Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
File:                     34352e3136312e39392e302f32342d3234203d3e20323638343633.roa (raw, json)
Hash identifier:          UbU0VTlwVof8NLMU3aqKRPjvcOprsgph7BNQS+ATnpw=
Subject key identifier:   80:97:89:10:1D:3D:BB:A1:F8:88:3B:F2:41:26:8E:46:D3:6D:CD:15
Certificate issuer:       /CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
Certificate serial:       2F240B5850A6EE494E1C650A11891FAA0BAEAE51
Authority key identifier: 1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa
Signing time:             Mon 07 Apr 2025 20:17:43 +0000
ROA not before:           Mon 07 Apr 2025 20:12:43 +0000
ROA not after:            Mon 06 Apr 2026 20:17:43 +0000
asID:                     268463
IP address blocks:        45.161.99.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:24:0b:58:50:a6:ee:49:4e:1c:65:0a:11:89:1f:aa:0b:ae:ae:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FC9DB5E54325C41705AC447D2BD2535CBFDEED9
        Validity
            Not Before: Apr  7 20:12:43 2025 GMT
            Not After : Apr  6 20:17:43 2026 GMT
        Subject: CN=809789101D3DBBA1F8883BF241268E46D36DCD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:2d:bc:45:82:36:78:0d:c7:83:b5:d1:41:
                    e3:d8:fd:05:2f:01:83:a0:c4:43:bc:de:f2:37:e6:
                    98:61:ef:15:79:6a:70:73:fe:0d:ea:23:f7:96:94:
                    7e:d1:af:1f:54:79:63:22:c1:6f:d5:33:db:4d:46:
                    7e:e8:cc:6b:f2:aa:a3:8a:d4:8f:13:93:0b:bd:88:
                    68:92:ab:75:88:40:e7:e7:f0:e7:22:fd:34:ec:28:
                    a3:7d:99:8a:b0:d2:7c:0f:ae:c2:6e:02:62:78:01:
                    88:75:29:07:dc:e8:a2:74:e5:3c:7b:d4:da:cd:4b:
                    b1:6b:dd:a3:8a:41:2f:67:91:c0:e1:33:02:38:51:
                    08:54:a1:1d:f9:ae:b0:e3:69:fb:a3:11:6c:ce:de:
                    e8:25:7d:7e:66:63:93:8b:35:98:33:8d:aa:19:aa:
                    89:16:b4:86:21:2d:5d:c2:60:1d:cd:f3:8e:2b:64:
                    8c:56:83:89:78:93:aa:2c:e8:1f:cf:82:8c:ed:bb:
                    52:b0:da:00:56:63:a2:c4:91:5e:91:89:3a:d3:aa:
                    b6:e3:6d:08:d2:79:82:82:eb:7a:11:d9:ab:d0:b0:
                    a1:bc:d3:e0:8e:ff:f9:8c:99:7f:67:2a:cb:02:25:
                    b5:75:53:ee:bc:66:6d:b0:00:57:a6:90:e0:53:aa:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:89:10:1D:3D:BB:A1:F8:88:3B:F2:41:26:8E:46:D3:6D:CD:15
            X509v3 Authority Key Identifier:
                keyid:1F:C9:DB:5E:54:32:5C:41:70:5A:C4:47:D2:BD:25:35:CB:FD:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FC9DB5E54325C41705AC447D2BD2535CBFDEED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/34352e3136312e39392e302f32342d3234203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:55:4e:08:b7:b0:5f:39:ab:8f:08:0d:60:a1:53:75:3b:d6:
         8b:e7:20:85:17:ab:f4:2f:11:0a:12:7c:c6:56:a3:03:06:08:
         fb:97:86:cd:03:52:f5:47:0b:f2:7b:66:d5:5a:83:36:78:5f:
         97:c4:1e:ec:7e:9f:58:f7:61:df:ee:8a:27:08:ae:74:a6:22:
         12:f9:17:f4:66:98:97:37:ec:4c:71:0e:5d:f3:25:60:55:ab:
         d3:33:48:81:95:07:53:6d:15:62:31:e9:7b:70:09:11:3f:7b:
         36:ad:84:88:4c:72:cd:6c:2c:46:c5:e5:4c:61:2c:43:3a:18:
         82:55:6d:e3:d8:0c:d8:67:7e:f2:4c:f6:e6:40:aa:58:af:59:
         d7:a9:b3:1d:df:fc:e9:56:c0:57:9d:d5:a6:ca:cf:12:8a:85:
         92:23:7a:3b:b6:b7:d9:46:27:ac:b8:e8:dc:66:d9:47:e8:0a:
         32:55:ee:fb:34:30:19:d7:83:f1:ef:84:65:9f:3a:42:1b:5e:
         fb:b4:1f:5b:0f:b7:82:66:01:47:89:41:d2:2b:d3:77:33:48:
         d7:42:6e:d7:0f:0b:19:3c:03:3c:cd:9b:72:d5:bf:a2:6d:93:
         2b:31:1d:4d:c8:8b:08:af:8d:1d:c7:f4:c9:97:3d:24:f7:b2:
         98:90:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:24:08 2025 by rpki-client