Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa
File:                     3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa (raw, json)
Hash identifier:          bwy3T898+c0i4Z18RoyuhKZ1sPInCzUxdYQF3YkbBNY=
Subject key identifier:   EA:B4:7A:34:29:97:A8:11:9B:F1:12:C3:8A:72:42:CA:C1:F3:5A:DE
Certificate issuer:       /CN=243A1884366E9900B679E354E56993980B33B31A
Certificate serial:       3FB37334E9C87658729B5A41357DDDCA58498CBD
Authority key identifier: 24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa
Signing time:             Thu 07 Nov 2024 14:20:57 +0000
ROA not before:           Thu 07 Nov 2024 14:15:57 +0000
ROA not after:            Thu 06 Nov 2025 14:20:57 +0000
asID:                     270630
IP address blocks:        177.70.244.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b3:73:34:e9:c8:76:58:72:9b:5a:41:35:7d:dd:ca:58:49:8c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243A1884366E9900B679E354E56993980B33B31A
        Validity
            Not Before: Nov  7 14:15:57 2024 GMT
            Not After : Nov  6 14:20:57 2025 GMT
        Subject: CN=EAB47A342997A8119BF112C38A7242CAC1F35ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:6c:0f:5e:e3:b1:e1:8c:96:d2:87:ca:d4:
                    a6:7a:89:49:20:4c:7d:a4:da:42:80:64:35:11:a1:
                    93:48:81:7f:63:60:e9:71:f8:00:9d:f3:7e:99:20:
                    f3:69:17:8f:83:ed:68:36:a1:be:5a:f0:f7:c7:f3:
                    5b:64:3b:d9:1d:7a:a2:4b:34:1d:9f:6d:66:c2:c9:
                    bf:0d:f2:92:85:61:86:8a:93:02:1b:57:c4:9a:d5:
                    c4:c3:2f:6f:f7:61:62:d6:1a:05:bb:4e:89:24:0d:
                    96:d1:f9:5e:a6:e3:2f:8f:eb:4c:27:13:14:73:30:
                    95:22:8f:cd:a0:33:26:a6:7d:7b:82:21:1d:ab:4a:
                    f6:9d:c7:5e:e9:fb:91:02:93:57:98:e5:bd:4e:f3:
                    4c:4a:6a:69:ae:35:92:a3:9e:41:6f:03:a3:81:e1:
                    20:47:08:47:a6:af:ad:a7:0b:b3:84:0d:32:7e:5f:
                    f7:ae:34:87:5b:25:08:05:63:82:12:23:fe:0b:f7:
                    2f:35:42:37:6e:9c:59:c1:6a:29:8d:9b:6a:ad:c5:
                    36:45:43:e6:8e:78:91:6a:3e:9b:e2:78:1c:a2:d3:
                    c1:dc:38:33:73:bc:26:ef:9a:5c:cf:3c:03:b9:70:
                    50:5a:8e:ca:7d:f7:ee:7e:4d:16:f8:26:48:84:44:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B4:7A:34:29:97:A8:11:9B:F1:12:C3:8A:72:42:CA:C1:F3:5A:DE
            X509v3 Authority Key Identifier:
                keyid:24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32332d3234203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:2c:fb:f1:8e:ec:13:83:8c:65:a2:14:7d:ae:20:15:67:
         e5:78:c9:95:ad:42:c8:07:01:75:7c:7b:0e:20:4f:14:a3:9c:
         4d:b0:e8:64:a1:b0:4f:77:1b:93:87:67:a9:9d:92:61:06:86:
         dc:b8:b6:b7:93:3a:0a:74:89:17:b6:23:13:46:68:1f:12:6e:
         08:ec:47:97:3c:ee:02:7e:a8:c2:3a:4f:d1:8d:0c:91:78:2d:
         40:bc:a8:c8:ce:8c:9e:49:e8:49:93:c7:86:84:69:e2:88:e9:
         f4:6d:aa:c6:ce:4f:d7:90:e6:d0:cc:49:4d:0f:32:8c:d6:0d:
         73:4f:c7:46:87:33:91:0b:59:6a:96:33:75:91:e6:c7:6c:a2:
         36:24:a2:8a:d2:f7:f1:33:31:3b:34:71:8c:80:0d:71:e1:61:
         22:8e:d2:fe:09:9d:e5:3c:ad:2f:0e:3f:14:33:fa:bc:b6:05:
         90:5f:7f:2f:cf:8e:86:fb:13:20:b6:78:93:a9:11:f4:e0:f2:
         f1:22:81:8b:8e:d4:e9:25:9e:e1:a0:6a:90:e9:96:cf:77:38:
         69:08:97:93:c6:17:43:aa:df:59:4b:01:9d:c6:ba:b8:ef:8c:
         4e:39:ee:0b:a8:16:c6:96:d0:79:d0:cf:14:07:7f:2d:a1:7d:
         77:43:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:22 2025 by rpki-client