Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234392e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3234392e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          /cXutBChHxWwsegb7HBLcOWLif5BZ3KyCF0QEV5qFAY=
Subject key identifier:   1E:20:3A:89:41:ED:22:2E:75:EF:5E:4C:8B:09:47:92:16:A9:ED:BF
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       031302F20CEB46550F10946D92FEDE8E7E733EC1
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234392e302f32342d3234203d3e203532353536.roa
Signing time:             Tue 19 May 2026 13:55:14 +0000
ROA not before:           Tue 19 May 2026 13:50:14 +0000
ROA not after:            Tue 18 May 2027 13:55:14 +0000
asID:                     52556
IP address blocks:        177.85.249.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:13:02:f2:0c:eb:46:55:0f:10:94:6d:92:fe:de:8e:7e:73:3e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 19 13:50:14 2026 GMT
            Not After : May 18 13:55:14 2027 GMT
        Subject: CN=1E203A8941ED222E75EF5E4C8B09479216A9EDBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:0c:1b:1b:54:a5:51:5b:8d:e8:bd:22:fb:
                    8f:46:c3:55:a9:3c:47:ba:10:8a:18:1d:99:b8:a4:
                    20:20:12:58:80:43:8a:a8:6e:a9:d6:ed:e3:28:66:
                    75:7e:fa:70:a4:39:18:59:2b:07:0f:cf:c0:5f:97:
                    84:34:e1:ae:9c:59:1d:51:ee:45:a6:a0:6b:63:92:
                    ae:d8:00:c0:61:df:68:52:0d:12:c1:14:88:19:28:
                    c4:cb:d4:5d:fd:e4:57:d2:61:53:ee:8c:53:a4:6d:
                    e9:37:34:d8:7b:2f:8d:56:61:1c:01:97:ff:0f:49:
                    7b:35:7e:8e:2f:fa:48:21:2a:ec:16:43:88:f0:ee:
                    08:d7:60:97:ce:38:95:9b:4c:2e:db:3f:ec:5b:1e:
                    29:36:85:58:0e:b9:9f:4d:82:dc:25:26:a2:cc:1e:
                    82:a5:c3:e6:fd:a8:c1:a2:0d:31:55:33:68:56:86:
                    f9:d4:19:93:92:de:7e:ed:f7:7d:2e:99:a2:4b:44:
                    da:a2:fd:17:2a:72:8d:d1:62:c4:f0:6f:2b:30:d2:
                    53:4c:04:76:b9:0e:c6:7b:36:91:b8:d7:bb:fa:31:
                    09:6d:c7:a3:82:eb:1c:f5:f6:06:fd:8f:a5:2a:c7:
                    6a:6f:2c:37:5f:10:da:39:0c:d2:7f:da:86:b9:0b:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:3A:89:41:ED:22:2E:75:EF:5E:4C:8B:09:47:92:16:A9:ED:BF
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234392e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:08:62:27:f1:b0:2a:3d:7e:5d:60:31:9e:20:a3:13:6a:
         00:c3:e0:af:a0:30:95:35:37:63:a1:7f:8c:38:b1:a0:f9:b0:
         51:7f:d6:20:f3:c5:47:9a:78:01:a9:ac:a7:60:07:9c:62:ae:
         fc:12:f7:21:89:68:ea:e8:c6:cd:b7:fd:db:a8:31:be:5a:ba:
         af:cc:d9:c8:67:12:74:b4:11:81:c5:6c:37:14:f4:6a:c0:c7:
         16:60:21:d6:c5:c2:53:e3:cf:f6:15:94:28:22:0b:a3:94:f9:
         7a:52:09:8e:16:f9:4d:92:eb:9d:b8:b7:a4:7c:1a:21:ae:f1:
         8a:c2:2c:b8:98:a7:49:7d:ec:39:e6:e9:36:f4:9f:4e:82:ae:
         69:c1:8f:33:93:59:e7:0f:ad:13:3e:ef:fd:d6:d4:79:c7:27:
         d5:b1:e8:9d:9f:29:61:a5:05:d4:9a:e3:c3:64:b2:58:11:e8:
         4c:70:3b:dd:09:1c:87:75:63:b4:7f:cf:cd:e7:49:b1:b6:11:
         3c:48:3e:bc:f1:26:dd:1e:fa:01:64:2c:5f:07:2c:33:73:6a:
         17:4b:c1:8f:d8:0a:f5:9d:c9:63:86:39:b2:8f:6d:10:0d:f2:
         a3:94:8b:41:c9:35:b7:57:24:10:61:2d:f0:01:bb:2a:c5:45:
         10:63:9c:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAxMC8gzrRlUPEJRtkv7ejn5zPsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxRjJBREY5MkY4NjMyNTQ5QTlDRDE0MzAyMEYzQjk1
NzJBQ0E1MDAeFw0yNjA1MTkxMzUwMTRaFw0yNzA1MTgxMzU1MTRaMDMxMTAvBgNV
BAMTKDFFMjAzQTg5NDFFRDIyMkU3NUVGNUU0QzhCMDk0NzkyMTZBOUVEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7iQwbG1SlUVuN6L0i+49Gw1Wp
PEe6EIoYHZm4pCAgEliAQ4qobqnW7eMoZnV++nCkORhZKwcPz8Bfl4Q04a6cWR1R
7kWmoGtjkq7YAMBh32hSDRLBFIgZKMTL1F395FfSYVPujFOkbek3NNh7L41WYRwB
l/8PSXs1fo4v+kghKuwWQ4jw7gjXYJfOOJWbTC7bP+xbHik2hVgOuZ9NgtwlJqLM
HoKlw+b9qMGiDTFVM2hWhvnUGZOS3n7t930umaJLRNqi/Rcqco3RYsTwbysw0lNM
BHa5DsZ7NpG417v6MQltx6OC6xz19gb9j6Uqx2pvLDdfENo5DNJ/2oa5Cy07AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHiA6iUHtIi51715MiwlHkhap7b8wHwYDVR0j
BBgwFoAU7x8q35L4YyVJqc0UMCDzuVcqylAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9FRjFGMkFERjkyRjg2MzI1NDlBOUNEMTQzMDIwRjNCOTU3MkFDQTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMUYyQURGOTJGODYzMjU0
OUE5Q0QxNDMwMjBGM0I5NTcyQUNBNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVX5MA0GCSqGSIb3DQEBCwUAA4IBAQB2+QhiJ/Gw
Kj1+XWAxniCjE2oAw+CvoDCVNTdjoX+MOLGg+bBRf9Yg88VHmngBqaynYAecYq78
EvchiWjq6MbNt/3bqDG+WrqvzNnIZxJ0tBGBxWw3FPRqwMcWYCHWxcJT48/2FZQo
IgujlPl6UgmOFvlNkuuduLekfBohrvGKwiy4mKdJfew55uk29J9Ogq5pwY8zk1nn
D60TPu/91tR5xyfVseidnylhpQXUmuPDZLJYEehMcDvdCRyHdWO0f8/N50mxthE8
SD688SbdHvoBZCxfBywzc2oXS8GP2Ar1ncljhjmyj20QDfKjlItByTW3VyQQYS3w
AbsqxUUQY5xl
-----END CERTIFICATE-----
Generated at Sun May 24 19:23:17 2026 by rpki-client