Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131332e302f32342d3234203d3e20323632383132.roa
File:                     3138362e3235302e3131332e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          7WoSZxG4MPA63KruO97vmGe+bWjoLppvme2fIwQB0ME=
Subject key identifier:   B4:BE:41:1B:5E:CD:5A:DE:74:E4:06:38:DE:14:E2:A7:A4:73:88:36
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       24F87873913A887239633AFE391B2D869565CA1B
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131332e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:40:18 +0000
ROA not before:           Mon 12 Aug 2024 14:35:18 +0000
ROA not after:            Mon 11 Aug 2025 14:40:18 +0000
asID:                     262812
IP address blocks:        186.250.113.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f8:78:73:91:3a:88:72:39:63:3a:fe:39:1b:2d:86:95:65:ca:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:35:18 2024 GMT
            Not After : Aug 11 14:40:18 2025 GMT
        Subject: CN=B4BE411B5ECD5ADE74E40638DE14E2A7A4738836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:a7:09:47:13:cc:51:31:b8:29:bd:68:f9:
                    70:25:e4:43:03:66:b0:4d:db:a6:df:5f:b8:f0:45:
                    f8:18:cb:11:3a:42:67:f2:78:57:96:74:12:33:78:
                    68:96:c0:b8:f3:f2:87:28:7c:7a:f4:06:1a:24:9f:
                    bb:27:57:6f:dd:ab:69:70:94:a5:2e:50:1d:f6:90:
                    ef:5e:07:3c:de:8e:a9:da:a3:17:ec:50:72:f3:32:
                    86:68:9e:83:a4:ca:0b:30:b2:15:c2:a1:23:ea:a2:
                    b2:c4:03:8f:1c:80:95:bc:c6:9f:d3:c9:e2:46:52:
                    e9:7e:5f:50:2a:ab:a5:3e:f2:19:4b:dd:94:80:96:
                    b9:a5:1f:8e:9a:0b:dc:a5:a8:22:17:49:ac:a2:fe:
                    31:93:37:ac:9e:72:af:bb:54:b2:dc:54:95:8f:9c:
                    f6:b8:42:44:c9:de:a6:25:76:f3:bb:6b:de:35:fd:
                    10:7b:15:aa:95:6a:19:42:87:76:14:1c:21:3f:d5:
                    de:21:87:71:d5:3c:6e:99:44:7f:40:e2:57:e4:14:
                    0a:4b:cf:82:92:f9:21:14:9f:37:21:b2:89:ca:29:
                    d8:c9:51:4f:f2:2b:e2:2b:eb:e9:83:85:a7:28:3b:
                    39:84:8c:f8:66:f9:32:5d:14:4d:e5:e6:96:09:66:
                    ff:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BE:41:1B:5E:CD:5A:DE:74:E4:06:38:DE:14:E2:A7:A4:73:88:36
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131332e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:e6:85:00:d8:dc:5f:a5:5b:f8:88:4e:d5:1b:12:c6:d1:
         9c:40:be:62:f4:9f:f2:8b:a9:6e:d2:c5:97:b7:32:b2:b0:5d:
         f2:12:01:cd:f9:f8:25:4c:f0:6b:58:93:3a:1f:79:b2:0f:6f:
         d3:bd:2d:43:e8:fe:d4:92:9d:e1:bf:41:6d:25:af:36:ff:48:
         4e:49:e1:a9:f2:3b:34:82:66:d1:9a:14:d3:b3:be:ae:7f:28:
         6d:75:10:c3:f0:83:cc:f6:ca:b2:8f:0a:1d:52:7e:a2:34:7c:
         be:a3:7c:35:3f:af:ad:e8:a7:e3:25:2c:0c:ce:41:c4:58:d4:
         e7:52:13:33:de:a3:ab:0f:43:3e:f5:68:d3:f5:6b:c4:30:35:
         d1:1a:cb:fa:c4:c1:d3:c4:1f:97:81:c1:b7:2b:74:da:89:15:
         b3:ce:ad:df:16:92:fd:49:af:40:98:fb:52:1c:0a:3a:e5:4d:
         ed:67:54:60:16:dc:3f:e0:a4:5b:ce:65:eb:ab:c8:e4:a6:e9:
         19:c7:b2:1e:b3:3a:9d:24:a9:af:77:64:8d:c3:15:20:2c:4a:
         95:79:e0:07:2a:d2:3c:ca:16:c6:6d:07:50:f7:9f:30:ee:20:
         3c:dc:f6:d8:55:48:2b:f1:c2:d4:bf:db:c7:96:8b:d0:6d:a5:
         c2:44:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:08 2025 by rpki-client