Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
File:                     3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa (raw, json)
Hash identifier:          SLWQaLbJXAWOTLglLFO8TECCpk74xCspLU8rBVsve9c=
Subject key identifier:   6F:D5:E9:E9:C2:EB:21:A6:ED:87:AB:44:16:A2:B1:A0:20:AD:35:12
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       3A65A7BB24AD2FC5073DA1228EF498BAFC69E93C
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     270653
IP address blocks:        190.11.212.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:a7:bb:24:ad:2f:c5:07:3d:a1:22:8e:f4:98:ba:fc:69:e9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6FD5E9E9C2EB21A6ED87AB4416A2B1A020AD3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:9c:85:3e:4e:fc:72:4d:11:95:7f:b2:f9:
                    e7:b4:66:20:18:c0:c3:8e:06:67:db:cf:41:7b:04:
                    88:13:e0:ed:9b:e2:68:27:f4:6a:87:0f:c3:15:ec:
                    1c:77:26:ad:d3:8a:f8:2e:2b:fd:17:00:23:07:f5:
                    d4:3a:d2:ed:cb:30:21:29:02:68:98:60:74:94:32:
                    d4:a7:91:10:cf:ba:8d:cb:18:5c:4d:03:37:ec:6e:
                    91:54:db:54:1d:26:c4:a8:fd:bb:90:ab:7e:45:c4:
                    e5:31:d7:21:12:42:3b:5c:46:b3:39:c3:f4:47:15:
                    8a:3f:ab:82:7b:16:4c:a4:2e:67:6c:01:0f:a8:bb:
                    e0:48:07:d5:db:2c:e7:3c:ca:23:21:25:5c:b3:da:
                    b9:70:74:a9:58:f9:98:9b:98:e0:09:40:17:33:17:
                    ae:e9:77:43:0c:a9:fe:fa:00:5f:b3:57:79:5e:ed:
                    ea:d4:7e:19:20:43:db:a8:2b:1f:9c:fc:66:df:7c:
                    2a:5d:59:a2:27:3b:bc:9b:5a:ff:9b:25:e4:35:d4:
                    a7:ad:b9:84:da:91:4f:47:49:17:df:80:c3:e2:1f:
                    6b:61:a8:6a:4f:3e:bb:d8:b5:1a:b3:81:5a:f1:b3:
                    04:83:f1:b2:a2:8e:4f:63:86:3d:5a:04:76:31:44:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D5:E9:E9:C2:EB:21:A6:ED:87:AB:44:16:A2:B1:A0:20:AD:35:12
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:08:dd:93:e1:86:0a:50:6b:7c:fd:2b:2a:11:fc:e0:11:
         bc:33:ff:71:6e:b7:b1:79:47:c3:80:d5:29:bd:7b:45:67:37:
         b0:5b:11:37:9e:29:a1:cf:31:01:5b:57:0c:97:48:2c:f7:2d:
         9c:e6:e0:b5:d0:52:20:94:08:81:98:7c:97:4f:24:55:7c:f9:
         d9:1a:a4:54:df:75:c2:e6:ab:71:aa:a5:96:47:e1:21:01:24:
         2c:47:56:92:2a:80:85:ab:f2:6a:5e:ea:a4:66:aa:3b:47:4f:
         a4:4b:5b:28:4e:b1:92:50:dd:31:60:87:4c:7e:61:df:4e:b5:
         32:29:a6:cb:51:99:d2:9f:37:30:b2:ad:e7:6b:65:8a:f5:41:
         3d:05:5d:de:2e:a5:97:0c:d1:da:47:18:ec:66:e9:c2:16:e7:
         11:ed:eb:c4:ed:02:0f:d9:66:a7:1e:37:7e:14:da:3b:5c:07:
         88:48:82:64:18:c6:0f:29:0d:48:d8:2c:97:d5:b6:e7:01:f4:
         2e:1f:e1:7e:1a:9c:91:5a:e8:b5:81:7a:ed:3f:53:a5:9e:b0:
         e5:a6:37:69:bc:53:72:7b:a6:a0:50:f3:fd:09:4a:df:bf:c5:
         e8:18:74:c6:22:8f:1c:14:7b:f5:48:00:03:61:c3:aa:87:bb:
         e7:a2:35:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOmWnuyStL8UHPaEijvSYuvxp6TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlGRjFBRTExQjVEQzYyMEFBMTMxRkY4QjM3MUI5Q0Y1
RTc4NjhDRjAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDZGRDVFOUU5QzJFQjIxQTZFRDg3QUI0NDE2QTJCMUEwMjBBRDM1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMJyFPk78ck0RlX+y+ee0ZiAY
wMOOBmfbz0F7BIgT4O2b4mgn9GqHD8MV7Bx3Jq3TivguK/0XACMH9dQ60u3LMCEp
AmiYYHSUMtSnkRDPuo3LGFxNAzfsbpFU21QdJsSo/buQq35FxOUx1yESQjtcRrM5
w/RHFYo/q4J7FkykLmdsAQ+ou+BIB9XbLOc8yiMhJVyz2rlwdKlY+ZibmOAJQBcz
F67pd0MMqf76AF+zV3le7erUfhkgQ9uoKx+c/GbffCpdWaInO7ybWv+bJeQ11Ket
uYTakU9HSRffgMPiH2thqGpPPrvYtRqzgVrxswSD8bKijk9jhj1aBHYxREevAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb9Xp6cLrIabth6tEFqKxoCCtNRIwHwYDVR0j
BBgwFoAU6f8a4RtdxiCqEx/4s3G5z154aM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJIeVNrY1lpUGNjTm90TVd3c0VmTmhVWnkySnpWM1NVQzU1SlhRdGsz
SnYvMS9FOUZGMUFFMTFCNURDNjIwQUExMzFGRjhCMzcxQjlDRjVFNzg2OENGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5RkYxQUUxMUI1REM2MjBB
QTEzMUZGOEIzNzFCOUNGNUU3ODY4Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCSHlTa2NZaVBjY05vdE1Xd3NFZk5oVVp5Mkp6VjNTVUM1NUpYUXRrM0p2LzEv
MzEzOTMwMmUzMTMxMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+C9QwDQYJKoZIhvcNAQELBQADggEBADnACN2T
4YYKUGt8/SsqEfzgEbwz/3Fut7F5R8OA1Sm9e0VnN7BbETeeKaHPMQFbVwyXSCz3
LZzm4LXQUiCUCIGYfJdPJFV8+dkapFTfdcLmq3GqpZZH4SEBJCxHVpIqgIWr8mpe
6qRmqjtHT6RLWyhOsZJQ3TFgh0x+Yd9OtTIppstRmdKfNzCyredrZYr1QT0FXd4u
pZcM0dpHGOxm6cIW5xHt68TtAg/ZZqceN34U2jtcB4hIgmQYxg8pDUjYLJfVtucB
9C4f4X4anJFa6LWBeu0/U6WesOWmN2m8U3J7pqBQ8/0JSt+/xegYdMYijxwUe/VI
AANhw6qHu+eiNbM=
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:48 2025 by rpki-client