Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3332203d3e20323635333337.roa
File:                     3136382e3138312e3134302e302f32322d3332203d3e20323635333337.roa (raw, json)
Hash identifier:          8UVb7qZ/Vbiz9r2swdY2FiWes5r4kgVAEb4lj7QC2Ww=
Subject key identifier:   FE:8B:DB:2B:2D:B3:4A:20:A1:80:20:5B:64:50:48:6E:2C:B7:CD:89
Certificate issuer:       /CN=79509E82CCF0E382981DD03430B4AAC6DE57585E
Certificate serial:       28400131F6FE3A50B876C3318A25CA86182E5211
Authority key identifier: 79:50:9E:82:CC:F0:E3:82:98:1D:D0:34:30:B4:AA:C6:DE:57:58:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79509E82CCF0E382981DD03430B4AAC6DE57585E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3332203d3e20323635333337.roa
Signing time:             Thu 13 Mar 2025 14:54:23 +0000
ROA not before:           Thu 13 Mar 2025 14:49:23 +0000
ROA not after:            Thu 12 Mar 2026 14:54:23 +0000
asID:                     265337
IP address blocks:        168.181.140.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:40:01:31:f6:fe:3a:50:b8:76:c3:31:8a:25:ca:86:18:2e:52:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79509E82CCF0E382981DD03430B4AAC6DE57585E
        Validity
            Not Before: Mar 13 14:49:23 2025 GMT
            Not After : Mar 12 14:54:23 2026 GMT
        Subject: CN=FE8BDB2B2DB34A20A180205B6450486E2CB7CD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:cb:7d:9e:58:c2:9b:53:ef:a9:ca:0d:02:
                    95:a0:75:32:16:0a:b3:1d:c0:92:b5:0d:65:59:2b:
                    7b:6e:4c:c9:3b:d4:b4:cb:c9:13:b4:ac:30:d6:b0:
                    36:51:c3:88:30:e0:dc:be:06:5a:d1:00:59:2b:12:
                    5b:fe:f2:ad:36:c1:25:33:c6:00:46:6a:73:24:9d:
                    b7:67:53:24:79:0d:76:fa:37:0a:25:52:a4:d4:f6:
                    13:ef:01:31:30:bd:05:0b:8d:1a:ce:87:ce:61:27:
                    6e:c0:f9:e1:6f:8f:1c:fb:35:1d:19:e9:66:a7:43:
                    81:c6:e5:40:94:f9:72:87:d2:8a:0f:00:38:c0:ba:
                    8c:83:a0:86:c1:f4:25:d4:06:7f:32:22:b6:ed:16:
                    b9:ec:60:2f:01:37:e4:75:1d:4d:8f:9e:2c:85:7f:
                    a0:ab:22:4b:39:30:1d:76:10:40:47:23:d9:57:52:
                    73:c8:59:f0:cb:8e:13:ff:9c:8d:b0:68:d3:b7:bf:
                    d2:c9:92:3c:7b:bb:a1:72:ff:01:f6:0c:f7:56:73:
                    a2:c2:40:3e:6a:f3:d7:c1:65:75:e1:1f:4a:4d:fa:
                    dc:37:ce:8d:bb:74:27:f3:62:40:66:03:6f:ca:0a:
                    15:8a:46:48:ca:b7:09:21:02:95:5e:e5:ed:49:3f:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:DB:2B:2D:B3:4A:20:A1:80:20:5B:64:50:48:6E:2C:B7:CD:89
            X509v3 Authority Key Identifier:
                keyid:79:50:9E:82:CC:F0:E3:82:98:1D:D0:34:30:B4:AA:C6:DE:57:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/79509E82CCF0E382981DD03430B4AAC6DE57585E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79509E82CCF0E382981DD03430B4AAC6DE57585E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32322d3332203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:93:e6:97:e4:fb:db:86:b4:e0:65:d3:d1:3d:7b:83:e7:f3:
         4f:ed:2b:ce:b2:c2:89:86:79:c3:31:12:f1:7d:b3:41:5c:cb:
         7e:41:f8:02:85:97:13:d2:33:e3:5a:23:12:86:22:34:42:88:
         fc:a2:60:a8:ed:8d:6b:b8:74:79:77:9f:6e:05:e5:6b:9e:87:
         94:41:1b:c5:b0:9c:fa:5f:83:71:b3:ff:77:b8:99:d3:d7:12:
         7c:30:c3:bb:7b:22:c7:04:f3:4d:02:26:37:50:46:f8:4b:dd:
         c8:36:c7:c9:c6:d2:de:c8:32:0d:ff:1b:5f:be:bc:5d:b6:b6:
         9a:17:97:92:77:20:68:5d:9c:df:d6:ff:1a:89:a1:c2:45:48:
         b0:8f:66:1a:1f:c3:50:aa:f0:e9:a4:47:e3:75:55:86:5d:83:
         88:d3:b0:d1:70:7e:a4:d2:72:09:b0:d9:28:cb:77:b1:80:6b:
         1d:6a:95:ba:43:62:30:a5:02:e2:ca:12:e4:3b:8b:ba:e7:5c:
         28:03:99:05:a0:64:99:e7:c9:54:31:82:d5:3f:2e:57:63:2a:
         a1:5f:ab:d5:ce:31:be:84:a1:da:55:33:90:54:2f:bc:2d:7e:
         b3:80:34:7d:3b:58:ce:b8:9c:47:96:e4:93:d5:d4:2b:83:8c:
         e0:9c:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:40:55 2025 by rpki-client