Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
File:                     34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa (raw, json)
Hash identifier:          sBBAYYuJFUjKyOLWTNHGKoSiTo1lQJ2AOdScADRPCMU=
Subject key identifier:   53:FA:14:62:2C:1A:6E:4E:71:7C:D0:7E:70:6F:FB:4E:C3:AE:D0:53
Certificate issuer:       /CN=E337E952CD61843D93F2609C931B6C48D03C6E58
Certificate serial:       1534677611741CF18EBFFE42AD7D01C5A0F279EB
Authority key identifier: E3:37:E9:52:CD:61:84:3D:93:F2:60:9C:93:1B:6C:48:D0:3C:6E:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E337E952CD61843D93F2609C931B6C48D03C6E58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa
Signing time:             Fri 22 May 2026 13:41:53 +0000
ROA not before:           Fri 22 May 2026 13:36:53 +0000
ROA not after:            Fri 21 May 2027 13:41:53 +0000
asID:                     268291
IP address blocks:        45.237.224.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:34:67:76:11:74:1c:f1:8e:bf:fe:42:ad:7d:01:c5:a0:f2:79:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E337E952CD61843D93F2609C931B6C48D03C6E58
        Validity
            Not Before: May 22 13:36:53 2026 GMT
            Not After : May 21 13:41:53 2027 GMT
        Subject: CN=53FA14622C1A6E4E717CD07E706FFB4EC3AED053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:07:58:22:f7:40:87:92:97:28:c2:4d:b8:
                    f9:27:c6:ad:80:fe:52:4b:e7:bc:0a:2d:ad:90:e6:
                    a5:d7:d0:e1:ef:2b:1d:4e:d6:ce:48:3e:2d:31:8a:
                    8c:f4:17:87:52:50:d4:78:cb:a2:58:9c:eb:91:56:
                    19:a9:18:45:1d:02:84:77:92:af:3b:2a:1c:10:ba:
                    c4:a4:e8:5e:5d:38:58:b0:1a:c1:09:43:f0:e9:8e:
                    9b:6a:89:1c:c7:3c:bc:d3:0b:b0:12:bc:21:6b:35:
                    43:40:10:29:05:08:e3:c9:2f:17:90:28:19:1d:26:
                    c6:f6:f3:41:da:40:93:c9:7e:ca:8e:68:05:90:34:
                    93:dc:39:f8:13:a7:65:6b:5e:d9:74:12:71:6d:d1:
                    86:bf:69:c2:9c:69:b2:15:45:9a:04:85:f9:ac:04:
                    e9:62:dd:25:33:fc:55:1d:36:0b:f0:f5:49:d5:d6:
                    95:f9:b3:6d:48:4d:b1:33:1d:8c:0a:dc:75:67:b6:
                    bb:c1:df:e1:eb:a3:42:f8:2e:87:20:e8:92:b9:f2:
                    18:bb:c8:0b:3f:08:e0:e1:54:a6:28:33:d4:3c:b2:
                    4a:4f:4c:86:ac:a0:f8:8f:0c:08:2c:c6:a3:8c:14:
                    e5:56:c3:fd:d3:62:02:93:f2:0b:f9:7a:1c:05:15:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FA:14:62:2C:1A:6E:4E:71:7C:D0:7E:70:6F:FB:4E:C3:AE:D0:53
            X509v3 Authority Key Identifier:
                keyid:E3:37:E9:52:CD:61:84:3D:93:F2:60:9C:93:1B:6C:48:D0:3C:6E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/E337E952CD61843D93F2609C931B6C48D03C6E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E337E952CD61843D93F2609C931B6C48D03C6E58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232342e302f32322d3232203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:72:10:a8:34:ac:36:64:e2:de:90:45:85:84:9e:17:11:
         bd:13:c4:2d:cc:29:81:f2:31:f9:be:03:07:da:35:fd:d2:8b:
         3f:48:90:a8:09:b5:c6:8b:98:45:f4:51:18:13:4c:db:7b:66:
         13:9a:cb:b1:25:3f:c3:ad:7e:37:eb:35:4f:2b:f4:d7:bf:0c:
         f3:30:c8:ed:fd:a1:67:ce:ef:da:f5:56:0f:68:0b:3a:4e:98:
         90:84:59:49:59:ba:7e:f8:51:af:d6:d9:80:f9:64:08:cb:b4:
         a0:a7:9d:31:85:f4:8e:18:d3:16:f6:0f:97:97:b0:94:f0:68:
         78:3b:93:3b:c5:4a:b0:58:f4:08:1b:0e:c0:e8:e3:e9:7d:88:
         25:e2:c2:bb:05:b5:55:dc:69:6d:5b:64:3f:38:e8:d0:c0:3d:
         b1:e0:e8:3b:8b:08:c2:1f:42:1f:c7:9d:0b:1b:16:d3:5f:2f:
         20:93:12:dc:09:03:53:21:b5:be:6b:86:ef:49:a8:fc:c9:ef:
         d8:2c:91:2f:53:20:a6:bb:d3:24:d7:1c:db:a6:fb:2d:7d:4c:
         fc:af:b9:e5:86:37:3a:75:2c:2b:c0:88:7d:92:b5:f0:b0:0e:
         61:52:b9:60:73:da:ac:2b:2d:38:b7:33:5a:30:b4:66:05:78:
         57:05:f4:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFTRndhF0HPGOv/5CrX0BxaDyeeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzN0U5NTJDRDYxODQzRDkzRjI2MDlDOTMxQjZDNDhE
MDNDNkU1ODAeFw0yNjA1MjIxMzM2NTNaFw0yNzA1MjExMzQxNTNaMDMxMTAvBgNV
BAMTKDUzRkExNDYyMkMxQTZFNEU3MTdDRDA3RTcwNkZGQjRFQzNBRUQwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsAdYIvdAh5KXKMJNuPknxq2A
/lJL57wKLa2Q5qXX0OHvKx1O1s5IPi0xioz0F4dSUNR4y6JYnOuRVhmpGEUdAoR3
kq87KhwQusSk6F5dOFiwGsEJQ/DpjptqiRzHPLzTC7ASvCFrNUNAECkFCOPJLxeQ
KBkdJsb280HaQJPJfsqOaAWQNJPcOfgTp2VrXtl0EnFt0Ya/acKcabIVRZoEhfms
BOli3SUz/FUdNgvw9UnV1pX5s21ITbEzHYwK3HVntrvB3+Hro0L4Locg6JK58hi7
yAs/CODhVKYoM9Q8skpPTIasoPiPDAgsxqOMFOVWw/3TYgKT8gv5ehwFFQyRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU/oUYiwabk5xfNB+cG/7TsOu0FMwHwYDVR0j
BBgwFoAU4zfpUs1hhD2T8mCckxtsSNA8blgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMC9FMzM3RTk1MkNENjE4NDNEOTNGMjYwOUM5MzFCNkM0OEQwM0M2RTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMzdFOTUyQ0Q2MTg0M0Q5
M0YyNjA5QzkzMUI2QzQ4RDAzQzZFNTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzAv
MzQzNTJlMzIzMzM3MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7eAwDQYJKoZIhvcNAQELBQADggEBAHoWchCo
NKw2ZOLekEWFhJ4XEb0TxC3MKYHyMfm+AwfaNf3Siz9IkKgJtcaLmEX0URgTTNt7
ZhOay7ElP8OtfjfrNU8r9Ne/DPMwyO39oWfO79r1Vg9oCzpOmJCEWUlZun74Ua/W
2YD5ZAjLtKCnnTGF9I4Y0xb2D5eXsJTwaHg7kzvFSrBY9AgbDsDo4+l9iCXiwrsF
tVXcaW1bZD846NDAPbHg6DuLCMIfQh/HnQsbFtNfLyCTEtwJA1Mhtb5rhu9JqPzJ
79gskS9TIKa70yTXHNum+y19TPyvueWGNzp1LCvAiH2StfCwDmFSuWBz2qwrLTi3
M1owtGYFeFcF9EQ=
-----END CERTIFICATE-----
Generated at Sun May 24 15:29:38 2026 by rpki-client