Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
File:                     3137302e3233312e38382e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier:          k5yC9/XWU4pZxQJU7c48yR8NXWXoJLQVUOIRH2e7SGc=
Subject key identifier:   63:29:FD:73:58:F4:00:82:8E:D7:26:2C:93:54:83:4A:3F:1D:84:38
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       0F85790608BC76BA3912411ADD23167BE503B381
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa
Signing time:             Thu 09 May 2024 13:41:00 +0000
ROA not before:           Thu 09 May 2024 13:36:00 +0000
ROA not after:            Thu 08 May 2025 13:41:00 +0000
asID:                     53196
IP address blocks:        170.231.88.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:85:79:06:08:bc:76:ba:39:12:41:1a:dd:23:16:7b:e5:03:b3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: May  9 13:36:00 2024 GMT
            Not After : May  8 13:41:00 2025 GMT
        Subject: CN=6329FD7358F400828ED7262C9354834A3F1D8438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:ca:26:d5:75:5d:76:a9:8a:01:f9:f9:06:
                    e4:8c:76:2e:6e:13:67:1c:96:49:11:7d:7c:5f:47:
                    17:21:8c:8e:6b:fe:5e:a5:0e:99:17:35:9a:d8:f8:
                    75:9a:12:d2:fb:9c:5b:ce:93:29:e3:82:7c:f4:86:
                    32:29:66:dd:b5:ba:c2:4e:56:85:24:67:85:48:97:
                    bb:04:2a:76:d7:a9:de:6b:20:b6:28:47:a7:8c:c8:
                    a1:fa:f0:d3:ad:6b:91:33:9a:d8:e9:7c:43:6b:b0:
                    91:28:da:24:b4:9b:08:79:04:97:bf:81:bc:33:f3:
                    50:10:ca:54:97:84:d1:f8:d5:96:84:a6:e9:b7:5d:
                    8b:8b:e5:5f:7b:47:9b:46:2e:d9:82:0b:87:b0:f7:
                    16:d9:65:07:aa:d2:eb:57:ce:83:c5:55:61:f3:65:
                    08:76:3e:31:a6:da:76:78:66:67:e5:d6:e4:02:9b:
                    a6:c9:b7:4a:49:d8:ba:ab:75:7c:56:ff:c2:bb:aa:
                    5d:c8:54:a2:4b:86:64:7a:7b:47:16:a1:c9:cc:85:
                    2a:24:4f:58:1d:e1:ac:20:7e:3c:a9:06:96:18:87:
                    09:2f:7e:36:90:a8:5f:de:d2:c8:c4:a5:4a:86:79:
                    fc:48:62:9e:cf:39:b0:fb:98:b8:ab:1e:bd:58:db:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:29:FD:73:58:F4:00:82:8E:D7:26:2C:93:54:83:4A:3F:1D:84:38
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3137302e3233312e38382e302f32322d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:9e:c6:39:fa:f5:4b:d7:db:e3:c7:37:34:72:32:90:49:
         bb:d1:1b:d1:06:d1:1b:fb:4a:fb:16:db:6d:7a:57:68:bd:aa:
         93:bf:ba:fd:f6:78:f2:16:4f:3b:09:9f:18:71:1c:ac:e7:7b:
         48:f9:04:32:92:ea:4c:56:8b:15:a0:b5:d4:9f:3e:c5:cc:0a:
         72:99:00:8c:c3:be:d1:6e:d8:f7:43:9a:3b:41:9a:d3:29:a5:
         a0:2d:ec:e9:89:bf:65:a5:86:31:8c:55:8f:f0:9e:d5:57:ae:
         11:9e:36:40:b4:bb:08:a0:4f:8f:38:a6:fd:1f:61:61:da:3c:
         e2:5f:61:8d:0e:ef:de:06:4b:51:2c:32:8a:12:23:0f:6e:d2:
         bd:09:d3:84:0a:2d:c5:1e:80:1d:fe:45:7f:aa:30:01:66:fe:
         9d:01:a2:c7:83:27:07:1b:76:e3:88:78:21:cc:f5:49:9c:30:
         3b:0f:bf:3f:3c:78:ac:16:58:5d:cb:26:9a:16:87:b1:ef:f0:
         7c:95:9d:91:94:fb:ba:a4:f9:b1:f1:af:eb:59:af:53:d7:1d:
         c0:3c:8e:13:f9:3c:4c:5b:e8:6f:aa:2f:ab:e9:c5:6b:33:d0:
         0f:e2:a7:92:ff:69:43:97:25:05:81:e0:e5:fa:3e:e2:43:da:
         d8:0e:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:35 2025 by rpki-client