Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa
File:                     34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          PkcTnXPTaB8XsejhEavJ1BW8hVPTQB6gI4ecge/hNdI=
Subject key identifier:   BD:85:79:38:6E:86:14:70:0C:D0:46:B9:09:A1:36:A4:20:8D:6C:50
Certificate issuer:       /CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
Certificate serial:       6676B12689BBDE743C7F8FB8D197E1092305EBE5
Authority key identifier: BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa
Signing time:             Fri 23 May 2025 12:32:11 +0000
ROA not before:           Fri 23 May 2025 12:27:11 +0000
ROA not after:            Fri 22 May 2026 12:32:11 +0000
asID:                     268578
IP address blocks:        45.163.177.0/24 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:b1:26:89:bb:de:74:3c:7f:8f:b8:d1:97:e1:09:23:05:eb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEB27A277D8B16F1123CEC9812B7FC669378A517
        Validity
            Not Before: May 23 12:27:11 2025 GMT
            Not After : May 22 12:32:11 2026 GMT
        Subject: CN=BD8579386E8614700CD046B909A136A4208D6C50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:9d:f5:9b:6c:05:f7:2b:47:7e:14:c7:3c:
                    40:61:47:45:05:02:8a:24:c0:81:e1:7b:37:39:a2:
                    e3:a1:82:57:5d:2a:eb:7a:d5:cb:41:64:0a:89:35:
                    12:91:44:ff:1f:45:94:8e:84:85:98:de:5b:33:88:
                    28:59:28:20:bb:7b:1e:c8:f1:6f:60:c2:10:f5:e9:
                    44:8a:6d:48:77:d9:5c:ed:09:eb:19:1e:1a:b7:b6:
                    50:d8:2b:7b:ca:eb:28:8b:41:84:4f:f2:22:bf:17:
                    9f:01:27:be:34:c8:41:6a:e2:56:d8:06:34:91:2c:
                    a2:34:1c:d5:5e:7c:73:40:d7:e9:05:bb:14:68:d5:
                    27:00:c0:93:ae:f7:4e:69:08:8c:06:75:5e:cf:98:
                    33:b3:33:ab:e8:c2:a0:ba:4d:6e:97:38:58:63:db:
                    21:0d:27:79:6f:93:e3:f0:06:9f:2d:16:68:03:04:
                    51:e1:c3:7b:1c:6c:c8:91:99:db:48:f9:ab:7f:b6:
                    e1:7e:3f:2c:9d:4c:e1:97:4e:12:63:77:95:45:a8:
                    24:19:94:cf:2b:6a:cb:00:82:66:11:7e:15:53:9f:
                    c0:90:b6:5b:21:e7:8e:2a:ea:f7:f3:c7:8e:40:2c:
                    7e:9d:b3:c4:e6:a0:e6:f3:94:64:b9:24:63:2f:d7:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:79:38:6E:86:14:70:0C:D0:46:B9:09:A1:36:A4:20:8D:6C:50
            X509v3 Authority Key Identifier:
                keyid:BE:B2:7A:27:7D:8B:16:F1:12:3C:EC:98:12:B7:FC:66:93:78:A5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/BEB27A277D8B16F1123CEC9812B7FC669378A517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEB27A277D8B16F1123CEC9812B7FC669378A517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/34352e3136332e3137372e302f32342d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:13:9e:64:64:03:37:d2:0d:3c:5c:d0:44:ee:5d:e6:89:a9:
         2d:16:9b:e6:df:ec:7f:2c:07:c7:10:f8:87:32:f3:91:d6:78:
         61:33:62:23:5d:f7:3b:16:3d:39:e4:31:a7:2f:d6:1f:a7:06:
         03:92:be:bc:71:68:a8:b1:f6:3b:e2:8a:38:cb:1a:8a:62:cb:
         db:59:94:84:c7:b9:5f:99:7a:f5:28:70:c8:a9:69:b8:ee:68:
         10:f7:bc:f2:3c:c1:cc:42:f4:36:8d:20:80:2e:f7:51:10:1b:
         df:30:4a:d3:84:af:ad:34:ac:1e:84:7f:60:89:2e:8c:04:c3:
         2a:80:b3:ef:e7:1f:9f:d6:96:a3:47:c0:4a:43:a5:30:1c:f4:
         4a:38:25:2c:da:03:34:02:5a:14:6f:8a:e4:2f:85:95:ac:5a:
         91:de:de:24:de:92:f8:f1:97:f9:50:89:4c:20:e4:73:f4:d3:
         62:e3:b0:64:56:9b:9d:53:55:1b:97:cd:2c:89:90:a6:ef:31:
         6f:4c:79:f7:be:e2:44:b4:0c:42:f0:e9:1c:92:c1:09:2c:7f:
         c8:f4:2c:85:6f:aa:ac:d6:c7:32:88:80:f8:04:4a:50:a8:a0:
         81:cf:21:f9:82:bc:8f:f9:cb:d6:9d:c8:14:74:ab:71:4e:b8:
         83:f2:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:39 2025 by rpki-client