Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          pQ9pnOLpgbrHC5ik4//6QD3uCKReFfoHU8aW4l+7pUk=
Subject key identifier:   3F:14:29:88:42:2F:2B:5E:4E:CB:AF:45:AF:8B:54:D5:5A:9C:0F:3C
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       7799D63EC8529397B9E23B71328C89229CD5F565
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa
Signing time:             Mon 16 Dec 2024 19:56:58 +0000
ROA not before:           Mon 16 Dec 2024 19:51:58 +0000
ROA not after:            Mon 15 Dec 2025 19:56:58 +0000
asID:                     271700
IP address blocks:        189.84.56.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:99:d6:3e:c8:52:93:97:b9:e2:3b:71:32:8c:89:22:9c:d5:f5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Dec 16 19:51:58 2024 GMT
            Not After : Dec 15 19:56:58 2025 GMT
        Subject: CN=3F142988422F2B5E4ECBAF45AF8B54D55A9C0F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bb:06:2e:9b:22:fb:f2:f6:fe:84:05:c0:f5:
                    9f:ab:a8:e3:a7:23:e2:11:1f:7d:53:d9:b4:99:93:
                    bc:e0:b6:66:bb:37:02:7f:9b:b1:eb:2f:fa:5e:9a:
                    c4:65:a2:a3:6e:b3:a7:b8:22:1d:67:ff:02:53:c1:
                    fd:72:e5:9b:8a:66:60:fd:5d:b3:be:83:e0:2a:4f:
                    48:26:49:27:05:78:f5:bc:77:e4:6d:67:9d:18:c5:
                    8d:d0:43:f3:f1:ca:51:f1:06:1d:ae:c2:5a:2f:cf:
                    e3:f7:55:d7:40:ba:6b:64:5d:8e:5f:f0:09:86:0a:
                    dc:a8:76:1b:ec:25:85:0d:b7:d1:5f:1e:07:26:80:
                    8c:d9:4e:1e:68:0a:24:7a:16:60:a2:ea:5d:a4:4e:
                    42:2f:ac:97:77:a2:46:63:62:1e:96:58:62:03:96:
                    42:13:aa:f5:9c:56:23:9a:a2:6c:a2:27:84:2e:71:
                    9e:49:e5:c6:07:a5:58:8e:b8:db:5a:a9:cc:eb:cf:
                    9a:5e:46:b5:92:4b:32:e3:e2:8b:5f:a8:dc:d8:e2:
                    07:7c:2b:c4:a2:be:fd:7e:9b:b9:bc:4b:56:15:6c:
                    f6:4c:35:ee:54:d0:14:d6:b0:90:18:0b:89:aa:3d:
                    04:da:e1:f4:84:af:63:a0:8d:99:e7:db:bc:8b:4c:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:29:88:42:2F:2B:5E:4E:CB:AF:45:AF:8B:54:D5:5A:9C:0F:3C
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:cb:7f:5b:90:68:2c:10:79:7c:31:7a:05:af:27:2b:ff:
         17:5d:84:cd:eb:3b:4b:6e:82:07:02:64:20:a5:a4:e1:cf:06:
         33:92:3b:e4:d8:cb:58:bc:c0:cd:ea:e4:f8:fd:86:77:0b:07:
         f6:ec:37:32:bf:d9:17:06:f7:86:e3:f8:78:40:7e:80:4d:38:
         ed:97:84:5b:a5:ba:a7:bb:f7:96:91:be:cf:ca:e2:de:02:af:
         26:c3:d9:38:2a:8a:80:f4:2f:ba:f9:30:9a:b2:ca:1d:ad:8d:
         a1:a2:b8:70:55:d8:7d:88:52:08:1f:ff:77:ce:cd:1c:fa:fd:
         29:53:65:19:e0:66:fb:6c:c6:f8:3a:5c:0c:b5:e6:46:85:e9:
         c0:6b:4f:d5:7f:a2:85:34:a1:39:68:3e:5d:55:b8:c9:2f:74:
         24:b4:3a:d7:61:98:90:30:54:1a:c9:ee:79:fa:29:b9:51:2b:
         96:4c:5a:b4:e2:21:5e:85:20:ce:f7:04:f4:4e:78:d9:4c:0a:
         e5:87:04:cc:37:72:e7:b0:e7:66:d3:7e:90:e2:8f:25:3f:89:
         5c:b0:22:f6:ab:d3:aa:67:ba:b2:45:a1:cc:06:fc:b3:32:b7:
         23:bb:8d:b2:b1:ed:84:3b:1b:89:4e:5f:46:49:f0:1c:24:d9:
         8b:fa:fe:40
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd5nWPshSk5e54jtxMoyJIpzV9WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBQ0JDNTJGQTY5OEUyNjFERjEwODJDMjQ1MEFCNkE0
MTBFNjc0MTAeFw0yNDEyMTYxOTUxNThaFw0yNTEyMTUxOTU2NThaMDMxMTAvBgNV
BAMTKDNGMTQyOTg4NDIyRjJCNUU0RUNCQUY0NUFGOEI1NEQ1NUE5QzBGM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuwYumyL78vb+hAXA9Z+rqOOn
I+IRH31T2bSZk7zgtma7NwJ/m7HrL/pemsRloqNus6e4Ih1n/wJTwf1y5ZuKZmD9
XbO+g+AqT0gmSScFePW8d+RtZ50YxY3QQ/PxylHxBh2uwlovz+P3VddAumtkXY5f
8AmGCtyodhvsJYUNt9FfHgcmgIzZTh5oCiR6FmCi6l2kTkIvrJd3okZjYh6WWGID
lkITqvWcViOaomyiJ4QucZ5J5cYHpViOuNtaqczrz5peRrWSSzLj4otfqNzY4gd8
K8Sivv1+m7m8S1YVbPZMNe5U0BTWsJAYC4mqPQTa4fSEr2OgjZnn27yLTD93AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPxQpiEIvK15Oy69Fr4tU1VqcDzwwHwYDVR0j
BBgwFoAU3Ky8UvppjiYd8QgsJFCrakEOZ0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC9EQ0FDQkM1MkZBNjk4RTI2MURGMTA4MkMyNDUwQUI2QTQxMEU2NzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDQUNCQzUyRkE2OThFMjYx
REYxMDgyQzI0NTBBQjZBNDEwRTY3NDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzEzODM5MmUzODM0MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvVQ4MA0GCSqGSIb3DQEBCwUAA4IBAQCP5Mt/W5Bo
LBB5fDF6Ba8nK/8XXYTN6ztLboIHAmQgpaThzwYzkjvk2MtYvMDN6uT4/YZ3Cwf2
7Dcyv9kXBveG4/h4QH6ATTjtl4Rbpbqnu/eWkb7PyuLeAq8mw9k4KoqA9C+6+TCa
ssodrY2horhwVdh9iFIIH/93zs0c+v0pU2UZ4Gb7bMb4OlwMteZGhenAa0/Vf6KF
NKE5aD5dVbjJL3QktDrXYZiQMFQaye55+im5USuWTFq04iFehSDO9wT0TnjZTArl
hwTMN3LnsOdm036Q4o8lP4lcsCL2q9OqZ7qyRaHMBvyzMrcju42yse2EOxuJTl9G
SfAcJNmL+v5A
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:24 2025 by rpki-client