Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa
File:                     3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa (raw, json)
Hash identifier:          jczCTAnDptXDN/jTyF5vZHyUTpVOyeiS5qFHV2S2ax0=
Subject key identifier:   06:FB:67:AE:45:78:C8:76:36:47:79:A9:32:C4:98:D2:24:91:A6:83
Certificate issuer:       /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial:       745B720E1BB49ED21BD573C6BB00018181F2CD77
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa
Signing time:             Wed 26 Aug 2026 12:44:18 +0000
ROA not before:           Wed 26 Aug 2026 12:39:18 +0000
ROA not after:            Wed 25 Aug 2027 12:44:18 +0000
asID:                     264316
IP address blocks:        138.122.40.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5b:72:0e:1b:b4:9e:d2:1b:d5:73:c6:bb:00:01:81:81:f2:cd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
        Validity
            Not Before: Aug 26 12:39:18 2026 GMT
            Not After : Aug 25 12:44:18 2027 GMT
        Subject: CN=06FB67AE4578C876364779A932C498D22491A683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:52:a8:6c:ca:28:4e:10:ec:fe:3d:1c:fa:
                    48:f4:95:c2:a2:dc:c3:5a:d1:12:30:49:39:1a:e6:
                    52:dd:73:53:58:73:5e:61:74:30:dc:66:28:24:77:
                    0b:b2:59:d9:59:b1:75:92:4b:76:35:6f:b6:cc:cf:
                    13:17:ab:55:6a:e8:d4:fd:bb:32:69:2d:a3:c7:0a:
                    c7:91:b6:a7:a0:b1:ce:43:bb:50:e7:96:bd:e7:87:
                    ff:ae:b0:6e:a9:5a:88:4c:02:e1:48:5c:f4:1c:7c:
                    2e:9d:2f:f6:29:3c:1b:73:e8:73:d5:4b:b7:56:23:
                    b1:88:31:f1:fa:8d:ae:92:b5:ca:d8:3b:e9:a5:9d:
                    47:78:bd:0b:37:d7:7e:e1:86:98:19:5c:7f:30:40:
                    f3:13:a8:e0:f0:ef:be:72:bf:4f:ce:9e:3b:6e:cc:
                    6e:19:ff:d4:18:5d:5f:32:ee:ad:55:d7:47:19:b5:
                    f7:22:4b:df:80:a2:fe:f0:ff:c9:97:2c:b1:5d:90:
                    bc:76:46:76:cc:64:9b:2f:53:b8:57:c7:59:99:c3:
                    fb:d4:ac:0b:2a:c5:f9:68:92:12:9d:39:73:1e:0f:
                    3f:bb:24:db:f3:88:36:69:f2:bf:8f:ce:4d:46:d5:
                    d0:3a:33:49:be:64:e6:42:4b:79:44:39:02:d0:c9:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:67:AE:45:78:C8:76:36:47:79:A9:32:C4:98:D2:24:91:A6:83
            X509v3 Authority Key Identifier:
                keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3133382e3132322e34302e302f32322d3234203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:e9:67:48:22:ce:04:a5:38:a2:63:c0:1b:37:11:79:8c:80:
         96:db:60:62:e9:fc:21:4f:ac:bb:53:c0:75:99:dd:7e:20:d2:
         2b:9e:cb:5c:d3:e1:cf:ac:ac:14:58:0e:ee:fe:d3:5e:f7:01:
         ca:83:1c:e1:fc:55:47:dd:bf:5a:22:64:be:83:67:38:92:6e:
         da:c9:07:eb:1f:db:54:af:ec:4e:59:95:78:0c:e3:8f:55:7e:
         ee:94:10:4d:c2:24:5a:e5:35:4a:99:9e:94:a8:eb:c8:a5:8b:
         70:92:06:23:f3:92:ed:79:d5:fc:41:64:1d:c5:ed:53:ae:5f:
         97:1c:73:9c:c7:ad:8a:8c:4e:03:d5:79:cb:0f:a2:a9:6f:6f:
         6c:0b:9e:dc:20:83:0d:51:d9:c8:a2:a5:62:86:99:b2:de:76:
         31:a3:aa:05:cd:76:2f:f6:03:d3:fc:aa:ff:10:16:ed:d3:36:
         f4:f1:88:ca:01:88:41:e6:88:55:20:72:3e:65:e8:1a:9b:34:
         2e:5d:fe:f8:a7:f1:9e:94:1a:7e:74:96:8b:4d:d1:2f:ba:5b:
         09:34:d6:9e:40:f7:28:8f:c0:2f:2f:fe:84:5c:ce:9e:cc:20:
         4e:54:5f:63:08:8b:a3:45:ba:e2:f6:af:74:3c:1f:58:99:01:
         d1:2b:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----