Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35392e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35392e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          2+Beweu9jctANGjUA8dsq6Eo9A8E+rTSl+4ngJGzwgs=
Subject key identifier:   E4:A5:44:E2:57:EF:D7:25:6A:7D:97:AB:34:10:11:8B:52:F8:91:46
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       0F280EBEAFA0BBCA5FC1C59A05635B18D1637EAF
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35392e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.59.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:28:0e:be:af:a0:bb:ca:5f:c1:c5:9a:05:63:5b:18:d1:63:7e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=E4A544E257EFD7256A7D97AB3410118B52F89146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2e:62:cb:2c:4f:ed:03:71:21:74:4a:92:a1:
                    ba:1b:83:0d:cb:25:e1:96:4d:fc:0f:b7:69:c3:4c:
                    00:b6:8f:14:46:51:f5:ee:71:5b:17:95:20:84:40:
                    a6:1e:28:5e:94:24:39:29:c9:28:1c:03:17:ef:e1:
                    7c:ff:4c:08:1d:e4:93:9c:4c:e2:2c:e9:25:54:7a:
                    3a:5f:1b:b5:bc:50:68:4a:b8:71:8f:16:d8:71:45:
                    24:90:57:63:ba:c1:a2:5e:25:86:7d:ce:7a:e8:55:
                    5d:2c:5c:bf:fb:c3:1f:d3:2d:65:ed:e3:ea:0e:45:
                    4f:73:48:7c:ec:41:b3:c4:2a:f8:6f:11:c5:b6:d4:
                    cf:1e:62:0d:30:73:b3:79:27:ed:c2:82:77:25:55:
                    23:d3:8c:63:ba:97:00:31:46:b6:28:95:1f:7e:6b:
                    f5:86:8f:5a:0d:15:f2:73:91:50:80:5f:2e:d6:38:
                    e5:f2:14:df:b2:3f:de:9b:cc:e2:c8:e4:1a:97:f9:
                    7c:c4:33:69:a6:75:0f:f4:9d:d6:a4:d8:31:5e:b6:
                    e1:06:11:4c:66:4b:34:a7:ce:e4:16:53:97:c0:e2:
                    e8:a6:9d:9d:c6:2b:6a:9c:ed:9b:30:47:6f:07:26:
                    c1:ff:f1:39:80:7f:62:22:94:38:04:62:cd:55:0e:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:44:E2:57:EF:D7:25:6A:7D:97:AB:34:10:11:8B:52:F8:91:46
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35392e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:09:5a:32:8e:75:30:82:37:c4:5e:ff:27:16:29:8c:20:
         e2:74:32:a4:a7:5c:b1:46:f6:fc:cf:0a:85:06:8c:72:b3:73:
         5d:50:57:0e:83:b3:ef:be:8e:a3:8b:81:32:06:30:c9:c0:52:
         53:61:72:22:ee:fa:f1:df:b2:7b:0a:fe:78:dc:69:41:5d:05:
         1b:85:b0:2f:84:81:77:a2:9c:52:3a:30:48:45:f6:d9:4b:6e:
         b3:4a:74:e1:27:ef:8d:90:f9:80:a0:27:e1:6a:0c:31:52:86:
         36:b6:5d:20:1f:c5:1b:29:ad:5c:38:f3:01:14:75:74:67:e9:
         44:5f:44:28:06:1e:43:84:d2:40:39:ec:52:98:e6:b1:35:d2:
         df:83:74:80:6c:3a:20:7f:f1:d2:0e:8f:a4:3e:68:02:3e:95:
         63:99:e8:d8:b5:f1:82:29:25:3a:eb:75:61:65:6b:b0:49:b5:
         9a:ae:11:fb:67:de:58:d9:6d:3c:b7:a6:19:0d:6e:57:89:a0:
         36:8a:ef:76:e1:9d:29:ec:ad:78:ff:a3:7f:ec:7d:db:ff:7a:
         b1:7d:1e:c2:a6:90:34:7e:54:ad:4d:2c:e7:d2:10:71:82:b7:
         cf:83:1d:7d:c8:b6:52:00:36:00:99:ee:ce:ae:65:d8:9e:34:
         21:ce:d2:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDygOvq+gu8pfwcWaBWNbGNFjfq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNzQyMDFaFw0yNTA4MjkxNzQ3MDFaMDMxMTAvBgNV
BAMTKEU0QTU0NEUyNTdFRkQ3MjU2QTdEOTdBQjM0MTAxMThCNTJGODkxNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcLmLLLE/tA3EhdEqSobobgw3L
JeGWTfwPt2nDTAC2jxRGUfXucVsXlSCEQKYeKF6UJDkpySgcAxfv4Xz/TAgd5JOc
TOIs6SVUejpfG7W8UGhKuHGPFthxRSSQV2O6waJeJYZ9znroVV0sXL/7wx/TLWXt
4+oORU9zSHzsQbPEKvhvEcW21M8eYg0wc7N5J+3CgnclVSPTjGO6lwAxRrYolR9+
a/WGj1oNFfJzkVCAXy7WOOXyFN+yP96bzOLI5BqX+XzEM2mmdQ/0ndak2DFetuEG
EUxmSzSnzuQWU5fA4uimnZ3GK2qc7ZswR28HJsH/8TmAf2IilDgEYs1VDjf3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5KVE4lfv1yVqfZerNBARi1L4kUYwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzMDMxMmUzMjMzMmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyRc7MA0GCSqGSIb3DQEBCwUAA4IBAQCisQlaMo51
MII3xF7/JxYpjCDidDKkp1yxRvb8zwqFBoxys3NdUFcOg7Pvvo6ji4EyBjDJwFJT
YXIi7vrx37J7Cv543GlBXQUbhbAvhIF3opxSOjBIRfbZS26zSnThJ++NkPmAoCfh
agwxUoY2tl0gH8UbKa1cOPMBFHV0Z+lEX0QoBh5DhNJAOexSmOaxNdLfg3SAbDog
f/HSDo+kPmgCPpVjmejYtfGCKSU663VhZWuwSbWarhH7Z95Y2W08t6YZDW5XiaA2
iu924Z0p7K14/6N/7H3b/3qxfR7CppA0flStTSzn0hBxgrfPgx19yLZSADYAme7O
rmXYnjQhztLb
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:21 2025 by rpki-client