Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa
File:                     34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa (raw, json)
Hash identifier:          XbpCLQ1s6roXFcWZ6ZbCavWzvIBDDMuhGKHhhTCZN9U=
Subject key identifier:   99:89:13:DE:94:44:C2:56:74:F5:52:50:EE:30:C0:D3:D5:C0:E5:3F
Certificate issuer:       /CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
Certificate serial:       4595E53D23DBE6A58003BCCE9265656AA52213EC
Authority key identifier: D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa
Signing time:             Sat 06 Jul 2024 01:41:17 +0000
ROA not before:           Sat 06 Jul 2024 01:36:17 +0000
ROA not after:            Sat 05 Jul 2025 01:41:17 +0000
asID:                     267350
IP address blocks:        45.233.231.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:e5:3d:23:db:e6:a5:80:03:bc:ce:92:65:65:6a:a5:22:13:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F
        Validity
            Not Before: Jul  6 01:36:17 2024 GMT
            Not After : Jul  5 01:41:17 2025 GMT
        Subject: CN=998913DE9444C25674F55250EE30C0D3D5C0E53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:95:84:f5:44:5b:d1:5c:f3:59:90:dd:70:
                    d1:29:30:96:24:6c:44:65:ab:71:92:36:3f:01:fb:
                    54:ab:7f:be:db:83:c4:0f:80:1f:b1:b7:11:3c:3d:
                    fe:39:bf:3d:82:fb:f8:6a:c5:24:36:4a:89:70:e6:
                    b8:90:9d:36:b2:63:c8:90:71:82:5b:2d:f0:38:19:
                    1c:ce:81:80:33:54:7f:d2:43:74:6d:36:7e:79:93:
                    bc:cc:2a:80:16:04:6f:da:82:75:74:c9:2c:d2:70:
                    87:fc:70:be:f9:f0:96:99:1d:14:0e:0d:fd:a2:9b:
                    c1:56:1a:0f:42:d6:2e:3d:d1:96:3f:06:7c:e5:24:
                    b9:ba:d1:8e:4b:a9:72:7c:47:72:eb:2c:76:bd:dc:
                    e0:21:30:82:eb:85:d3:ed:49:8a:4b:d7:fe:62:12:
                    f9:e8:b7:93:08:c3:1b:58:43:0f:03:b6:06:35:33:
                    cc:84:a8:47:a9:e8:7c:42:64:43:d1:86:f5:d1:5c:
                    2e:91:2b:1d:3d:36:37:76:44:75:a1:fe:fc:99:d9:
                    45:54:07:ea:e2:dd:9d:49:2e:2b:80:15:ee:96:94:
                    e6:b7:88:87:c0:b0:f0:12:0e:53:9c:3a:0e:bc:66:
                    a9:04:5b:c4:0b:20:8f:ee:77:f0:27:63:8d:72:9b:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:89:13:DE:94:44:C2:56:74:F5:52:50:EE:30:C0:D3:D5:C0:E5:3F
            X509v3 Authority Key Identifier:
                keyid:D1:B4:AF:0A:27:5C:0D:07:42:C7:43:A8:BE:8B:CD:F5:6B:03:DA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B4AF0A275C0D0742C743A8BE8BCDF56B03DA7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i7mi8m8aS4fVAckgV46bbMJjPH5yAbWKaHkCexsXPzE/0/34352e3233332e3233312e302f32342d3234203d3e20323637333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:38:73:0d:c8:23:e6:f0:6c:7f:2b:18:7c:a3:89:29:92:
         5e:85:04:07:9c:69:80:fa:80:b3:e1:2e:ea:34:1a:01:e3:91:
         2b:3b:8e:3b:6d:ce:55:8e:14:79:b8:18:cb:ae:ca:dc:41:b1:
         af:ab:7a:b3:90:e4:05:04:41:9f:6e:31:b0:91:4b:8c:94:55:
         15:b9:c5:7e:a7:8a:37:bd:d2:48:34:8f:36:da:1b:e6:34:29:
         15:2a:d6:af:da:15:5f:b2:79:5c:78:f4:d4:8f:4e:9f:d6:a6:
         60:93:1b:30:4e:61:8a:c1:8c:bd:cb:4c:78:e9:3f:0a:b9:f7:
         32:67:74:c9:15:39:34:7f:10:f3:e6:53:02:d6:d3:95:4d:34:
         7b:e6:38:c6:a0:e2:10:6d:94:c4:1a:44:ab:56:fc:dc:14:fc:
         bf:ba:fc:a7:d8:bd:90:9e:d9:e9:ed:f9:a4:66:a8:d9:9a:29:
         25:27:8c:f5:88:d2:9b:59:5f:de:42:f0:b0:57:8c:29:7d:0d:
         1f:1f:b6:ad:0b:9b:22:7f:1a:63:d2:c3:cf:4a:05:00:09:b8:
         83:c3:48:7f:4d:3f:15:8b:78:a6:2c:45:37:44:38:3d:37:e5:
         62:0d:f4:d7:2c:3a:77:aa:73:2e:3f:1a:b4:1e:6b:85:0e:59:
         3c:09:25:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:39 2025 by rpki-client