Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa
File:                     3137372e38352e3235302e302f32332d3233203d3e203532353536.roa (raw, json)
Hash identifier:          9RHtNLsvlil6nEfoIhF/P8sqkXV5nmg+kn7mQO9cJmc=
Subject key identifier:   9E:B8:B5:D6:FD:6C:8F:79:C2:12:C4:63:97:49:1F:9C:D3:BC:DF:7C
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       17D7532FFD6D828EC94EB29A5BCA76388785C04D
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa
Signing time:             Thu 14 May 2026 21:27:33 +0000
ROA not before:           Thu 14 May 2026 21:22:33 +0000
ROA not after:            Thu 13 May 2027 21:27:33 +0000
asID:                     52556
IP address blocks:        177.85.250.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:53:2f:fd:6d:82:8e:c9:4e:b2:9a:5b:ca:76:38:87:85:c0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 14 21:22:33 2026 GMT
            Not After : May 13 21:27:33 2027 GMT
        Subject: CN=9EB8B5D6FD6C8F79C212C46397491F9CD3BCDF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:26:09:10:d9:15:f2:53:08:3e:a0:4e:7b:
                    6a:32:52:50:58:22:1b:55:2d:5c:7e:96:58:36:64:
                    66:62:ee:55:43:59:01:b2:07:47:8b:e4:e6:56:65:
                    90:cd:cd:2d:54:fd:26:c8:05:4e:3f:fc:17:80:5c:
                    79:4c:72:4e:99:f1:72:bb:d9:13:02:cb:45:4b:20:
                    97:a7:35:71:58:74:15:ae:d3:78:50:60:4d:66:9c:
                    e3:80:18:40:ae:fc:e1:05:1e:16:4c:30:1d:07:d3:
                    24:ee:14:dd:9f:38:b7:76:ae:65:8c:d0:4a:c2:a9:
                    6e:31:5c:58:3f:8c:b9:ae:ca:bb:b6:b0:a0:7d:e1:
                    37:35:00:b9:da:f4:75:a9:c1:78:be:90:05:e9:55:
                    7c:eb:20:a8:00:f1:28:6a:d9:85:ed:cd:d9:02:63:
                    26:6a:09:34:06:2c:66:58:22:7b:71:03:af:3a:56:
                    00:31:79:07:55:74:9b:b8:1b:43:33:2b:60:ab:73:
                    5d:5a:e0:35:7d:65:54:a5:b2:06:90:02:f3:76:dc:
                    2d:44:02:fd:2d:97:d6:66:8f:28:c3:bf:57:ca:ed:
                    8e:4a:cd:96:c0:c4:53:da:b5:ba:ce:34:92:c3:9f:
                    af:7b:71:77:7f:6e:ca:a2:b7:53:b2:f6:51:32:1f:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B8:B5:D6:FD:6C:8F:79:C2:12:C4:63:97:49:1F:9C:D3:BC:DF:7C
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:f4:ce:1f:9f:99:44:39:95:e1:61:b8:26:40:d6:1c:b9:55:
         f9:71:50:c9:4f:be:3e:50:0e:af:e6:84:a3:ec:d5:a4:60:d9:
         e3:62:e7:2f:60:63:5c:de:5e:7b:31:53:93:e1:43:ea:40:e4:
         76:1f:a8:2b:7b:3a:86:d7:e6:80:a2:f5:27:9c:34:da:04:72:
         63:20:c2:6d:06:7f:dc:12:dd:16:d9:68:6a:00:47:a8:1a:93:
         f7:5d:6f:c1:8d:47:04:cc:55:58:3b:50:22:bb:d3:ec:9d:60:
         dc:b8:9a:19:2c:2d:b7:b9:a3:c4:37:69:21:bc:c9:b3:3a:88:
         1c:c8:db:45:f2:cb:29:4e:c6:a7:6e:ce:22:e4:ec:b7:d6:6e:
         7e:7c:59:90:6f:c8:3c:87:c9:bd:96:43:11:b1:9b:92:3a:eb:
         a3:76:1d:ea:8d:8f:36:f4:fd:19:d1:a0:2b:5c:50:ac:b5:84:
         57:5f:d5:ef:2f:5d:72:41:23:af:b5:05:cd:21:73:6b:fc:a7:
         41:86:32:6a:06:ff:ac:14:33:05:f5:ff:85:2a:d2:21:f2:3f:
         21:4a:8e:de:7d:82:3e:4f:af:75:2b:bf:b3:08:89:26:1b:60:
         04:66:a8:ef:7b:93:a1:92:54:77:8b:fd:6f:20:04:49:0a:b3:
         8c:1b:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:23:15 2026 by rpki-client