Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235322e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          Acswnc70fGzLjbxpHFQecWmkN1WFDjo7QPMcjB5rKns=
Subject key identifier:   4C:37:EC:3E:F6:B6:00:AE:D2:EA:67:61:9D:35:58:71:5B:AE:78:CF
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       5A16196A913E559F8CC1778521308B12855A15ED
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
Signing time:             Tue 19 May 2026 13:55:14 +0000
ROA not before:           Tue 19 May 2026 13:50:14 +0000
ROA not after:            Tue 18 May 2027 13:55:14 +0000
asID:                     52556
IP address blocks:        177.85.252.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:16:19:6a:91:3e:55:9f:8c:c1:77:85:21:30:8b:12:85:5a:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 19 13:50:14 2026 GMT
            Not After : May 18 13:55:14 2027 GMT
        Subject: CN=4C37EC3EF6B600AED2EA67619D3558715BAE78CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:2d:ca:aa:89:7c:06:2a:e6:a8:94:b9:e5:
                    2e:23:c3:38:57:56:32:fd:3b:de:51:a4:76:ff:7e:
                    78:6e:6c:b3:56:7c:cc:76:7e:8d:e2:a7:40:fc:68:
                    ea:69:71:57:3d:2e:40:00:fd:ee:0a:8b:86:65:83:
                    8f:53:b0:26:23:8d:cc:c3:29:5e:c7:ea:96:ba:35:
                    0c:b4:03:6e:12:ad:d1:fc:bf:3d:76:17:f5:25:86:
                    aa:43:81:75:12:02:6e:49:2e:92:78:f0:09:01:58:
                    b6:37:96:a7:c1:77:7b:7b:f7:e1:ee:f8:f1:c6:5a:
                    e6:c3:4d:4d:15:4b:ca:48:ec:21:88:5a:f9:76:cf:
                    53:f6:ef:fb:f3:19:05:e2:09:1f:7c:1a:ea:08:2e:
                    28:cf:77:6a:3e:75:ef:2f:d8:0c:d8:8d:95:e0:8c:
                    89:72:5e:25:a6:92:23:f0:a6:a2:f0:ff:6e:07:39:
                    38:b6:50:07:d0:f9:ba:99:a1:4b:19:32:d6:75:7a:
                    16:19:9a:c3:ac:f1:46:33:b2:47:35:f7:e8:4d:4d:
                    d7:54:06:a0:4f:23:fb:af:aa:07:2f:90:7e:0e:e7:
                    06:9a:6a:27:1a:f7:93:e4:9a:27:5f:38:50:a8:ff:
                    ef:20:5f:0e:cc:15:83:4b:a5:8f:33:fb:32:21:68:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:EC:3E:F6:B6:00:AE:D2:EA:67:61:9D:35:58:71:5B:AE:78:CF
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:82:77:4d:2a:b1:c4:c3:43:80:2d:ed:e9:14:a3:c3:fa:7d:
         8b:a0:be:00:78:12:44:ab:63:23:30:8b:cd:68:60:a1:08:88:
         d0:e1:eb:50:de:1f:5a:15:ce:33:af:ca:35:43:22:99:c6:0f:
         bd:ee:cb:75:fc:8c:67:af:e4:27:ee:b7:84:ae:75:fb:1f:1f:
         17:65:23:d4:ba:33:1e:9e:9f:c6:57:b8:d5:8b:6e:24:3c:1c:
         30:bd:b9:1a:b6:56:74:bc:e7:b2:e5:a7:27:24:55:e5:8b:e9:
         ff:21:d2:bb:83:64:5c:b3:51:20:88:e3:8c:58:e9:c9:a6:bb:
         ba:13:94:cd:18:6f:db:d3:2a:41:55:a1:bf:e0:39:a8:a7:75:
         89:61:58:f8:23:34:a7:28:81:2e:60:e7:f3:35:ad:38:cc:d9:
         11:f2:18:86:78:33:68:28:5a:42:83:ba:93:54:f9:19:fa:4d:
         8e:ee:89:2e:2c:1f:5e:5e:88:02:5f:b8:91:1e:b8:69:26:6c:
         b0:72:bf:98:0b:87:98:8e:65:7d:03:a7:49:de:5c:b8:53:29:
         cc:05:21:ba:25:3f:6d:f5:78:54:7f:3c:c8:57:1a:42:e0:e9:
         ec:1b:5a:ac:99:91:cb:73:e9:07:1a:26:82:94:b8:91:49:80:
         3d:1c:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:23:14 2026 by rpki-client