Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
File:                     34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (raw, json)
Hash identifier:          becHvy/dCjtpQF+4gHEGN3zy1Feww1IODc0cNhKeTmE=
Subject key identifier:   9E:35:74:39:EB:E2:A2:A8:77:E2:32:89:80:44:FA:62:23:44:A7:33
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       227BB1BAC8E9E71FD3F044AED576B9DE2ECB5C39
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa
Signing time:             Mon 15 Jul 2024 19:10:03 +0000
ROA not before:           Mon 15 Jul 2024 19:05:03 +0000
ROA not after:            Mon 14 Jul 2025 19:10:03 +0000
asID:                     268557
IP address blocks:        45.163.192.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:b1:ba:c8:e9:e7:1f:d3:f0:44:ae:d5:76:b9:de:2e:cb:5c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: Jul 15 19:05:03 2024 GMT
            Not After : Jul 14 19:10:03 2025 GMT
        Subject: CN=9E357439EBE2A2A877E232898044FA622344A733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:31:32:aa:c7:c3:9b:10:cf:da:7f:3d:1a:
                    21:22:4e:09:33:27:6d:b8:69:04:99:12:51:01:86:
                    26:31:52:da:96:8e:40:af:81:73:6f:36:59:a0:b1:
                    86:27:ac:7c:77:69:91:e4:d2:3e:77:e8:01:52:7f:
                    cd:f1:7d:61:53:ca:f8:b4:ef:3c:23:7d:cd:8a:88:
                    bb:20:dd:b9:10:f7:ee:54:d7:9c:52:8b:a9:bd:67:
                    18:01:d3:1f:f6:d7:cd:a1:72:d4:da:8a:52:3f:ab:
                    db:30:66:78:8c:f8:be:b3:5b:b6:0c:7a:9a:27:ce:
                    43:0c:e1:01:86:8c:3d:60:87:50:c4:27:d7:b4:a1:
                    b3:9f:fd:d4:d4:21:f0:95:f6:96:90:9c:ca:0c:eb:
                    9a:69:71:4f:8e:3b:69:ce:52:0d:2b:57:6d:e1:08:
                    6e:ae:a3:75:93:74:7d:b3:0b:e3:34:4b:8d:fc:5a:
                    81:15:8e:0e:c5:7c:42:c6:57:63:71:99:37:ea:a6:
                    73:9e:4c:76:c3:9a:5c:92:c0:68:47:77:2d:74:98:
                    db:a0:f3:29:11:8b:2b:29:77:e8:8a:62:1d:65:a1:
                    54:ec:10:8a:b3:fc:c7:e7:86:f7:4c:d2:57:03:e5:
                    b6:0a:92:b8:7d:78:e9:bb:65:43:13:04:0f:71:4b:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:74:39:EB:E2:A2:A8:77:E2:32:89:80:44:FA:62:23:44:A7:33
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:33:b5:5b:cd:3a:27:b6:33:a3:87:19:5e:c2:0f:4d:51:d6:
         9e:5b:fa:03:06:6b:88:f4:dc:71:85:50:b5:c9:cc:f0:9a:48:
         b6:de:00:30:38:87:27:b2:a8:3c:17:96:0b:0e:bd:be:dd:f9:
         34:f3:6e:9a:df:9c:53:5e:21:df:92:bb:00:9b:0c:d6:1b:1a:
         85:47:7c:47:4d:9a:c4:1e:ed:51:32:f4:e3:91:c2:92:04:de:
         9a:da:18:9a:45:42:4a:f0:11:d0:f2:35:67:c1:16:c4:ce:e6:
         1a:7e:28:b2:a1:d0:4d:e5:a9:b9:96:dc:d0:26:d5:a7:ac:6c:
         59:5d:80:16:e9:fd:8b:f0:66:ae:7c:7e:2f:36:82:8a:6d:76:
         82:62:6c:11:7c:8e:b6:95:a0:7c:64:93:9e:58:a8:a6:9f:e0:
         e8:c9:65:e6:1c:ee:eb:33:72:3c:af:3a:cf:61:1a:f9:b8:0c:
         b6:d7:cf:86:a4:f2:a0:97:a0:a1:8a:fc:a7:6a:f3:c5:58:70:
         6e:33:d2:4a:b9:90:56:df:4a:55:8c:10:93:4c:d0:5a:f6:82:
         ce:62:cc:40:e4:8c:24:5a:9a:6c:c6:31:b1:83:9a:a6:8b:07:
         55:72:b4:a1:6c:8c:0f:af:e3:5d:74:a1:bb:30:31:8c:39:6e:
         f2:ab:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:26 2025 by rpki-client