Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3132382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          CwBhYa3hr3Obkbo/6+BoyCdfsytJhyFOQ4D0rfZTaws=
Subject key identifier:   6B:B5:12:7D:BF:2C:4D:E6:3F:24:82:D3:6C:94:69:0B:07:65:27:81
Certificate issuer:       /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial:       555FD3E4DD19413F9ABD72CD8B62B81A1D80E5E1
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132382e302f32342d3234203d3e203238323338.roa
Signing time:             Sun 05 Apr 2026 02:34:18 +0000
ROA not before:           Sun 05 Apr 2026 02:29:18 +0000
ROA not after:            Sun 04 Apr 2027 02:34:18 +0000
asID:                     28238
IP address blocks:        187.0.128.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5f:d3:e4:dd:19:41:3f:9a:bd:72:cd:8b:62:b8:1a:1d:80:e5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
        Validity
            Not Before: Apr  5 02:29:18 2026 GMT
            Not After : Apr  4 02:34:18 2027 GMT
        Subject: CN=6BB5127DBF2C4DE63F2482D36C94690B07652781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:48:9a:75:a0:8c:54:40:7e:40:5d:62:03:
                    bd:dd:19:fb:f8:06:09:34:88:0e:a7:40:dd:d6:7a:
                    1b:c3:10:85:f8:ba:0c:42:ef:d5:08:c0:b7:83:88:
                    ff:2d:85:09:38:0c:a2:df:86:70:e6:c2:1e:61:36:
                    f3:ea:af:4f:f6:48:e9:0f:32:15:7c:13:26:5a:95:
                    7c:f6:a3:b7:56:2b:cf:c4:4d:20:59:90:75:cb:7b:
                    b0:71:c4:2f:35:25:66:cb:99:29:ce:a1:d8:f4:5b:
                    db:f8:b7:12:1d:87:a5:aa:c3:14:a8:da:cd:e9:a2:
                    64:d0:d6:1d:21:56:07:04:b6:e9:04:4c:c8:22:54:
                    13:29:d8:b0:56:cd:a2:66:fe:20:54:2b:7c:63:36:
                    00:25:bc:f7:d9:03:5c:d0:79:96:2f:c5:e8:28:33:
                    cd:a4:54:b5:bb:d0:3f:fb:d0:51:20:b5:a6:4a:95:
                    29:a3:94:77:94:66:8b:2e:ca:14:cf:b3:30:dd:35:
                    de:e8:e5:53:31:bb:6a:e2:13:02:9a:c4:5e:6c:95:
                    6d:cc:65:29:19:54:94:b0:f0:2f:61:8c:67:d3:9c:
                    34:1d:2c:e0:e6:de:07:cf:1a:69:dc:92:b6:c0:02:
                    b8:7f:eb:b9:2e:77:98:02:73:02:48:2a:4b:74:73:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B5:12:7D:BF:2C:4D:E6:3F:24:82:D3:6C:94:69:0B:07:65:27:81
            X509v3 Authority Key Identifier:
                keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132382e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:71:8f:79:63:23:d9:30:36:02:cb:5e:fb:1a:7e:f4:88:
         98:5c:5a:64:f6:db:38:37:4d:74:e0:70:bf:18:a0:c5:d0:16:
         75:09:0c:ae:cb:c9:dd:d1:58:7e:93:48:ad:82:f6:50:bc:cc:
         fb:92:0b:eb:4f:c3:75:04:0c:c3:f5:75:18:87:48:50:9b:1c:
         1c:59:23:43:58:ac:29:e5:ae:89:a6:cc:f6:80:d8:1b:eb:92:
         90:ed:8d:3d:27:6e:2b:0c:24:f8:63:e9:49:94:f3:25:66:78:
         72:d1:c2:e4:53:3d:8b:28:52:64:4b:c3:7e:24:44:02:72:37:
         8b:4a:1f:e4:9e:d9:4f:b2:9c:cb:a8:a9:a7:26:fb:11:85:38:
         02:c0:b1:8f:ab:a2:9a:0b:d2:29:50:62:42:68:2c:34:2e:e5:
         b6:38:b8:d5:9d:35:d7:8f:70:e4:88:32:03:63:41:d2:c8:ab:
         19:f0:c4:e4:62:97:24:aa:9a:c3:12:3b:f2:bf:0a:ef:8d:bf:
         09:6d:77:3f:ba:12:18:3e:67:6f:a4:b5:17:bf:0c:87:94:de:
         c6:27:b8:a5:95:d8:38:d0:78:b3:12:95:e7:53:7e:98:9c:44:
         5e:29:de:d4:38:39:c9:bc:d1:40:d3:1f:6c:43:4d:34:0e:0c:
         3e:63:0c:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVV/T5N0ZQT+avXLNi2K4Gh2A5eEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzNkNDNzlDODM2NkE4NjY0QTRFMzFBOTY1QkFFMURB
QTA5NDA0NTAeFw0yNjA0MDUwMjI5MThaFw0yNzA0MDQwMjM0MThaMDMxMTAvBgNV
BAMTKDZCQjUxMjdEQkYyQzRERTYzRjI0ODJEMzZDOTQ2OTBCMDc2NTI3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfUiadaCMVEB+QF1iA73dGfv4
Bgk0iA6nQN3WehvDEIX4ugxC79UIwLeDiP8thQk4DKLfhnDmwh5hNvPqr0/2SOkP
MhV8EyZalXz2o7dWK8/ETSBZkHXLe7BxxC81JWbLmSnOodj0W9v4txIdh6WqwxSo
2s3pomTQ1h0hVgcEtukETMgiVBMp2LBWzaJm/iBUK3xjNgAlvPfZA1zQeZYvxego
M82kVLW70D/70FEgtaZKlSmjlHeUZosuyhTPszDdNd7o5VMxu2riEwKaxF5slW3M
ZSkZVJSw8C9hjGfTnDQdLODm3gfPGmnckrbAArh/67kud5gCcwJIKkt0c/GFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUa7USfb8sTeY/JILTbJRpCwdlJ4EwHwYDVR0j
BBgwFoAUrzbMecg2aoZkpOMalluuHaoJQEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZMZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9O
NVkvMy9BRjM2Q0M3OUM4MzY2QTg2NjRBNEUzMUE5NjVCQUUxREFBMDk0MDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMzZDQzc5QzgzNjZBODY2
NEE0RTMxQTk2NUJBRTFEQUEwOTQwNDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWTGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzMv
MzEzODM3MmUzMDJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsAgDANBgkqhkiG9w0BAQsFAAOCAQEAW1dxj3ljI9kw
NgLLXvsafvSImFxaZPbbODdNdOBwvxigxdAWdQkMrsvJ3dFYfpNIrYL2ULzM+5IL
60/DdQQMw/V1GIdIUJscHFkjQ1isKeWuiabM9oDYG+uSkO2NPSduKwwk+GPpSZTz
JWZ4ctHC5FM9iyhSZEvDfiREAnI3i0of5J7ZT7Kcy6ippyb7EYU4AsCxj6uimgvS
KVBiQmgsNC7ltji41Z01149w5IgyA2NB0sirGfDE5GKXJKqawxI78r8K742/CW13
P7oSGD5nb6S1F78Mh5Texie4pZXYONB4sxKV51N+mJxEXine1Dg5ybzRQNMfbENN
NA4MPmMMZA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:22:01 2026 by rpki-client