Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232372e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232372e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          bAyOt0ntD438+IoMtCbdUOSJ14GqZKj1orFyGOCEv1Q=
Subject key identifier:   67:E6:0D:B2:4D:7E:15:E3:A2:DF:0A:C8:2F:BE:9E:D1:B4:88:A1:6B
Certificate issuer:       /CN=E337E952CD61843D93F2609C931B6C48D03C6E58
Certificate serial:       04131A371F6A99CFA3818D9CD1EA6D0E50165FCD
Authority key identifier: E3:37:E9:52:CD:61:84:3D:93:F2:60:9C:93:1B:6C:48:D0:3C:6E:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E337E952CD61843D93F2609C931B6C48D03C6E58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232372e302f32342d3234203d3e20323638323931.roa
Signing time:             Fri 22 May 2026 13:41:57 +0000
ROA not before:           Fri 22 May 2026 13:36:57 +0000
ROA not after:            Fri 21 May 2027 13:41:57 +0000
asID:                     268291
IP address blocks:        45.237.227.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:13:1a:37:1f:6a:99:cf:a3:81:8d:9c:d1:ea:6d:0e:50:16:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E337E952CD61843D93F2609C931B6C48D03C6E58
        Validity
            Not Before: May 22 13:36:57 2026 GMT
            Not After : May 21 13:41:57 2027 GMT
        Subject: CN=67E60DB24D7E15E3A2DF0AC82FBE9ED1B488A16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:33:2c:39:cc:4a:89:0a:a8:ed:38:40:42:
                    68:aa:be:04:57:13:a0:f0:6f:44:c0:6e:4e:93:17:
                    72:ae:7d:8b:90:38:f5:d2:3c:59:e6:a8:3f:97:a4:
                    de:d5:c9:af:2b:4b:ff:49:25:a6:e1:a1:12:ca:06:
                    de:1a:7b:68:9f:d8:d1:ec:57:6d:a8:80:97:0a:66:
                    7b:6c:91:13:b2:35:6e:82:35:75:dc:47:4c:0d:ba:
                    f8:ce:e6:66:59:be:07:3f:81:27:d9:3c:43:b4:83:
                    67:54:68:f3:f1:c4:fb:45:11:bc:43:d3:2e:72:43:
                    54:c8:04:34:6d:4a:d4:93:ca:0a:e3:6d:c1:36:7b:
                    c3:4e:d8:fb:1b:56:2c:19:6b:a0:c9:b0:bf:81:95:
                    0f:4c:f8:98:29:88:18:23:46:8e:ba:10:a7:b7:19:
                    09:ef:33:f9:38:06:ab:8c:03:bb:85:1c:17:52:d7:
                    58:b3:43:29:cd:bc:44:8a:fe:6f:c7:de:d3:21:73:
                    3d:f3:8b:5f:40:2c:12:c1:b9:f6:ff:5c:0b:c2:a5:
                    dc:9e:de:b9:19:a1:f4:a8:e1:d0:c0:f9:8d:73:b0:
                    ee:c0:48:18:b8:27:e2:a4:da:ed:94:fd:f5:9d:fb:
                    da:44:80:fa:64:72:30:25:3d:56:00:fe:82:35:f8:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:0D:B2:4D:7E:15:E3:A2:DF:0A:C8:2F:BE:9E:D1:B4:88:A1:6B
            X509v3 Authority Key Identifier:
                keyid:E3:37:E9:52:CD:61:84:3D:93:F2:60:9C:93:1B:6C:48:D0:3C:6E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/E337E952CD61843D93F2609C931B6C48D03C6E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E337E952CD61843D93F2609C931B6C48D03C6E58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/0/34352e3233372e3232372e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:9e:74:75:d6:cd:4d:0f:71:6d:8c:08:2a:dd:b1:7b:2b:
         a8:28:28:62:14:da:01:71:c0:84:5d:e4:d2:ed:c6:60:d4:25:
         46:de:2b:4c:c4:e1:e2:5a:a3:0e:0a:c3:6b:3c:26:26:53:9f:
         8a:4b:3c:97:0f:94:91:a5:95:1e:51:ae:00:7f:02:d0:48:f8:
         14:af:a5:10:00:7b:a1:fa:2c:9d:c2:c6:65:61:67:86:9d:8f:
         bf:b5:bf:6e:24:06:df:f0:de:7d:55:31:4b:9c:3c:df:06:c3:
         69:10:9f:97:2e:e2:4c:b6:41:cd:66:2d:da:c6:f6:12:1a:0c:
         6f:44:bf:a4:1f:e8:e2:8b:40:a8:89:9b:7f:f9:2f:37:bb:c8:
         98:10:36:67:cc:c9:0d:de:9b:a2:9c:0c:a4:bb:c2:00:57:db:
         10:fc:a8:72:76:f0:0c:0d:31:f9:a6:54:72:06:fb:02:50:9d:
         cc:2b:65:d3:20:1f:eb:47:e4:d5:72:33:6a:69:36:56:0b:c1:
         4b:60:a4:8e:a6:a9:45:86:2f:f4:93:3d:7a:07:40:bb:24:e9:
         5a:4f:a9:5d:7b:c5:5a:1d:e2:11:74:80:bf:23:30:e8:27:d3:
         82:49:7a:9b:6b:28:fd:02:a9:b0:5a:4f:9a:19:4e:f2:40:f0:
         64:c4:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:41 2026 by rpki-client