Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa
File:                     3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa (raw, json)
Hash identifier:          l768x2BwNHg2jyVi6HRMnXrh9kcvTVD8vsyLSECQzYI=
Subject key identifier:   D6:4E:CC:3E:C1:1F:ED:FE:EF:78:3A:EC:78:52:DB:0D:FE:59:17:87
Certificate issuer:       /CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
Certificate serial:       07063A4408580094FB7DFCF7D9A9140E83EB4BD3
Authority key identifier: FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa
Signing time:             Sat 13 Jul 2024 00:39:34 +0000
ROA not before:           Sat 13 Jul 2024 00:34:34 +0000
ROA not after:            Sat 12 Jul 2025 00:39:34 +0000
asID:                     262507
IP address blocks:        177.55.166.0/24 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:06:3a:44:08:58:00:94:fb:7d:fc:f7:d9:a9:14:0e:83:eb:4b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FACBE837964A181010E5EBCBABD77E727EBA0A71
        Validity
            Not Before: Jul 13 00:34:34 2024 GMT
            Not After : Jul 12 00:39:34 2025 GMT
        Subject: CN=D64ECC3EC11FEDFEEF783AEC7852DB0DFE591787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0c:6f:c9:f6:46:f3:13:cf:df:0c:5b:78:d7:
                    e8:1c:02:d3:03:c8:8e:97:38:ff:9f:ed:3f:3b:82:
                    f8:e8:10:56:16:1c:c9:a8:e2:7d:61:82:68:8f:9e:
                    c0:e0:44:ee:a6:7b:05:c9:20:73:f1:5b:b8:2e:27:
                    b2:7c:8e:72:2a:d9:84:73:f3:61:40:90:54:bd:16:
                    7b:c6:c9:0f:e9:30:c7:9d:e8:14:b4:3f:5c:d8:f2:
                    ca:db:dd:59:f8:67:91:b1:3b:b5:f2:2c:2f:c7:14:
                    d1:34:98:e2:c5:7e:1c:5d:37:e1:08:4a:7b:a9:91:
                    cb:4b:2d:09:78:5d:df:39:c8:f2:e5:b8:d5:03:dc:
                    d1:c2:1a:0a:a8:08:76:da:61:72:9a:bc:a4:57:b1:
                    ef:f3:2f:01:c9:53:85:90:e7:16:91:79:9f:71:ba:
                    dd:2a:15:f7:b5:81:c2:61:ab:bc:87:d8:08:22:95:
                    67:88:29:d1:fd:cb:7f:a9:a2:d5:1f:14:78:2c:72:
                    8a:b1:a3:77:48:ab:ed:d7:cf:24:e5:6c:d1:fd:a8:
                    fe:8f:b1:2a:43:4a:17:cd:60:46:6d:e7:42:1f:59:
                    1b:15:95:40:fc:07:1e:5f:85:5f:63:10:cd:23:7a:
                    30:67:49:da:48:98:c5:d4:41:98:33:d4:70:3d:39:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4E:CC:3E:C1:1F:ED:FE:EF:78:3A:EC:78:52:DB:0D:FE:59:17:87
            X509v3 Authority Key Identifier:
                keyid:FA:CB:E8:37:96:4A:18:10:10:E5:EB:CB:AB:D7:7E:72:7E:BA:0A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/FACBE837964A181010E5EBCBABD77E727EBA0A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FACBE837964A181010E5EBCBABD77E727EBA0A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hF5FYq3TiRVXMNDDzEJp9nELGDL1Cv7QVwhF86wXRA5/0/3137372e35352e3136362e302f32342d3332203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:c7:8d:4c:86:b1:f7:af:65:4b:3c:6e:91:ad:56:ce:97:
         1b:03:e0:e1:38:e5:7c:2a:34:d4:65:c7:ce:5f:0b:a2:47:95:
         69:3d:28:e7:c5:59:21:23:13:8c:a1:c5:d1:49:ca:42:be:94:
         43:ae:a7:11:a2:14:48:e9:ce:6d:63:cf:ac:2b:9c:8c:a4:d0:
         6e:72:05:08:fc:eb:01:03:26:64:d7:3a:4e:ce:be:32:3a:3f:
         99:a1:c2:82:44:b2:f5:f3:f8:9a:95:46:f3:f7:da:fe:91:82:
         83:08:c7:9d:d9:a2:b0:2a:95:e1:59:78:df:27:c6:48:e5:71:
         07:a0:10:53:4a:dd:c9:9b:bf:13:4d:0c:c5:60:90:e2:1c:98:
         a0:7d:f8:ce:cf:e7:43:9b:80:9c:71:fd:2a:e2:c9:14:88:91:
         67:fc:97:60:1d:ee:8e:24:94:b4:26:12:15:a0:7f:58:82:d4:
         7f:57:37:12:3f:fb:7d:09:f2:35:7d:50:2c:8a:ae:c0:55:3b:
         1d:48:56:36:c8:71:8e:1a:c9:9b:85:57:4b:fe:13:56:cf:49:
         b1:18:26:ec:da:67:59:09:ea:9f:77:07:68:45:e8:34:c2:a7:
         48:3d:79:6f:e0:0e:31:5e:26:40:9b:14:f0:10:d6:8a:ac:d6:
         a7:61:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:26 2025 by rpki-client