Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235312e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235312e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          8W2EfuSzqIFs6nGyUDqWjLRgiDgo/1LnRUfG4KJiXqg=
Subject key identifier:   35:CB:95:FF:73:2F:70:91:D4:AB:B5:71:EB:69:F2:E4:1A:6C:02:DA
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       3EF81DB1D521C3322C5EFE9245D3F283AA5F7355
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235312e302f32342d3234203d3e203532353536.roa
Signing time:             Tue 19 May 2026 13:55:14 +0000
ROA not before:           Tue 19 May 2026 13:50:14 +0000
ROA not after:            Tue 18 May 2027 13:55:14 +0000
asID:                     52556
IP address blocks:        177.85.251.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f8:1d:b1:d5:21:c3:32:2c:5e:fe:92:45:d3:f2:83:aa:5f:73:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 19 13:50:14 2026 GMT
            Not After : May 18 13:55:14 2027 GMT
        Subject: CN=35CB95FF732F7091D4ABB571EB69F2E41A6C02DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:fb:07:d4:ba:26:22:e7:43:d2:52:4b:b3:
                    c9:68:df:0a:df:2f:bf:78:13:b8:9c:b3:b5:29:ba:
                    bc:83:67:f2:e6:32:40:44:b2:34:f4:15:43:d0:c6:
                    cf:33:17:2a:bb:7e:c2:68:56:33:4d:ac:81:17:61:
                    9a:6e:64:8b:05:bb:63:d6:ad:c9:16:a0:0b:e7:48:
                    04:06:a4:7a:43:2c:21:85:c5:aa:c4:73:08:1e:9c:
                    ef:5c:bf:ad:f6:46:52:e5:cb:28:d6:cd:6d:8a:21:
                    b5:57:11:76:3c:85:56:a2:c6:e0:f5:38:47:1d:e6:
                    b3:b9:a7:bd:a2:19:9b:34:eb:08:c6:b4:bf:d6:84:
                    76:7d:79:85:5b:ed:32:1f:a4:3b:05:e1:0a:0f:a5:
                    e1:9e:5c:ea:21:4e:af:2f:08:e4:85:d3:f0:d8:d2:
                    91:94:35:1a:a5:68:13:a2:c5:ff:8b:87:11:19:c2:
                    c0:1c:59:72:63:bb:f3:9e:80:4e:6f:7a:84:cf:33:
                    65:b1:ef:5e:71:ca:36:db:a6:3f:ef:cb:ee:3f:05:
                    cc:64:3d:e6:f7:44:31:4e:e1:45:f8:fc:f4:6d:86:
                    fc:cd:41:16:59:7f:b7:b4:b2:66:5b:fc:6a:0f:3f:
                    83:6c:91:74:7f:4b:75:4e:f1:a6:72:1b:cc:b0:12:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:95:FF:73:2F:70:91:D4:AB:B5:71:EB:69:F2:E4:1A:6C:02:DA
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235312e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:bd:97:10:77:e6:8f:dd:08:55:a4:87:ea:d7:02:3d:9a:2a:
         85:cf:e5:76:4b:82:d3:9d:fd:2c:9a:de:af:cf:d8:32:0a:ba:
         31:9c:f3:20:84:3d:22:92:11:8a:8f:8d:58:15:a0:c6:f5:48:
         c4:fc:56:64:39:bd:5f:21:98:36:2e:13:18:4b:16:c9:b4:e4:
         db:6e:d6:2d:1b:04:63:72:48:9d:e1:29:43:b5:78:98:57:53:
         4a:6d:66:cf:45:b8:84:c4:8e:f8:d2:b1:da:11:77:a6:af:00:
         9f:b3:77:58:f5:ef:35:a5:79:1b:0f:f6:26:59:6c:1c:34:c3:
         21:fd:7c:22:c1:8f:75:11:72:2f:80:19:d9:fb:1e:00:0c:23:
         65:18:ff:65:77:55:43:9f:c7:66:24:71:09:71:94:b2:14:40:
         de:f8:d3:b5:a5:96:a6:0d:a5:6b:d7:67:56:27:06:18:e3:9d:
         53:e3:c6:0a:b9:02:27:74:22:89:a2:00:8b:d7:f2:b0:30:58:
         67:ba:f8:58:22:13:1a:51:a9:fb:d4:c5:8b:1a:50:7d:d9:b9:
         42:da:af:b9:b3:04:27:d4:3e:c5:d3:d0:28:0f:a1:4e:9e:e5:
         3d:cd:59:af:7d:78:aa:a6:ad:10:02:c6:97:03:2a:f2:a5:18:
         09:4d:c3:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPvgdsdUhwzIsXv6SRdPyg6pfc1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxRjJBREY5MkY4NjMyNTQ5QTlDRDE0MzAyMEYzQjk1
NzJBQ0E1MDAeFw0yNjA1MTkxMzUwMTRaFw0yNzA1MTgxMzU1MTRaMDMxMTAvBgNV
BAMTKDM1Q0I5NUZGNzMyRjcwOTFENEFCQjU3MUVCNjlGMkU0MUE2QzAyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVpfsH1LomIudD0lJLs8lo3wrf
L794E7ics7UpuryDZ/LmMkBEsjT0FUPQxs8zFyq7fsJoVjNNrIEXYZpuZIsFu2PW
rckWoAvnSAQGpHpDLCGFxarEcwgenO9cv632RlLlyyjWzW2KIbVXEXY8hVaixuD1
OEcd5rO5p72iGZs06wjGtL/WhHZ9eYVb7TIfpDsF4QoPpeGeXOohTq8vCOSF0/DY
0pGUNRqlaBOixf+LhxEZwsAcWXJju/OegE5veoTPM2Wx715xyjbbpj/vy+4/Bcxk
Peb3RDFO4UX4/PRthvzNQRZZf7e0smZb/GoPP4NskXR/S3VO8aZyG8ywEhJHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNcuV/3MvcJHUq7Vx62ny5BpsAtowHwYDVR0j
BBgwFoAU7x8q35L4YyVJqc0UMCDzuVcqylAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9FRjFGMkFERjkyRjg2MzI1NDlBOUNEMTQzMDIwRjNCOTU3MkFDQTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMUYyQURGOTJGODYzMjU0
OUE5Q0QxNDMwMjBGM0I5NTcyQUNBNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVX7MA0GCSqGSIb3DQEBCwUAA4IBAQCovZcQd+aP
3QhVpIfq1wI9miqFz+V2S4LTnf0smt6vz9gyCroxnPMghD0ikhGKj41YFaDG9UjE
/FZkOb1fIZg2LhMYSxbJtOTbbtYtGwRjckid4SlDtXiYV1NKbWbPRbiExI740rHa
EXemrwCfs3dY9e81pXkbD/YmWWwcNMMh/XwiwY91EXIvgBnZ+x4ADCNlGP9ld1VD
n8dmJHEJcZSyFEDe+NO1pZamDaVr12dWJwYY451T48YKuQIndCKJogCL1/KwMFhn
uvhYIhMaUan71MWLGlB92blC2q+5swQn1D7F09AoD6FOnuU9zVmvfXiqpq0QAsaX
AyrypRgJTcNy
-----END CERTIFICATE-----
Generated at Sun May 24 19:22:01 2026 by rpki-client