Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa
File:                     3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa (raw, json)
Hash identifier:          n7jk0To+yPJeI2ZsjDfgEPlJAq7VQTqk9W0uy+04s8E=
Subject key identifier:   FC:D6:5C:B6:83:44:3A:57:09:41:00:B5:A4:3A:C4:6C:F8:6E:46:C1
Certificate issuer:       /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
Certificate serial:       08F740A06AEF5FFC2162B5EED1F692C53FFC8534
Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa
Signing time:             Thu 18 Apr 2024 19:48:49 +0000
ROA not before:           Thu 18 Apr 2024 19:43:49 +0000
ROA not after:            Thu 17 Apr 2025 19:48:49 +0000
asID:                     268192
IP address blocks:        168.181.36.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f7:40:a0:6a:ef:5f:fc:21:62:b5:ee:d1:f6:92:c5:3f:fc:85:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836
        Validity
            Not Before: Apr 18 19:43:49 2024 GMT
            Not After : Apr 17 19:48:49 2025 GMT
        Subject: CN=FCD65CB683443A57094100B5A43AC46CF86E46C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:b4:26:64:24:25:99:ad:ef:41:2f:2f:86:
                    fe:37:72:af:21:02:51:f4:63:5f:f9:b8:5a:5e:3e:
                    2e:3e:fe:73:f9:07:cb:3b:ab:3d:b0:08:48:07:08:
                    f3:5d:23:38:2c:ba:03:14:38:82:ee:40:02:7c:a2:
                    ed:b9:6a:15:de:b5:d2:2e:db:39:f0:5d:a5:14:43:
                    c4:7a:3c:08:88:3b:bb:39:69:98:03:4b:21:24:57:
                    e1:72:0a:a4:4b:89:71:14:15:e9:64:55:37:13:62:
                    3b:b5:d2:98:33:4b:1c:16:b2:d8:07:9b:c1:7f:5f:
                    0a:aa:65:1f:fe:53:f5:4d:c0:4a:6a:ee:93:70:2d:
                    66:6e:ee:b8:ff:7b:b2:ed:df:e6:de:b4:90:35:f4:
                    75:53:7e:13:66:1a:99:f1:57:c6:c1:34:ba:95:56:
                    67:9e:6a:df:47:ad:26:f4:7e:5e:44:81:38:0b:65:
                    20:73:b7:26:f7:ad:4e:fe:7b:54:71:56:93:4b:f8:
                    42:84:71:23:cc:33:ee:19:7b:cf:ba:9f:f5:0c:76:
                    93:46:3d:72:2b:02:42:12:bc:04:59:06:4e:96:30:
                    8d:1f:aa:66:c0:ce:bc:65:12:14:6b:6e:05:25:fd:
                    4d:88:f6:53:45:0d:eb:d3:c5:5e:ce:44:80:89:6c:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D6:5C:B6:83:44:3A:57:09:41:00:B5:A4:3A:C4:6C:F8:6E:46:C1
            X509v3 Authority Key Identifier:
                keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:04:38:21:73:4d:52:b5:a6:0e:18:cd:c1:f9:d6:4b:e4:
         47:3c:9c:8c:91:27:6f:62:09:da:b0:84:0b:50:8e:80:d6:c0:
         3a:07:75:f5:e6:fc:bd:f5:d3:04:85:6f:2f:d3:5d:8e:d0:5b:
         a5:08:c0:16:46:d9:15:50:f2:d8:ee:a0:02:96:88:f5:c9:31:
         47:1a:7c:90:e6:14:c1:56:b5:7c:78:f7:b7:db:d7:2d:cb:17:
         d8:eb:eb:ef:6a:16:77:74:60:c6:6d:ff:6c:ee:11:fb:3b:ac:
         96:ea:a4:1f:74:f7:1f:59:d6:cd:0b:9c:2a:e4:e7:fd:57:70:
         2f:16:6e:62:9b:2b:cb:44:dd:28:6a:50:dd:8f:9d:25:70:0f:
         88:e1:b3:1b:b5:8f:4d:57:77:49:09:4a:e6:bb:2a:33:d4:e5:
         e3:dc:fe:a3:5c:85:56:14:7e:e3:16:54:41:fa:b9:dc:41:21:
         e5:ad:7f:3f:21:19:db:a8:c4:ef:94:73:8e:8a:a5:1c:8c:0a:
         86:8c:10:b9:60:d5:89:3e:77:e6:68:54:4f:d8:b2:43:cb:97:
         4e:9f:c5:06:55:20:e5:2e:6a:3f:cf:c7:83:82:8b:6d:4c:76:
         d7:10:1d:dd:52:5a:ca:55:74:33:ec:3b:ad:d3:72:90:d1:0e:
         76:f5:73:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCPdAoGrvX/whYrXu0faSxT/8hTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk1NUQzRURGQUIzRTI1OTBGNzY2RjBENENGNUQ4QjMx
QzcxMzgzNjAeFw0yNDA0MTgxOTQzNDlaFw0yNTA0MTcxOTQ4NDlaMDMxMTAvBgNV
BAMTKEZDRDY1Q0I2ODM0NDNBNTcwOTQxMDBCNUE0M0FDNDZDRjg2RTQ2QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V7QmZCQlma3vQS8vhv43cq8h
AlH0Y1/5uFpePi4+/nP5B8s7qz2wCEgHCPNdIzgsugMUOILuQAJ8ou25ahXetdIu
2znwXaUUQ8R6PAiIO7s5aZgDSyEkV+FyCqRLiXEUFelkVTcTYju10pgzSxwWstgH
m8F/XwqqZR/+U/VNwEpq7pNwLWZu7rj/e7Lt3+betJA19HVTfhNmGpnxV8bBNLqV
Vmeeat9HrSb0fl5EgTgLZSBztyb3rU7+e1RxVpNL+EKEcSPMM+4Ze8+6n/UMdpNG
PXIrAkISvARZBk6WMI0fqmbAzrxlEhRrbgUl/U2I9lNFDevTxV7ORICJbAelAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/NZctoNEOlcJQQC1pDrEbPhuRsEwHwYDVR0j
BBgwFoAUqVXT7fqz4lkPdm8NTPXYsxxxODYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB
SmQvMC9BOTU1RDNFREZBQjNFMjU5MEY3NjZGMEQ0Q0Y1RDhCMzFDNzEzODM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NTVEM0VERkFCM0UyNTkw
Rjc2NkYwRDRDRjVEOEIzMUM3MTM4MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRzZOOWhTZFhQRnhiM2pRVVdZQXdBOTdHMjJORkFDYzh3Uk03R3dwQUpkLzAv
MzEzNjM4MmUzMTM4MzEyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKotSQwDQYJKoZIhvcNAQELBQADggEBAKJSBDgh
c01StaYOGM3B+dZL5Ec8nIyRJ29iCdqwhAtQjoDWwDoHdfXm/L310wSFby/TXY7Q
W6UIwBZG2RVQ8tjuoAKWiPXJMUcafJDmFMFWtXx497fb1y3LF9jr6+9qFnd0YMZt
/2zuEfs7rJbqpB909x9Z1s0LnCrk5/1XcC8WbmKbK8tE3ShqUN2PnSVwD4jhsxu1
j01Xd0kJSua7KjPU5ePc/qNchVYUfuMWVEH6udxBIeWtfz8hGduoxO+Uc46KpRyM
CoaMELlg1Yk+d+ZoVE/YskPLl06fxQZVIOUuaj/Px4OCi21MdtcQHd1SWspVdDPs
O63TcpDRDnb1c64=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:41 2025 by rpki-client