Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3234382e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          5cKeAu5b24ix6Zpo4piy72SGJRB4eFkRQMGguD/dJQU=
Subject key identifier:   58:DB:EF:ED:2D:D1:2B:3C:D8:7F:CA:85:0C:0A:1B:E3:54:A8:C4:D3
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       3E18011CF8F566CB983414BE887641D0D7C4309E
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 14 May 2026 21:27:33 +0000
ROA not before:           Thu 14 May 2026 21:22:33 +0000
ROA not after:            Thu 13 May 2027 21:27:33 +0000
asID:                     52556
IP address blocks:        177.85.248.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:01:1c:f8:f5:66:cb:98:34:14:be:88:76:41:d0:d7:c4:30:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 14 21:22:33 2026 GMT
            Not After : May 13 21:27:33 2027 GMT
        Subject: CN=58DBEFED2DD12B3CD87FCA850C0A1BE354A8C4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:1f:0e:02:66:43:ab:7f:69:ba:7f:3d:ea:
                    0d:34:87:91:13:68:be:6a:b1:9b:63:33:38:9b:fc:
                    4f:c0:d1:1b:88:18:15:18:83:29:05:48:66:d7:fc:
                    db:f6:1f:c7:ff:2b:4c:c7:dc:69:65:ba:b5:dd:01:
                    24:7f:74:35:27:aa:1e:81:1c:9e:16:df:cd:23:14:
                    27:29:f1:98:e4:0b:0f:6d:9a:2c:93:6e:96:b1:ed:
                    a6:cb:8f:00:cf:75:9d:3d:58:3a:8b:fc:09:14:b2:
                    8c:01:a1:c3:85:8b:13:63:ae:b4:ae:fd:c4:5e:63:
                    92:ec:cf:60:23:bb:c9:c8:c6:88:27:54:30:1e:6a:
                    a3:5a:07:a8:22:32:e7:33:67:18:16:6d:bb:a4:a1:
                    38:c8:3c:fc:2d:90:26:83:48:0e:98:71:56:45:a7:
                    25:87:8e:02:c2:8b:a7:62:06:f9:8d:3f:c9:af:4d:
                    14:1a:24:a2:7b:ab:db:3a:85:42:0c:d8:98:bc:09:
                    1a:24:9a:8d:11:1b:ed:b0:12:98:cc:ac:47:09:11:
                    7d:40:7b:ec:fa:cb:82:f7:4a:0c:43:2a:21:90:55:
                    9a:88:40:5b:27:a7:9f:8c:bb:d2:95:e3:1f:a0:28:
                    bd:ad:8e:c2:ce:32:f3:04:c3:c2:1c:86:91:e7:67:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:EF:ED:2D:D1:2B:3C:D8:7F:CA:85:0C:0A:1B:E3:54:A8:C4:D3
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:80:87:04:3d:8f:7d:6c:1e:de:f4:8e:51:a4:81:6e:49:e4:
         8f:cc:ca:9c:0c:a6:30:d0:4a:d1:00:f6:a4:34:32:ab:97:62:
         2c:9e:f9:e0:23:e7:f8:f4:b3:1b:5e:aa:f4:85:38:76:f3:00:
         4b:a3:5b:fe:9a:63:29:6e:c5:ae:6d:69:83:8e:61:5b:fa:bf:
         f2:7e:a8:88:eb:b4:01:27:d7:95:6e:bd:58:de:89:c9:b6:4b:
         db:9a:2f:62:69:c7:5d:70:78:d1:48:51:8d:0d:80:69:c0:86:
         e3:6a:34:67:cc:f8:dc:fa:28:a8:4a:df:e3:48:0a:ab:1d:90:
         33:db:bb:a0:ba:02:8b:f7:36:a8:38:9e:69:e0:80:98:81:0f:
         1f:1c:19:2a:8c:c5:8c:df:a7:1f:5a:69:54:bc:69:bb:6e:0b:
         40:0c:48:f5:18:81:c2:76:59:33:c7:c3:8c:15:89:92:7b:ca:
         f6:f7:ad:fb:ac:81:41:0e:63:0e:6c:8b:66:42:18:8d:67:3a:
         45:b0:5c:49:6f:32:96:cc:21:5c:13:3c:6e:e1:ed:9d:de:cd:
         dd:b5:d1:e3:04:56:24:79:5e:4b:64:4b:16:d9:6b:b6:f2:c0:
         f6:65:f1:dc:73:3d:72:04:51:28:84:b4:10:d9:ef:3d:39:25:
         7e:21:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:23:18 2026 by rpki-client