Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32332d3332203d3e20323731353737.roa
File:                     3138312e3233322e3232382e302f32332d3332203d3e20323731353737.roa (raw, json)
Hash identifier:          DaGCoK4v07dXS50ktOFBFsjqaX1WkQCb4m8k0zqWnTQ=
Subject key identifier:   90:7C:9E:93:C7:71:2C:B5:17:15:9A:93:48:F9:E0:21:D4:F4:95:30
Certificate issuer:       /CN=F123104F555ACBDED882CABD933FE8C954781940
Certificate serial:       669D4068D84BAE383BD59525017F09F540638AC6
Authority key identifier: F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32332d3332203d3e20323731353737.roa
Signing time:             Thu 17 Oct 2024 02:10:43 +0000
ROA not before:           Thu 17 Oct 2024 02:05:43 +0000
ROA not after:            Thu 16 Oct 2025 02:10:43 +0000
asID:                     271577
IP address blocks:        181.232.228.0/23 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9d:40:68:d8:4b:ae:38:3b:d5:95:25:01:7f:09:f5:40:63:8a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F123104F555ACBDED882CABD933FE8C954781940
        Validity
            Not Before: Oct 17 02:05:43 2024 GMT
            Not After : Oct 16 02:10:43 2025 GMT
        Subject: CN=907C9E93C7712CB517159A9348F9E021D4F49530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:4b:b0:26:ea:59:63:e1:e6:f7:a3:ff:c1:
                    a2:e3:68:8f:7f:21:63:b2:9f:e5:09:ee:42:17:15:
                    6e:15:0a:04:7f:06:fb:e9:84:f9:e4:62:a3:83:53:
                    ed:bb:e3:52:57:8f:85:7e:29:8d:08:fe:88:e0:83:
                    7e:73:2b:c6:ae:da:8b:fb:9d:be:67:12:c8:44:33:
                    d2:74:20:df:ca:f1:64:20:b2:6e:92:99:75:94:b8:
                    7b:47:cf:42:6d:44:d6:e6:c5:9d:5e:10:36:a2:f1:
                    d6:8c:a1:75:e0:9f:04:59:2e:e0:9b:4d:7b:da:b2:
                    aa:c7:d0:15:35:56:36:7d:41:9d:85:02:46:32:87:
                    0e:8e:d5:df:70:c0:cd:b0:d4:d2:83:21:7a:84:26:
                    d8:18:4e:0b:df:26:e4:85:5a:05:a4:cf:d4:00:d9:
                    15:cd:17:a6:62:b9:43:48:84:13:24:e6:92:5a:0b:
                    af:63:13:62:be:b4:a0:5d:da:59:ba:ac:86:e2:a7:
                    a2:22:1f:39:47:c0:1f:a6:5f:df:24:4f:f1:ec:7d:
                    4c:83:62:06:08:8e:b8:0e:e1:8e:e7:19:99:48:e8:
                    a5:1d:d0:4b:f9:dc:ef:0b:ed:45:24:a9:24:c7:9a:
                    f1:e4:eb:c2:63:71:1a:c0:8e:b7:96:cf:fb:ad:3b:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:9E:93:C7:71:2C:B5:17:15:9A:93:48:F9:E0:21:D4:F4:95:30
            X509v3 Authority Key Identifier:
                keyid:F1:23:10:4F:55:5A:CB:DE:D8:82:CA:BD:93:3F:E8:C9:54:78:19:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/F123104F555ACBDED882CABD933FE8C954781940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F123104F555ACBDED882CABD933FE8C954781940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ezf9ty1Cuy6vSxvR7QZXzBdLy4k25wJ6dHTNx18L1Yn1/0/3138312e3233322e3232382e302f32332d3332203d3e20323731353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:f4:18:a7:cc:bb:d3:08:af:1a:26:40:fc:c3:a5:12:14:
         2c:06:48:e2:3c:e9:1d:f0:9e:a5:50:ef:31:fe:27:51:21:7f:
         61:af:04:d8:e3:1c:2a:8f:f9:61:07:01:8d:79:45:30:57:e5:
         dc:94:f1:b6:f3:a4:23:ad:52:65:80:bc:f1:91:ac:c3:7a:9f:
         4c:76:94:e0:b8:e4:dd:d5:ae:fa:0d:18:a2:cf:ac:07:b0:59:
         26:a8:31:8f:98:eb:2c:fd:22:65:06:f3:97:cb:a9:c6:68:38:
         d3:99:a0:7e:2b:29:8f:6b:82:a3:96:d7:4a:c4:98:23:ca:b4:
         bf:6e:44:9a:f8:ee:5f:45:a6:ad:74:73:36:a1:b4:b5:83:61:
         fa:7b:e0:a6:50:86:df:41:ef:05:ae:0a:3b:3c:96:4d:11:f5:
         3e:08:dd:50:2e:e2:f3:01:49:db:e7:61:01:2b:b0:9e:50:4d:
         21:a6:1e:27:73:df:40:0b:b7:29:2d:38:1d:fe:42:fe:0d:8a:
         d1:31:91:0b:6a:b7:1d:1d:d1:59:1b:68:2e:a8:a7:3b:01:93:
         90:25:6f:51:79:0a:c2:8b:f4:ee:33:02:4e:52:2a:3d:ed:f0:
         90:50:6d:c2:b1:04:fc:78:cc:20:5b:9b:8e:92:8f:d7:ce:e8:
         02:2a:82:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZp1AaNhLrjg71ZUlAX8J9UBjisYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyMzEwNEY1NTVBQ0JERUQ4ODJDQUJEOTMzRkU4Qzk1
NDc4MTk0MDAeFw0yNDEwMTcwMjA1NDNaFw0yNTEwMTYwMjEwNDNaMDMxMTAvBgNV
BAMTKDkwN0M5RTkzQzc3MTJDQjUxNzE1OUE5MzQ4RjlFMDIxRDRGNDk1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrEuwJupZY+Hm96P/waLjaI9/
IWOyn+UJ7kIXFW4VCgR/BvvphPnkYqODU+2741JXj4V+KY0I/ojgg35zK8au2ov7
nb5nEshEM9J0IN/K8WQgsm6SmXWUuHtHz0JtRNbmxZ1eEDai8daMoXXgnwRZLuCb
TXvasqrH0BU1VjZ9QZ2FAkYyhw6O1d9wwM2w1NKDIXqEJtgYTgvfJuSFWgWkz9QA
2RXNF6ZiuUNIhBMk5pJaC69jE2K+tKBd2lm6rIbip6IiHzlHwB+mX98kT/HsfUyD
YgYIjrgO4Y7nGZlI6KUd0Ev53O8L7UUkqSTHmvHk68JjcRrAjreWz/utO4DVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkHyek8dxLLUXFZqTSPngIdT0lTAwHwYDVR0j
BBgwFoAU8SMQT1Vay97Ygsq9kz/oyVR4GUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpmOXR5MUN1eTZ2U3h2UjdRWlh6QmRMeTRrMjV3SjZkSFROeDE4TDFZ
bjEvMC9GMTIzMTA0RjU1NUFDQkRFRDg4MkNBQkQ5MzNGRThDOTU0NzgxOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMjMxMDRGNTU1QUNCREVE
ODgyQ0FCRDkzM0ZFOEM5NTQ3ODE5NDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6Zjl0eTFDdXk2dlN4dlI3UVpYekJkTHk0azI1d0o2ZEhUTngxOEwxWW4xLzAv
MzEzODMxMmUzMjMzMzIyZTMyMzIzODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMy
MzczMTM1MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXo5DANBgkqhkiG9w0BAQsFAAOCAQEAQhv0
GKfMu9MIrxomQPzDpRIULAZI4jzpHfCepVDvMf4nUSF/Ya8E2OMcKo/5YQcBjXlF
MFfl3JTxtvOkI61SZYC88ZGsw3qfTHaU4Ljk3dWu+g0Yos+sB7BZJqgxj5jrLP0i
ZQbzl8upxmg405mgfispj2uCo5bXSsSYI8q0v25EmvjuX0WmrXRzNqG0tYNh+nvg
plCG30HvBa4KOzyWTRH1PgjdUC7i8wFJ2+dhASuwnlBNIaYeJ3PfQAu3KS04Hf5C
/g2K0TGRC2q3HR3RWRtoLqinOwGTkCVvUXkKwov07jMCTlIqPe3wkFBtwrEE/HjM
IFubjpKP187oAiqCPw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:20 2025 by rpki-client