:8f:fd:fe:51:1c:
                    72:96:12:ab:cf:31:cc:30:41:d9:5f:42:73:64:f9:
                    51:46:04:05:0a:c6:f0:2d:d7:c7:ae:4f:e7:61:1a:
                    3c:32:54:84:f2:e9:02:43:16:52:a4:7c:10:01:5d:
                    82:2c:eb:6a:28:08:09:c5:de:83:3c:ac:d0:03:d0:
                    be:67:4a:b2:46:85:5b:39:79:a1:58:f6:a4:07:9e:
                    59:1d:50:c8:a5:46:b1:8c:cc:e9:a4:90:17:d2:76:
                    9a:ad:5d:dc:aa:68:79:03:66:4b:e2:4b:11:2d:a7:
                    0e:fe:f6:7e:aa:e4:2f:0f:ff:1a:88:b0:29:34:c8:
                    bb:b7:9d:87:47:c7:30:7c:19:50:58:b1:d6:24:c9:
                    6c:c6:49:41:7e:c4:00:b0:a5:1f:83:ea:96:41:47:
                    e6:b5:ed:ec:4f:d6:88:49:dd:1d:dc:43:c8:f2:5c:
                    61:e5:de:fa:35:b6:5b:bb:3d:fc:17:85:56:a1:da:
                    b6:76:9f:31:41:31:e0:1a:df:94:54:25:4f:60:92:
                    ff:64:a0:a2:fd:84:53:75:2f:17:08:2c:97:fd:77:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D2:68:C1:22:81:AE:74:63:F4:14:59:75:37:E9:73:80:E6:F7:82
            X509v3 Authority Key Identifier:
                keyid:DC:CF:B9:AD:AF:DC:53:EF:E4:8C:DE:3B:EF:0C:EE:DC:6B:35:6D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCCFB9ADAFDC53EFE48CDE3BEF0CEEDC6B356DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/3/3137372e3133312e3134302e302f32322d3332203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:37:45:0c:71:6d:36:46:f2:74:f8:c9:fc:2e:50:45:f7:f3:
         7f:79:b4:c5:61:49:a5:95:ef:a2:72:af:67:31:10:40:4e:d0:
         34:f6:4e:96:97:30:4d:f9:7e:c2:0e:b8:6e:84:77:e1:51:fc:
         3e:e7:48:05:a5:a1:13:5c:36:35:3f:fd:6c:43:be:30:40:bf:
         ed:97:96:5d:29:88:de:5d:ee:ab:e4:75:9a:db:7a:69:10:dd:
         48:4a:88:c3:99:86:b7:06:0a:0d:ac:7e:38:7e:4f:96:f6:0f:
         96:af:49:52:33:99:9f:4c:c9:89:3c:d3:b8:fb:3c:ed:cf:fc:
         91:6b:bb:94:bc:71:7a:7a:84:64:d2:3a:7f:2a:9a:04:ba:02:
         07:59:95:76:bb:9b:7d:ed:fb:c2:13:a3:12:c5:b4:9b:81:9f:
         ac:2a:39:93:d2:e3:fa:40:a3:bc:b1:1f:bc:db:37:64:1d:c3:
         93:04:d0:e5:6e:51:a3:ed:19:e0:34:70:62:33:ef:b7:62:34:
         e4:83:c1:a0:fd:2f:a5:6f:9b:05:36:cc:1e:e4:2d:d0:88:a7:
         c3:e3:11:5b:62:5b:32:b2:b3:48:b2:e9:a3:c4:2b:a8:49:ea:
         f9:9b:09:24:c7:5e:3c:c3:d7:bf:67:e6:8e:92:f3:47:ba:d9:
         4a:87:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:23:24 2026 by rpki-client