Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131352e302f32342d3234203d3e20323632383132.roa
File:                     3138362e3235302e3131352e302f32342d3234203d3e20323632383132.roa (raw, json)
Hash identifier:          penOrSGBj8kH2CjKDMZeSgBpEcQT66H60JAVF+Cor0A=
Subject key identifier:   68:86:A5:5E:DB:09:0E:04:1E:3E:51:BF:2E:FE:9C:71:C6:7B:FF:6F
Certificate issuer:       /CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
Certificate serial:       722E01698221B9C29739D81FEB78F60AF18764FA
Authority key identifier: A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131352e302f32342d3234203d3e20323632383132.roa
Signing time:             Mon 12 Aug 2024 14:40:39 +0000
ROA not before:           Mon 12 Aug 2024 14:35:39 +0000
ROA not after:            Mon 11 Aug 2025 14:40:39 +0000
asID:                     262812
IP address blocks:        186.250.115.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:01:69:82:21:b9:c2:97:39:d8:1f:eb:78:f6:0a:f1:87:64:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C40D851EE06F7454DE9587BD8710CA3EAB8536
        Validity
            Not Before: Aug 12 14:35:39 2024 GMT
            Not After : Aug 11 14:40:39 2025 GMT
        Subject: CN=6886A55EDB090E041E3E51BF2EFE9C71C67BFF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:17:70:3f:d3:1f:49:36:bb:8e:d2:c0:7e:
                    43:14:1a:f5:45:fb:79:8d:92:7f:8b:2f:32:8f:93:
                    72:66:12:b1:56:b9:d8:17:ab:1c:4f:8b:f4:e6:c5:
                    2d:77:4c:1e:a8:fc:e9:02:c5:d9:a5:ab:df:89:7d:
                    22:f3:64:9b:25:26:f3:f2:e8:f6:78:6e:e0:30:1c:
                    fc:97:c1:5e:76:a1:aa:d3:25:9b:65:0c:a9:6e:87:
                    ee:0d:dd:c0:49:a5:23:71:2d:ce:10:97:a1:6d:80:
                    cd:2a:d4:f4:87:60:d3:a8:4b:fd:78:31:a5:fb:9a:
                    d5:4c:05:1b:d9:f4:ba:49:17:cb:32:cd:dd:08:0d:
                    ef:3d:01:dd:c5:81:b5:0b:ed:2b:77:fb:87:e0:26:
                    55:76:40:0e:66:de:3b:1b:e6:0f:ab:81:a8:69:27:
                    3b:d1:e2:39:eb:37:56:4f:61:e5:1b:67:0a:7f:1d:
                    cf:25:33:7a:b1:36:80:74:1f:d1:8b:9f:17:a3:1e:
                    bd:6f:ee:f9:61:6b:03:78:73:d3:5d:40:e3:aa:7d:
                    a9:c7:24:68:bc:73:6e:9a:f7:d1:c8:51:f1:81:84:
                    c9:3c:0e:e2:9b:da:f9:bb:bb:80:1a:2b:46:01:10:
                    f5:ec:46:f9:56:5f:a2:bf:dd:eb:c1:03:a9:5f:5e:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:A5:5E:DB:09:0E:04:1E:3E:51:BF:2E:FE:9C:71:C6:7B:FF:6F
            X509v3 Authority Key Identifier:
                keyid:A8:C4:0D:85:1E:E0:6F:74:54:DE:95:87:BD:87:10:CA:3E:AB:85:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8C40D851EE06F7454DE9587BD8710CA3EAB8536.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrpdCF5TjQUgtB5vby4dLiMSnEEF1kWB38rr63w6Lwfw/0/3138362e3235302e3131352e302f32342d3234203d3e20323632383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:33:e8:34:e6:b7:63:f4:c8:f1:77:2b:d0:72:a0:44:01:65:
         0b:5c:0e:65:27:a8:0e:5b:59:44:b8:02:62:33:70:b1:2c:1c:
         a8:eb:a3:dd:ae:66:c3:02:53:8b:65:0b:f0:f0:ed:70:5e:16:
         c1:6c:8a:06:e1:3d:d6:ee:a7:c1:7c:64:0d:0d:65:80:f9:f7:
         7f:95:ac:cd:1d:82:58:fe:34:bf:1f:63:1e:e2:1c:71:3f:f7:
         f2:a5:13:ca:6c:6f:c5:84:8b:1a:84:71:4e:29:77:68:76:13:
         f1:71:5e:42:a0:0b:59:02:98:4a:28:1b:a9:1e:2e:f7:a3:73:
         17:3f:9d:ac:62:6c:2a:88:7a:70:83:7a:88:89:f6:6c:ac:c7:
         fa:21:71:86:7d:73:f5:94:6f:9b:64:bd:23:a0:85:e3:b0:b6:
         19:41:9e:3c:a5:cb:f0:cb:c1:de:99:6b:bd:62:72:87:80:4a:
         aa:1e:cc:be:27:37:9d:25:0e:6d:0a:a3:43:4f:b6:61:53:36:
         b0:fd:15:c7:d9:95:f4:b5:a8:0d:54:28:56:31:e1:34:46:58:
         69:a3:ab:72:16:86:56:42:52:97:52:75:bd:99:69:42:f6:55:
         a3:6d:67:68:33:57:83:cb:d2:d2:a2:37:88:e5:44:21:73:41:
         e3:ee:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:33 2025 by rpki-client