Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231342e302f32342d3234203d3e20323730363533.roa
File:                     3139302e31312e3231342e302f32342d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          3rKfc1MAXYtmpM0DfZHyXHApv7dukVERCVygooQ3Y3s=
Subject key identifier:   C6:BD:CF:61:16:AB:A3:19:47:40:B9:5F:8F:D5:4C:0D:B9:90:F6:32
Certificate issuer:       /CN=BF2629329EC916C6B69DEB3940FC6E559D3718FD
Certificate serial:       0B7EA15A400FB681B900B06CEFF8FE521ECA8831
Authority key identifier: BF:26:29:32:9E:C9:16:C6:B6:9D:EB:39:40:FC:6E:55:9D:37:18:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2629329EC916C6B69DEB3940FC6E559D3718FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231342e302f32342d3234203d3e20323730363533.roa
Signing time:             Mon 11 May 2026 13:11:05 +0000
ROA not before:           Mon 11 May 2026 13:06:05 +0000
ROA not after:            Mon 10 May 2027 13:11:05 +0000
asID:                     270653
IP address blocks:        190.11.214.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7e:a1:5a:40:0f:b6:81:b9:00:b0:6c:ef:f8:fe:52:1e:ca:88:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF2629329EC916C6B69DEB3940FC6E559D3718FD
        Validity
            Not Before: May 11 13:06:05 2026 GMT
            Not After : May 10 13:11:05 2027 GMT
        Subject: CN=C6BDCF6116ABA3194740B95F8FD54C0DB990F632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:90:c1:40:95:0f:2d:8b:d0:b4:b0:b1:2c:
                    c1:13:90:29:34:e1:47:9d:71:c3:a7:92:b6:04:74:
                    31:a0:14:41:85:e0:ae:3e:4f:25:3a:54:14:18:bc:
                    3c:b0:2d:c5:a7:d4:65:06:88:2f:e8:d3:9c:1c:5a:
                    d9:cc:f9:7e:29:cc:96:40:9b:3a:c8:da:c8:a0:74:
                    91:99:67:3c:79:a6:d8:e2:2a:8c:c6:fb:f3:01:dd:
                    42:a8:2c:85:3d:5b:5a:a6:60:1b:ec:91:95:27:f8:
                    74:60:9d:5c:ad:fd:c4:c9:22:8e:9e:37:78:1f:fd:
                    3d:16:13:5e:61:eb:e2:77:d0:13:3d:98:bc:7a:e4:
                    a7:df:a9:83:bc:fc:fd:83:7c:bf:02:f7:4c:c1:96:
                    14:4d:90:f4:94:4f:95:83:06:3b:75:75:92:5d:eb:
                    6f:8a:b0:a3:39:93:85:51:82:23:c3:4b:f7:8c:62:
                    c4:c3:b2:9a:cf:08:25:4a:a3:ce:f3:c1:68:b3:64:
                    dc:c5:70:5d:ba:06:ab:88:cb:aa:a7:94:e4:f2:26:
                    20:bf:6a:53:cf:02:1e:37:5a:d9:1c:2d:cf:61:f4:
                    d9:ac:be:2d:ad:69:ac:f2:d0:3c:e2:c1:70:f4:6c:
                    d2:f8:fb:6d:ab:0b:f6:b4:eb:2d:fd:9c:b8:17:ec:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:CF:61:16:AB:A3:19:47:40:B9:5F:8F:D5:4C:0D:B9:90:F6:32
            X509v3 Authority Key Identifier:
                keyid:BF:26:29:32:9E:C9:16:C6:B6:9D:EB:39:40:FC:6E:55:9D:37:18:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/BF2629329EC916C6B69DEB3940FC6E559D3718FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF2629329EC916C6B69DEB3940FC6E559D3718FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231342e302f32342d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:87:ad:e3:b7:42:ee:19:dc:ac:09:5c:f0:17:c4:b8:43:
         cf:6b:81:64:1c:a4:24:22:01:00:4f:b9:cd:52:3e:6d:d9:dd:
         70:e4:e0:c1:e7:d2:23:ef:e3:d1:72:da:86:b1:5e:95:5b:ea:
         55:3d:5c:7d:d7:78:e0:a7:d1:74:40:9d:96:84:74:a5:90:af:
         59:7b:7f:3e:f9:30:2b:66:55:2f:43:81:cf:26:f4:70:51:de:
         73:20:72:06:10:c4:f0:f4:a9:78:65:de:04:c4:10:6d:97:71:
         b5:3e:74:98:4d:f4:14:e8:c8:7e:81:9a:37:c2:0e:f4:ba:19:
         52:0d:bf:57:b0:5d:61:e0:89:16:3a:cb:d5:2f:be:ff:5e:27:
         71:d5:70:75:4e:7d:de:32:58:74:4a:c1:35:b0:3a:69:2f:d3:
         2e:ba:25:e3:73:e8:28:c3:fb:9b:df:ff:19:1e:63:b8:3a:22:
         c2:29:8f:78:cf:68:6c:ba:7b:a5:b9:d7:05:f8:f2:bc:ba:dd:
         dd:af:7a:1a:91:c9:87:23:57:c3:35:71:9a:06:81:cc:3d:b9:
         7a:f1:eb:e2:51:71:20:33:fb:90:79:a6:5b:76:1a:bc:e1:ef:
         e2:49:ed:b1:72:2c:27:33:7a:33:07:e3:aa:93:ef:19:ce:9e:
         34:6b:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:12:52 2026 by rpki-client