Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3234203d3e203532353939.roa
File:                     3136382e3139372e33322e302f32322d3234203d3e203532353939.roa (raw, json)
Hash identifier:          9gaXKnFILd/0nYLXr0VzJbpnUOP1rNrhhbCdiMt4b9A=
Subject key identifier:   EC:81:E7:5F:F3:90:67:37:E9:D9:51:FA:98:04:13:55:43:43:9B:59
Certificate issuer:       /CN=AC8D34233BD06486497C1965CF0CF1CFDF6A581B
Certificate serial:       6AEC2060EBD977D22E8E160A9E4AFC0CD71DE41C
Authority key identifier: AC:8D:34:23:3B:D0:64:86:49:7C:19:65:CF:0C:F1:CF:DF:6A:58:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3234203d3e203532353939.roa
Signing time:             Wed 26 Aug 2026 12:47:48 +0000
ROA not before:           Wed 26 Aug 2026 12:42:48 +0000
ROA not after:            Wed 25 Aug 2027 12:47:48 +0000
asID:                     52599
IP address blocks:        168.197.32.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ec:20:60:eb:d9:77:d2:2e:8e:16:0a:9e:4a:fc:0c:d7:1d:e4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8D34233BD06486497C1965CF0CF1CFDF6A581B
        Validity
            Not Before: Aug 26 12:42:48 2026 GMT
            Not After : Aug 25 12:47:48 2027 GMT
        Subject: CN=EC81E75FF3906737E9D951FA9804135543439B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:77:cf:59:f0:d6:90:2d:18:f5:fc:d0:29:
                    b7:d3:70:03:65:70:26:12:61:dc:ac:ec:a3:39:cb:
                    c8:9d:1a:c5:e2:e9:9e:ec:12:6b:73:ea:2d:f1:6e:
                    4f:d4:8c:97:56:fe:e8:7f:e5:0a:82:6d:1b:db:73:
                    7b:00:08:cf:2c:59:fa:fe:8e:06:6b:ca:1d:63:7b:
                    cb:65:b0:ca:7b:46:4c:be:90:10:52:24:71:89:37:
                    83:26:8a:b4:e3:4b:d5:ba:8d:fa:05:f3:d9:04:5d:
                    83:7a:e6:32:ae:25:b4:1c:d0:c9:f4:09:e5:5e:34:
                    3c:35:ed:4d:54:08:7e:e6:21:f7:e9:6e:99:d4:cf:
                    95:d8:26:69:eb:f1:83:83:ae:12:2c:d7:4b:0f:f3:
                    c7:cb:0a:5c:3d:c6:fa:15:3a:9f:56:1c:7e:13:a9:
                    a2:77:56:1a:00:d4:4e:2d:32:e1:c8:c7:6c:d9:41:
                    e6:ce:78:f4:eb:16:0b:dc:cf:42:d3:3b:62:32:4c:
                    97:dc:bb:f3:80:44:10:d9:40:ce:53:6f:70:17:6f:
                    45:e6:03:6f:8d:f7:2c:11:fb:dc:9b:2f:10:c3:31:
                    d0:ad:e2:55:e4:da:1d:21:11:31:59:cd:eb:1d:27:
                    ee:81:a7:fb:e7:90:51:f6:9f:05:4c:b7:5c:7a:19:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:E7:5F:F3:90:67:37:E9:D9:51:FA:98:04:13:55:43:43:9B:59
            X509v3 Authority Key Identifier:
                keyid:AC:8D:34:23:3B:D0:64:86:49:7C:19:65:CF:0C:F1:CF:DF:6A:58:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3136382e3139372e33322e302f32322d3234203d3e203532353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:95:37:27:fc:12:14:95:f5:34:c5:aa:39:73:e3:45:c0:b6:
         fe:1d:9e:6d:74:8e:76:14:93:e2:8c:29:62:94:4c:2d:e2:20:
         b7:62:89:0f:88:43:98:87:c6:1c:56:d8:77:1e:fc:e4:9e:1b:
         22:71:a8:ac:ff:af:6f:8e:03:e3:3e:98:4c:d3:10:35:70:27:
         3a:56:4a:34:3b:1f:25:41:1c:02:f8:a3:0e:70:61:c2:67:03:
         02:9a:73:be:8d:d4:9c:6d:24:98:1a:87:e9:31:79:25:86:c2:
         5a:56:18:7d:a3:ea:7e:81:ab:66:a4:ab:67:f7:7a:22:64:05:
         bf:0a:31:57:71:0f:40:90:fd:41:5e:9a:f6:f5:2d:28:c9:a6:
         02:f3:7a:ad:58:7b:e7:d6:6e:da:26:8a:58:bb:c5:58:69:85:
         47:7f:f4:91:d7:67:ad:d3:7a:98:ab:8c:64:69:b2:86:62:4c:
         54:fe:fb:dc:7e:33:f9:cb:a9:68:d7:4a:5d:fa:70:74:84:f2:
         75:c9:1c:8a:b5:d3:ea:b4:66:38:9f:c3:81:54:83:01:89:d5:
         c3:e5:c4:6c:f8:1b:d5:70:f6:79:7b:f6:92:1c:cc:ce:36:b3:
         ed:06:f9:6c:ca:b7:c6:26:37:70:c4:fe:69:40:47:59:de:73:
         37:27:f6:ae
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUauwgYOvZd9IujhYKnkr8DNcd5BwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM4RDM0MjMzQkQwNjQ4NjQ5N0MxOTY1Q0YwQ0YxQ0ZE
RjZBNTgxQjAeFw0yNjA4MjYxMjQyNDhaFw0yNzA4MjUxMjQ3NDhaMDMxMTAvBgNV
BAMTKEVDODFFNzVGRjM5MDY3MzdFOUQ5NTFGQTk4MDQxMzU1NDM0MzlCNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd73fPWfDWkC0Y9fzQKbfTcANl
cCYSYdys7KM5y8idGsXi6Z7sEmtz6i3xbk/UjJdW/uh/5QqCbRvbc3sACM8sWfr+
jgZryh1je8tlsMp7Rky+kBBSJHGJN4MmirTjS9W6jfoF89kEXYN65jKuJbQc0Mn0
CeVeNDw17U1UCH7mIffpbpnUz5XYJmnr8YODrhIs10sP88fLClw9xvoVOp9WHH4T
qaJ3VhoA1E4tMuHIx2zZQebOePTrFgvcz0LTO2IyTJfcu/OARBDZQM5Tb3AXb0Xm
A2+N9ywR+9ybLxDDMdCt4lXk2h0hETFZzesdJ+6Bp/vnkFH2nwVMt1x6GX3xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7IHnX/OQZzfp2VH6mAQTVUNDm1kwHwYDVR0j
BBgwFoAUrI00IzvQZIZJfBllzwzxz99qWBswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRteTVpdEpUVFVqYUJ6QktrTUhpRnlFZG5XOW9qYzVtbkNyenZSWWhW
bkEvMC9BQzhEMzQyMzNCRDA2NDg2NDk3QzE5NjVDRjBDRjFDRkRGNkE1ODFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOEQzNDIzM0JEMDY0ODY0
OTdDMTk2NUNGMENGMUNGREY2QTU4MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkbXk1aXRKVFRVamFCekJLa01IaUZ5RWRuVzlvamM1bW5Dcnp2UlloVm5BLzAv
MzEzNjM4MmUzMTM5MzcyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqMUgMA0GCSqGSIb3DQEBCwUAA4IBAQBHlTcn/BIU
lfU0xao5c+NFwLb+HZ5tdI52FJPijClilEwt4iC3YokPiEOYh8YcVth3Hvzknhsi
cais/69vjgPjPphM0xA1cCc6Vko0Ox8lQRwC+KMOcGHCZwMCmnO+jdScbSSYGofp
MXklhsJaVhh9o+p+gatmpKtn93oiZAW/CjFXcQ9AkP1BXpr29S0oyaYC83qtWHvn
1m7aJopYu8VYaYVHf/SR12et03qYq4xkabKGYkxU/vvcfjP5y6lo10pd+nB0hPJ1
yRyKtdPqtGY4n8OBVIMBidXD5cRs+BvVcPZ5e/aSHMzONrPtBvlsyrfGJjdwxP5p
QEdZ3nM3J/au
-----END CERTIFICATE-----