Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235332e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          xDmKRvBCf2wkfpq5nGfEA2hAT9uq0OW4IgC6oq9cMFo=
Subject key identifier:   98:5F:9C:53:AB:58:80:6C:E9:87:65:B5:A6:3C:A4:C7:45:B1:C7:EB
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       46D862625A15DB95C02A6B100D3B7264A7576221
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 14 May 2026 21:27:33 +0000
ROA not before:           Thu 14 May 2026 21:22:33 +0000
ROA not after:            Thu 13 May 2027 21:27:33 +0000
asID:                     52556
IP address blocks:        177.85.253.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d8:62:62:5a:15:db:95:c0:2a:6b:10:0d:3b:72:64:a7:57:62:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 14 21:22:33 2026 GMT
            Not After : May 13 21:27:33 2027 GMT
        Subject: CN=985F9C53AB58806CE98765B5A63CA4C745B1C7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:1f:de:ea:96:3a:78:ac:cc:64:a2:a0:c5:
                    a9:8e:10:7a:93:de:c0:ba:d0:90:76:28:e5:a7:36:
                    9b:72:7b:37:7a:2a:0c:bc:26:0d:2f:b8:61:a3:b3:
                    1b:8a:a5:53:91:54:0f:d2:dc:c7:11:46:cf:2a:63:
                    0b:a1:a0:85:09:65:42:86:fe:e7:d8:16:35:66:bd:
                    7a:c3:3d:fc:88:ac:21:7c:54:bb:a8:ac:7b:0b:e8:
                    10:a3:d8:35:41:83:d0:0e:43:38:83:38:f6:c0:eb:
                    0e:12:7c:8c:25:3f:96:65:46:65:a9:f1:1e:f1:80:
                    9c:e3:c8:7e:dd:df:6c:f8:a7:a3:1b:1b:4a:49:96:
                    75:67:bb:c0:b0:8a:fb:7c:21:64:94:20:95:b8:52:
                    2e:e3:27:3c:ce:e5:a3:5d:46:0a:8e:8a:2c:98:8f:
                    b8:f1:51:63:46:82:e8:34:18:f4:33:0e:99:a5:cc:
                    f7:1f:2e:99:0c:02:33:c5:6d:0d:ef:7e:94:6c:0d:
                    75:20:7b:1a:06:71:43:f0:07:68:9c:fc:42:52:0a:
                    ad:4a:8b:67:b5:67:af:62:bb:74:69:d8:bd:55:b9:
                    b0:3a:84:2c:52:f1:d2:5e:d2:22:14:4b:23:42:59:
                    20:5d:31:16:b5:02:1c:4f:ec:a7:c1:10:d7:35:0a:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:9C:53:AB:58:80:6C:E9:87:65:B5:A6:3C:A4:C7:45:B1:C7:EB
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:0d:e9:9d:7e:5b:64:48:6b:88:ff:df:d6:4e:31:14:ea:
         de:de:fa:7c:43:f2:ed:5f:1d:4c:6e:5c:2c:93:19:d8:b4:1a:
         90:e4:16:d1:2a:9e:76:88:e1:49:08:a9:88:7d:b7:10:ee:fa:
         64:1e:0a:a8:18:9f:11:67:ec:b1:39:69:1d:72:cd:c9:0d:e0:
         6a:a3:ab:71:c1:65:58:ba:77:af:87:52:1e:d5:de:ca:51:7d:
         cd:08:4c:17:83:da:91:06:34:f6:84:76:a7:60:16:97:ff:08:
         e9:96:5c:b9:6c:dc:f6:45:f5:de:09:30:74:d9:8b:4a:00:c5:
         bd:f2:0e:a7:a8:2d:e4:79:29:6c:2c:a2:1e:8b:80:75:ce:5c:
         16:c7:06:79:c7:cf:47:5a:53:df:62:29:d6:9b:b0:70:c2:ad:
         0a:71:58:10:e9:e3:47:3e:04:22:20:e1:77:55:de:46:2f:a7:
         09:dd:b7:03:28:7a:db:66:27:70:0e:af:c7:0c:b9:41:c8:88:
         da:56:4e:43:68:bc:0e:0b:45:e3:ff:f3:81:3f:df:15:f7:47:
         81:79:8c:a6:4a:40:38:6e:81:2a:f5:b3:c3:94:de:6a:3c:ab:
         8a:30:de:52:59:6b:c6:fc:f4:c0:1e:cd:d9:8d:5c:46:69:78:
         58:75:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:23:11 2026 by rpki-client