Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa
File:                     3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa (raw, json)
Hash identifier:          Oq1Gl544c3jQF5Ot3+46X+ciHFxFoKXBs5JSWAsjqcg=
Subject key identifier:   4A:2B:27:A7:E3:B7:08:92:78:9F:30:24:E4:65:F2:74:C9:14:FD:71
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       3B0548BEBBE55CA324646B227DD471EE8D98D37A
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     262499
IP address blocks:        177.66.154.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:05:48:be:bb:e5:5c:a3:24:64:6b:22:7d:d4:71:ee:8d:98:d3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=4A2B27A7E3B70892789F3024E465F274C914FD71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:03:e1:47:10:f9:72:31:c3:aa:d6:e9:4e:
                    07:9b:bd:d3:5f:ee:1a:ec:d4:55:b2:b4:99:19:af:
                    7d:41:aa:37:fb:96:0c:02:8b:9e:ce:e5:b8:38:32:
                    d0:cb:f5:d0:d1:3b:c3:d5:25:4f:1d:53:8f:8f:f0:
                    ae:8e:5e:98:3b:9a:41:18:a0:2e:c5:0c:82:e9:67:
                    d1:20:dc:79:36:7c:94:29:82:96:c0:85:e5:f2:24:
                    fa:17:1a:cb:d9:e3:93:e5:d5:ed:a7:05:1e:a9:e6:
                    02:f9:87:68:3c:a8:33:80:35:6c:c0:db:f7:c1:20:
                    08:fc:1b:ff:9f:5a:b8:a9:aa:06:89:80:67:46:b4:
                    67:3c:1c:fb:cd:e3:2e:c1:9c:33:19:98:9d:9c:2c:
                    ae:ce:71:24:f6:f9:6b:08:72:40:ab:99:23:15:de:
                    88:90:76:13:8f:1d:d6:41:7c:2f:bd:41:08:ee:f0:
                    8b:f5:2c:de:d6:0e:96:20:3c:e7:f5:f6:f6:ca:61:
                    3a:a4:4f:30:37:07:6a:7e:3d:79:e6:ea:e7:53:9f:
                    00:46:97:41:95:88:6a:c9:f6:a3:7c:70:1f:28:40:
                    31:1b:22:88:57:30:76:b8:a9:02:7c:4c:7c:a3:1a:
                    3d:c7:20:7a:a9:e4:1c:8a:3f:43:33:c6:72:76:b1:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2B:27:A7:E3:B7:08:92:78:9F:30:24:E4:65:F2:74:C9:14:FD:71
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135342e302f32332d3233203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:96:9c:3d:b9:1b:a1:8b:ba:e2:17:eb:0e:a3:18:dc:99:
         6d:3a:8d:b4:c7:69:68:e8:ab:49:c0:ca:4d:0d:04:0b:50:4f:
         73:0f:32:61:8a:d5:ed:e6:bd:f8:7b:67:f1:17:34:85:29:2d:
         91:b6:b9:60:45:bd:f7:65:38:48:3d:d4:a2:ed:d6:ca:e6:ec:
         a0:2e:bd:7a:24:62:6a:0a:40:c9:dc:86:22:06:7d:53:43:98:
         a3:ec:48:62:fc:74:b1:4a:47:e6:98:56:ac:41:93:45:a9:af:
         4e:46:2c:4a:62:f7:a4:ba:47:64:92:12:3c:37:f1:b4:32:5a:
         cc:f5:30:e2:a7:44:ba:38:fa:6c:ff:36:51:0a:a2:f1:85:95:
         8a:6a:72:25:df:25:f8:cc:c3:1e:a3:7d:db:80:f7:7a:8d:d9:
         a8:54:82:a7:86:fe:ae:7c:66:de:b5:7b:07:c2:4d:41:75:8e:
         f6:63:84:5b:40:5d:9e:b5:b3:64:15:c9:66:e5:0b:fc:69:25:
         a9:d4:31:75:77:e9:e3:b3:07:cd:6e:68:1b:37:ef:25:f3:b3:
         36:62:0b:e5:4a:ad:d9:df:6a:4e:b5:75:9b:90:2b:c0:88:bc:
         57:8d:dc:7f:61:37:79:3f:60:21:cc:6f:d8:b9:af:1f:ab:7d:
         12:ea:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:50:05 2025 by rpki-client