Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3234203d3e203532353536.roa
File:                     3137372e38352e3235342e302f32332d3234203d3e203532353536.roa (raw, json)
Hash identifier:          Tz0bxh8GzXZ2Ochs9ojfbuOlPGyZRrlGgCY2F0Aps2M=
Subject key identifier:   09:25:7D:0C:AB:B0:DC:0D:AB:89:3B:61:B5:11:84:8C:A9:A2:07:4F
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       4AD61C2264AD5DA7563A27FEE6AFCA1ED3738587
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3234203d3e203532353536.roa
Signing time:             Thu 14 May 2026 21:27:33 +0000
ROA not before:           Thu 14 May 2026 21:22:33 +0000
ROA not after:            Thu 13 May 2027 21:27:33 +0000
asID:                     52556
IP address blocks:        177.85.254.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d6:1c:22:64:ad:5d:a7:56:3a:27:fe:e6:af:ca:1e:d3:73:85:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 14 21:22:33 2026 GMT
            Not After : May 13 21:27:33 2027 GMT
        Subject: CN=09257D0CABB0DC0DAB893B61B511848CA9A2074F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:49:c9:37:c8:04:f1:cc:ed:d1:7e:89:ea:
                    32:0c:d4:f3:8d:92:90:99:cb:f4:57:20:8b:ec:37:
                    ea:86:55:f5:83:52:42:67:fd:b1:f4:e7:8e:69:d4:
                    90:9f:73:a5:fd:18:d7:99:95:ee:39:ea:6f:0d:65:
                    6d:8e:e5:3f:55:8f:e3:0e:c6:cc:58:57:60:01:94:
                    fe:37:81:ed:84:17:07:37:2e:a6:62:9d:27:9e:bb:
                    36:67:95:b5:c6:ba:eb:c2:66:98:71:9f:93:41:11:
                    6b:0c:4b:65:b5:f5:dc:b0:5b:2d:1b:ff:85:d8:dc:
                    66:a6:51:cb:a5:47:94:b5:0b:40:db:49:0d:ab:ed:
                    da:22:91:36:1e:bd:1b:02:df:8c:29:07:32:52:05:
                    91:89:dd:e9:98:21:34:47:65:45:59:c5:27:19:ee:
                    a1:27:ac:d4:25:f1:80:88:f0:31:f0:01:1e:7b:63:
                    8a:2d:00:be:1d:b4:cf:25:13:67:0b:e8:f6:81:72:
                    51:8b:fa:08:da:ca:da:e9:0c:92:f7:4b:f5:fc:06:
                    a0:57:d9:5e:75:d9:cd:69:01:28:4a:ed:93:e2:c4:
                    6a:88:12:3b:40:08:db:7d:eb:29:34:c8:61:37:0d:
                    bf:62:59:4d:24:dd:09:b8:13:3f:a0:96:10:a7:25:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:7D:0C:AB:B0:DC:0D:AB:89:3B:61:B5:11:84:8C:A9:A2:07:4F
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:aa:d1:88:c5:eb:16:fd:a3:36:3b:83:4e:0d:66:04:be:
         57:bf:e7:3e:83:4c:41:06:ec:92:e5:a7:0e:bf:ae:89:ed:ae:
         85:be:73:db:9d:ed:50:3d:e2:e1:62:03:1a:0a:d2:09:20:02:
         28:be:ea:5a:4a:a2:8f:14:bd:00:2a:54:2f:22:4d:1d:87:cd:
         44:e1:a3:59:54:59:a3:07:c4:ec:51:55:e5:52:82:cd:de:e3:
         5d:03:27:d1:07:72:bb:e7:05:bc:85:88:96:5d:cc:56:92:89:
         a2:6e:81:f8:07:f4:61:0b:d0:78:ba:61:2d:a8:c4:d3:fb:b5:
         65:de:a2:08:7e:ec:1b:1e:4d:5b:ad:0d:1a:cd:93:21:af:80:
         da:5a:ad:13:9e:09:09:d2:0e:b2:f6:8b:9f:06:59:40:74:34:
         e5:82:07:11:67:96:8c:cb:e4:6a:4f:47:50:f0:c9:41:e2:5f:
         4b:09:af:fc:ff:cb:bb:5a:06:f8:0a:52:6b:91:68:16:ab:29:
         d4:75:16:7b:f9:fd:32:cf:38:86:68:a2:62:98:d0:c4:cf:8c:
         6f:c0:80:be:42:2e:45:23:12:44:71:b5:50:4b:03:7c:93:94:
         28:6d:c5:c6:5e:4c:10:b6:c6:f1:b8:fa:f5:b4:08:2f:01:28:
         f9:6d:9f:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUStYcImStXadWOif+5q/KHtNzhYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYxRjJBREY5MkY4NjMyNTQ5QTlDRDE0MzAyMEYzQjk1
NzJBQ0E1MDAeFw0yNjA1MTQyMTIyMzNaFw0yNzA1MTMyMTI3MzNaMDMxMTAvBgNV
BAMTKDA5MjU3RDBDQUJCMERDMERBQjg5M0I2MUI1MTE4NDhDQTlBMjA3NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS40nJN8gE8czt0X6J6jIM1PON
kpCZy/RXIIvsN+qGVfWDUkJn/bH0545p1JCfc6X9GNeZle456m8NZW2O5T9Vj+MO
xsxYV2ABlP43ge2EFwc3LqZinSeeuzZnlbXGuuvCZphxn5NBEWsMS2W19dywWy0b
/4XY3GamUculR5S1C0DbSQ2r7doikTYevRsC34wpBzJSBZGJ3emYITRHZUVZxScZ
7qEnrNQl8YCI8DHwAR57Y4otAL4dtM8lE2cL6PaBclGL+gjaytrpDJL3S/X8BqBX
2V512c1pAShK7ZPixGqIEjtACNt96yk0yGE3Db9iWU0k3Qm4Ez+glhCnJcMhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCSV9DKuw3A2riTthtRGEjKmiB08wHwYDVR0j
BBgwFoAU7x8q35L4YyVJqc0UMCDzuVcqylAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9FRjFGMkFERjkyRjg2MzI1NDlBOUNEMTQzMDIwRjNCOTU3MkFDQTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGMUYyQURGOTJGODYzMjU0
OUE5Q0QxNDMwMjBGM0I5NTcyQUNBNTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM1MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVX+MA0GCSqGSIb3DQEBCwUAA4IBAQAcE6rRiMXr
Fv2jNjuDTg1mBL5Xv+c+g0xBBuyS5acOv66J7a6FvnPbne1QPeLhYgMaCtIJIAIo
vupaSqKPFL0AKlQvIk0dh81E4aNZVFmjB8TsUVXlUoLN3uNdAyfRB3K75wW8hYiW
XcxWkomiboH4B/RhC9B4umEtqMTT+7Vl3qIIfuwbHk1brQ0azZMhr4DaWq0TngkJ
0g6y9oufBllAdDTlggcRZ5aMy+RqT0dQ8MlB4l9LCa/8/8u7Wgb4ClJrkWgWqynU
dRZ7+f0yzziGaKJimNDEz4xvwIC+Qi5FIxJEcbVQSwN8k5QobcXGXkwQtsbxuPr1
tAgvASj5bZ8D
-----END CERTIFICATE-----
Generated at Sun May 24 19:22:01 2026 by rpki-client