Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3332203d3e20323638303535.roa
File:                     34352e3136382e3131322e302f32322d3332203d3e20323638303535.roa (raw, json)
Hash identifier:          3VwRK6UDSY7bdpxp2w/Xdlq5L9o4YmY8x9YjR+DZ1GE=
Subject key identifier:   08:A7:48:9F:2B:81:36:C4:05:DA:11:36:5F:F5:15:05:3F:10:69:4E
Certificate issuer:       /CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
Certificate serial:       68DA2906257441C321435F1033A74DBB543C047F
Authority key identifier: D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3332203d3e20323638303535.roa
Signing time:             Sun 09 Feb 2025 17:16:23 +0000
ROA not before:           Sun 09 Feb 2025 17:11:23 +0000
ROA not after:            Sun 08 Feb 2026 17:16:23 +0000
asID:                     268055
IP address blocks:        45.168.112.0/22 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:da:29:06:25:74:41:c3:21:43:5f:10:33:a7:4d:bb:54:3c:04:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D37C4A3F93D03DD215E03306519BD8C784C71CB4
        Validity
            Not Before: Feb  9 17:11:23 2025 GMT
            Not After : Feb  8 17:16:23 2026 GMT
        Subject: CN=08A7489F2B8136C405DA11365FF515053F10694E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:79:87:b6:27:ba:5b:62:d7:5c:8e:bd:68:
                    b8:06:61:9b:b5:c9:db:87:0f:5d:84:17:7d:39:af:
                    ec:b6:39:ec:02:4e:9b:74:6c:2f:40:61:e2:88:b9:
                    7c:f3:02:df:da:40:2e:37:74:fd:7b:46:9a:25:2e:
                    19:a3:8d:cd:85:d1:7a:51:7d:cb:da:ed:0e:19:46:
                    b2:06:e4:fe:3b:81:82:35:0c:cf:80:7c:da:1e:1c:
                    77:2b:e6:28:fa:7e:91:d3:3e:7f:9c:03:40:f9:d9:
                    10:f2:a8:97:3a:d1:77:36:5e:62:5b:a1:aa:56:a5:
                    1c:fa:73:50:fa:07:c9:df:41:41:41:d3:45:40:d7:
                    f5:01:90:c6:5b:35:e4:5f:2a:65:11:5b:5d:2e:e0:
                    4d:ab:05:0d:6e:dc:98:2b:4b:89:26:99:d9:11:57:
                    04:da:c5:6f:9f:c1:4e:b0:19:2d:29:4c:1e:ba:9d:
                    90:7c:6a:4b:d4:2f:72:94:2c:68:72:88:08:c9:9e:
                    9e:e2:85:e6:58:a0:40:4e:35:91:51:86:46:e5:4c:
                    db:9f:2a:75:c0:8a:bf:74:5f:e2:b4:ae:eb:92:be:
                    11:cc:55:f9:21:58:bb:43:af:9e:f8:d9:a6:38:cc:
                    3f:50:0a:a5:37:ff:9f:d4:9f:99:01:50:59:84:36:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:48:9F:2B:81:36:C4:05:DA:11:36:5F:F5:15:05:3F:10:69:4E
            X509v3 Authority Key Identifier:
                keyid:D3:7C:4A:3F:93:D0:3D:D2:15:E0:33:06:51:9B:D8:C7:84:C7:1C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/D37C4A3F93D03DD215E03306519BD8C784C71CB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D37C4A3F93D03DD215E03306519BD8C784C71CB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EewF1fYSNR9JWWnfCx3CC6uAxbxE66PcUFF8ga7NjRZL/0/34352e3136382e3131322e302f32322d3332203d3e20323638303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:8d:98:ba:83:9d:51:39:7d:b5:60:d3:ca:3e:48:63:83:b3:
         7a:75:6e:6b:07:f4:3e:a6:08:2e:e5:81:22:ec:ee:91:55:c1:
         7a:e4:6c:b3:ee:33:eb:d4:fb:ee:68:c3:e4:f3:48:b3:16:61:
         72:bd:1e:97:00:2a:db:e6:9e:36:be:e7:cf:7b:77:84:be:b8:
         7a:b5:ad:ec:f8:45:05:ac:03:18:cb:ec:8b:cb:ee:66:fc:31:
         8b:b8:96:4e:44:f6:05:eb:75:35:ff:ed:e9:4d:bd:0e:f9:bf:
         a5:2e:26:89:b6:74:fa:7d:ed:61:b4:89:fc:80:65:6d:3a:d0:
         52:af:b7:21:25:5d:91:96:1f:fe:d4:0f:a6:0a:cc:17:00:75:
         43:5e:0f:c9:60:da:15:d8:2f:ea:d5:2a:52:8d:ab:7c:76:70:
         b8:ea:1c:c0:62:51:21:aa:b5:73:56:63:d1:f4:a6:90:f2:3b:
         2d:e2:91:b3:ea:cf:c6:bf:c5:ca:f0:b6:14:6b:c8:fe:af:9a:
         b7:a6:75:e7:c5:da:ac:e5:58:82:c8:80:64:9a:44:f0:4c:e1:
         e3:0f:4c:25:cc:15:95:e4:a3:d5:81:38:44:a2:a7:b2:ab:38:
         e7:75:16:65:48:29:a4:a6:88:d1:7f:51:7e:22:61:b2:87:0a:
         ab:89:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:18 2025 by rpki-client