Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3234203d3e20323639313530.roa
File:                     34352e3138302e3232302e302f32322d3234203d3e20323639313530.roa (raw, json)
Hash identifier:          ojiaXDB1hp75ubFuPLhyiLq9PEe/Dd+2EKT6z2unNr0=
Subject key identifier:   67:0D:4A:09:AF:97:C4:51:B4:E2:4F:47:40:6A:D2:CA:CC:90:B6:92
Certificate issuer:       /CN=BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2
Certificate serial:       3A4C1D0C898A2436F82429ACD749FE5353E13FD6
Authority key identifier: BC:4C:7A:AB:61:69:4F:67:13:F5:EE:7C:9F:81:E1:4C:7A:24:C7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3234203d3e20323639313530.roa
Signing time:             Tue 02 Jun 2026 00:57:09 +0000
ROA not before:           Tue 02 Jun 2026 00:52:09 +0000
ROA not after:            Tue 01 Jun 2027 00:57:09 +0000
asID:                     269150
IP address blocks:        45.180.220.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4c:1d:0c:89:8a:24:36:f8:24:29:ac:d7:49:fe:53:53:e1:3f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2
        Validity
            Not Before: Jun  2 00:52:09 2026 GMT
            Not After : Jun  1 00:57:09 2027 GMT
        Subject: CN=670D4A09AF97C451B4E24F47406AD2CACC90B692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:ed:a2:9c:00:74:29:16:63:8c:9a:b6:93:
                    a4:8d:86:ff:6a:03:b1:d4:8d:57:7f:a8:95:97:7d:
                    0c:37:de:7c:55:ec:c3:3d:1b:cb:3d:8d:bd:9c:0c:
                    63:4a:ff:9f:87:09:a2:3c:92:e9:2b:87:52:7d:ad:
                    ff:40:52:f8:4c:dd:7c:1f:dc:f1:bf:fc:1c:ab:34:
                    d7:a6:15:f8:14:75:e3:96:60:5f:89:49:ea:8f:49:
                    46:3e:78:46:ca:59:6f:05:0d:7b:15:4f:b4:10:b7:
                    94:25:91:c1:af:dc:12:69:8b:86:0f:ac:24:db:06:
                    8a:79:13:d9:b8:fa:19:82:b1:c1:ae:3b:85:ea:f1:
                    d6:a1:10:24:a3:6d:78:93:96:86:ba:0c:0d:16:50:
                    36:fa:12:9c:13:37:3a:5f:14:fc:61:d3:93:48:66:
                    67:a0:33:b2:65:84:cd:4e:df:1e:e3:a4:65:95:8f:
                    d9:3b:af:db:99:dd:11:78:e7:95:0e:b4:c4:d7:40:
                    da:00:10:bc:06:12:7a:5d:fc:58:e8:3e:24:e2:d6:
                    5f:ba:44:62:75:24:06:00:d6:df:0a:4b:11:88:c2:
                    9d:de:4b:bd:1f:d9:a7:85:ee:e9:d9:93:ef:e6:1e:
                    f3:e0:fa:d0:6d:6e:24:71:cf:ce:c0:68:f8:74:20:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0D:4A:09:AF:97:C4:51:B4:E2:4F:47:40:6A:D2:CA:CC:90:B6:92
            X509v3 Authority Key Identifier:
                keyid:BC:4C:7A:AB:61:69:4F:67:13:F5:EE:7C:9F:81:E1:4C:7A:24:C7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/34352e3138302e3232302e302f32322d3234203d3e20323639313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:8c:ea:2a:8a:d7:e7:18:75:7f:f9:03:88:a6:92:1d:47:
         67:2b:13:9f:2c:fd:41:e5:c9:c2:49:79:1d:4c:d1:b9:02:25:
         20:d1:c4:f2:e0:de:fb:af:6b:7f:c0:5a:e6:64:80:c5:f3:37:
         24:6d:f8:55:de:a7:e2:aa:76:62:8b:93:e4:0c:a8:51:6b:66:
         0c:8d:ff:6b:26:8e:a1:7b:64:8a:68:d2:3f:ff:5c:ab:e5:09:
         c9:35:09:75:e2:07:99:ba:cf:31:61:19:7e:9a:f4:ee:9e:2f:
         6c:c1:da:78:4d:cd:34:4e:b1:9f:6e:80:8e:96:e3:4e:cf:8c:
         76:21:0c:16:b8:1b:59:ad:f7:29:06:ac:db:1f:d9:7c:df:39:
         8c:b9:94:b4:b8:d7:82:97:5a:4e:25:10:13:69:21:92:07:1c:
         93:4c:ec:33:c2:bf:f8:1f:5d:9e:2e:40:e3:5e:d8:98:4a:54:
         67:8d:54:8a:0e:0d:5b:bd:c8:49:9d:57:24:dc:a3:10:86:d9:
         40:04:bb:a7:7d:b2:8e:1a:b4:d7:ae:d4:11:2e:15:f3:dd:82:
         08:1f:4a:db:41:b7:00:31:9c:86:c6:9e:45:fb:b5:a1:d3:58:
         d6:77:fd:4a:d4:c2:df:79:87:89:10:ad:d9:32:58:30:b5:98:
         b8:48:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:16 2026 by rpki-client