Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131362e302f32322d3232203d3e20323637353132.roa
File:                     3230312e3138322e3131362e302f32322d3232203d3e20323637353132.roa (raw, json)
Hash identifier:          tzLyg7bGRBrj3mUHIRYDC2dVu0mWy/nykCKge/hqnLc=
Subject key identifier:   4E:4A:D7:16:66:6A:97:19:D3:F3:99:B5:B7:EB:69:4B:0E:08:84:91
Certificate issuer:       /CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
Certificate serial:       5064964F75C1E4CC5B898DB09BBDCEC7520008AF
Authority key identifier: EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131362e302f32322d3232203d3e20323637353132.roa
Signing time:             Tue 11 Mar 2025 05:46:59 +0000
ROA not before:           Tue 11 Mar 2025 05:41:59 +0000
ROA not after:            Tue 10 Mar 2026 05:46:59 +0000
asID:                     267512
IP address blocks:        201.182.116.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:96:4f:75:c1:e4:cc:5b:89:8d:b0:9b:bd:ce:c7:52:00:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECB433183132CC4AB44E4E77CB4AD589FFC36B64
        Validity
            Not Before: Mar 11 05:41:59 2025 GMT
            Not After : Mar 10 05:46:59 2026 GMT
        Subject: CN=4E4AD716666A9719D3F399B5B7EB694B0E088491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:56:a4:2e:d1:cd:c7:9c:46:e1:8d:d6:7a:
                    d6:37:59:72:17:0b:9c:1d:93:85:d2:69:97:b4:47:
                    df:92:70:20:59:8a:57:ac:1e:5f:73:22:9f:99:bb:
                    9c:00:92:aa:0d:a6:d2:74:52:0a:91:88:dc:51:c5:
                    79:44:69:37:d5:5f:00:29:fa:ca:74:05:e9:9a:d1:
                    4e:9b:3e:0c:4e:af:68:39:39:29:27:ee:87:d9:04:
                    9f:e5:13:34:2b:71:26:1c:71:85:c1:95:4a:0a:d6:
                    82:65:d5:d3:84:3c:9e:13:7d:6d:86:94:45:4d:09:
                    5f:17:46:80:f0:24:7b:97:bb:b6:d7:da:30:35:2e:
                    51:05:14:a9:88:8d:ae:f5:f1:09:2f:fc:be:73:2b:
                    89:c9:42:26:a6:ef:8c:7a:04:db:20:c7:63:5a:54:
                    30:3b:9b:5b:65:17:ae:3b:f3:50:c8:de:6d:cc:85:
                    60:9e:c2:ce:7a:0c:fe:24:1b:57:61:05:94:c2:a1:
                    3d:b9:21:98:93:11:43:d3:dd:8d:38:ea:46:21:94:
                    06:78:58:2b:fb:4a:11:14:34:65:1a:1b:f6:29:6e:
                    43:e7:b5:0b:19:c0:21:ea:c2:28:82:18:6e:f0:17:
                    ed:5a:d2:39:90:a4:cf:a3:61:22:46:9a:fa:13:5d:
                    54:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4A:D7:16:66:6A:97:19:D3:F3:99:B5:B7:EB:69:4B:0E:08:84:91
            X509v3 Authority Key Identifier:
                keyid:EC:B4:33:18:31:32:CC:4A:B4:4E:4E:77:CB:4A:D5:89:FF:C3:6B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECB433183132CC4AB44E4E77CB4AD589FFC36B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMmLPGwXaqHUyFttaEWc4UQi7gYWhr3WbPrKxENiaEA5/0/3230312e3138322e3131362e302f32322d3232203d3e20323637353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:01:f1:f8:de:d3:ef:9d:f5:b8:96:0b:3a:b1:ae:28:d5:e8:
         b3:de:a3:bb:d6:27:17:4f:98:1e:e5:32:db:a5:2c:46:cf:2b:
         b3:64:91:10:57:a5:fc:dc:33:86:4a:b0:50:da:dd:60:45:f4:
         0f:31:6a:b0:87:9c:54:aa:0d:61:e2:6a:16:b6:b6:5a:a8:42:
         87:36:9b:06:59:2f:78:ac:e6:5b:29:87:d1:cd:c7:db:ee:ef:
         6a:ac:30:40:98:3b:8d:ce:8b:63:32:4a:49:f9:06:98:22:5d:
         21:61:de:85:bf:9b:a3:c5:73:c1:2b:b4:ec:e4:2c:02:11:5e:
         ff:4c:fe:a6:15:19:d8:3f:0d:01:fc:8d:6b:c3:3c:0d:5a:c7:
         79:37:07:f0:b5:60:1d:d1:17:bd:06:da:71:cb:12:f6:d4:c6:
         57:77:c0:75:94:95:be:93:48:bf:37:71:43:10:92:b4:45:e5:
         80:9b:ac:d2:51:29:f5:1c:8b:ea:4f:ed:4b:06:9f:1d:31:67:
         73:ab:6b:5b:64:dc:fd:8d:bc:8c:c9:67:72:e1:a7:f4:67:a3:
         6c:31:0e:a8:c2:ec:36:1c:db:c4:8f:ef:e3:cf:3a:06:f3:88:
         9b:4e:78:83:56:6f:1d:d8:78:06:fa:fc:89:c9:84:84:71:00:
         02:a8:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:10 2025 by rpki-client