Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa
File:                     3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa (raw, json)
Hash identifier:          PrZrbjifVct11zcRosTESj2jDve8G1AJd+e5ziMCdX4=
Subject key identifier:   C7:28:73:F2:EF:95:82:F3:94:73:A8:D9:BE:21:69:86:E3:02:CB:C0
Certificate issuer:       /CN=A4D51BDA3FEC571926CB55CDEEBD6475B65C631F
Certificate serial:       43B732ACA3431809832FA13FADE0B3FBFEBC8D9C
Authority key identifier: A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa
Signing time:             Tue 19 Nov 2024 14:54:19 +0000
ROA not before:           Tue 19 Nov 2024 14:49:19 +0000
ROA not after:            Tue 18 Nov 2025 14:54:19 +0000
asID:                     271404
IP address blocks:        181.189.28.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b7:32:ac:a3:43:18:09:83:2f:a1:3f:ad:e0:b3:fb:fe:bc:8d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D51BDA3FEC571926CB55CDEEBD6475B65C631F
        Validity
            Not Before: Nov 19 14:49:19 2024 GMT
            Not After : Nov 18 14:54:19 2025 GMT
        Subject: CN=C72873F2EF9582F39473A8D9BE216986E302CBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:f8:2b:92:ef:3e:2e:96:00:a2:db:2d:aa:
                    a9:c2:ec:d2:71:00:2b:09:9a:a3:8f:65:2d:01:da:
                    04:a9:ea:19:8a:91:4a:18:f2:73:4c:16:a7:28:69:
                    bf:4f:65:f2:6e:61:bc:df:f7:a9:89:cf:db:e2:58:
                    02:8a:f7:ba:23:24:89:56:c3:70:b2:cc:f2:39:6e:
                    45:58:90:4d:b7:2c:02:27:bf:ef:01:3e:8b:63:4c:
                    07:6a:c6:3e:7d:35:b9:89:8d:cc:49:0f:82:8f:d7:
                    01:90:bd:09:fd:59:41:89:b0:6c:d6:b4:15:0c:26:
                    d5:4c:86:ef:cf:36:59:cf:13:61:33:99:5e:17:ef:
                    bb:ca:f2:2b:bd:43:04:39:a3:b6:ad:44:65:02:16:
                    67:78:ad:50:7c:47:10:96:49:9a:1d:e6:09:d0:8c:
                    0b:bb:7a:54:d2:d6:02:b4:8f:8d:ab:2e:35:17:6d:
                    f8:b0:4c:21:f6:ad:93:c8:37:3e:84:75:80:39:13:
                    bf:9c:5c:13:0c:39:59:0e:e2:99:92:62:33:7c:8d:
                    43:95:67:cf:7f:9d:3f:c7:8c:03:af:9f:a8:66:5e:
                    12:5a:4c:9f:48:60:28:45:37:c1:63:e6:38:7f:ac:
                    13:b8:8a:f2:36:d2:a3:06:d8:c5:19:0e:2a:06:ed:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:73:F2:EF:95:82:F3:94:73:A8:D9:BE:21:69:86:E3:02:CB:C0
            X509v3 Authority Key Identifier:
                keyid:A4:D5:1B:DA:3F:EC:57:19:26:CB:55:CD:EE:BD:64:75:B6:5C:63:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4D51BDA3FEC571926CB55CDEEBD6475B65C631F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/3138312e3138392e32382e302f32322d3332203d3e20323731343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:2a:8d:77:13:a2:98:e7:98:c0:e7:79:fa:3f:39:e0:62:
         c2:44:38:64:3f:19:ee:19:0e:ed:73:11:da:0c:b1:8e:c3:75:
         dc:da:c6:c4:d3:f6:60:0f:ac:f0:0d:bb:45:d5:af:23:b0:e4:
         7a:f0:1a:49:08:38:01:1f:5d:f6:b8:4a:fd:84:56:59:58:6f:
         9b:d8:e5:7b:5d:9d:ba:05:73:a0:9d:4f:ea:38:f2:29:fa:0a:
         3f:8d:89:14:f7:3a:cd:ac:15:d0:f0:e3:8e:28:87:0d:68:89:
         5f:1f:0f:ae:b3:b9:5e:24:fa:75:71:ff:c4:7c:d5:ed:9b:e4:
         8b:f0:16:b3:a8:1a:68:c1:b4:74:0c:9f:41:70:31:85:51:79:
         9e:b2:0e:e2:aa:d6:f7:9d:6c:95:5c:2b:01:83:21:cb:64:ff:
         fa:ed:0b:f0:0f:04:85:1d:dd:7d:12:7e:7d:b9:da:a4:de:f4:
         37:df:a1:40:8c:e4:8c:90:0d:fa:35:ce:be:74:76:df:90:b8:
         af:22:08:85:aa:91:75:3d:6b:c4:d1:4b:7a:4b:40:9e:73:b2:
         32:fc:fc:51:6c:fe:87:06:33:df:c6:17:ed:02:f2:19:b9:a4:
         e1:db:56:4a:4c:e3:68:a6:17:52:9b:70:e6:40:63:39:66:1d:
         67:eb:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:05 2025 by rpki-client