Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32322d3232203d3e203532353936.roa (raw, json)
Hash identifier:          56HI0QdCF0s55tKpbrh1v9FZigeybeyl5T2qJQ8JqIM=
Subject key identifier:   24:FB:21:04:0D:78:67:33:53:2C:A5:1F:B0:CB:AF:88:5E:6D:6C:E4
Certificate issuer:       /CN=958953A4AA375C5503E39C46573EE52C1795B779
Certificate serial:       39F78148E2FDFE8CE14D58B4CF020476322485E4
Authority key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa
Signing time:             Thu 07 Aug 2025 01:09:30 +0000
ROA not before:           Thu 07 Aug 2025 01:04:30 +0000
ROA not after:            Thu 06 Aug 2026 01:09:30 +0000
asID:                     52596
IP address blocks:        179.191.48.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f7:81:48:e2:fd:fe:8c:e1:4d:58:b4:cf:02:04:76:32:24:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958953A4AA375C5503E39C46573EE52C1795B779
        Validity
            Not Before: Aug  7 01:04:30 2025 GMT
            Not After : Aug  6 01:09:30 2026 GMT
        Subject: CN=24FB21040D786733532CA51FB0CBAF885E6D6CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:c9:58:62:c4:4b:7a:73:51:71:2e:76:14:
                    b3:83:c2:eb:43:f5:e7:f0:8b:59:33:6d:94:83:48:
                    2d:b9:64:19:5f:ab:db:83:7c:bb:79:d7:34:3d:20:
                    b4:d8:9a:73:bc:d3:48:00:cd:c8:95:3f:02:84:36:
                    36:7a:2c:da:d0:60:33:e7:52:dd:22:04:48:d9:c2:
                    a8:4a:97:a0:a1:68:e0:83:80:2a:e8:2d:0e:2b:a1:
                    a6:7e:76:86:76:df:4b:2e:f3:1b:f0:70:1b:43:42:
                    7c:b8:17:37:78:db:3f:96:5a:89:47:7f:f2:db:ca:
                    97:27:a9:d5:79:2a:38:3c:12:21:a8:3f:d7:b1:32:
                    20:08:7a:cd:dc:bf:1d:61:22:48:0b:46:32:e5:52:
                    21:6e:59:ea:51:95:b0:06:14:28:3f:8c:89:90:ea:
                    32:69:88:0f:5d:bd:12:c8:ef:cd:18:2a:a2:f3:c1:
                    4d:65:98:70:3d:75:86:55:95:77:58:bd:6b:53:7e:
                    9d:11:b7:48:5a:16:59:f0:a3:d2:60:db:7d:b6:fe:
                    7c:50:be:9a:cd:94:54:b1:c6:f9:4b:dc:08:b2:3e:
                    93:53:35:1f:a0:c8:f2:76:a1:8f:37:e5:f2:06:9f:
                    22:33:df:aa:3c:12:0c:89:1e:3e:60:e4:c4:cf:e2:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:21:04:0D:78:67:33:53:2C:A5:1F:B0:CB:AF:88:5E:6D:6C:E4
            X509v3 Authority Key Identifier:
                keyid:95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32322d3232203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:67:99:c8:65:b9:ce:5a:72:d8:d5:2d:51:5c:d2:3d:6f:
         ff:10:ce:84:e1:0b:4a:0d:12:be:56:5a:1f:b9:79:d1:8b:56:
         87:48:18:2e:e5:7b:e9:52:fa:a1:3d:38:18:7f:de:69:88:33:
         05:af:28:b4:c9:d9:d5:02:f1:27:64:ec:c6:fd:65:19:8e:cd:
         16:fc:05:d9:75:8a:b2:01:bc:2b:f7:dd:a2:37:70:a3:02:31:
         31:d4:31:9b:2e:5d:ae:14:1e:1d:fe:34:d0:83:dc:ea:16:80:
         7c:d3:bf:8e:3f:b8:e2:f0:ea:be:c7:31:2a:09:3a:50:cd:a4:
         b7:71:25:50:14:a5:b7:ee:54:b6:1b:b9:00:9c:5e:3d:4f:f7:
         5d:2d:22:db:c4:10:b3:91:71:62:9d:65:55:68:84:ae:1b:1c:
         92:2c:d8:7c:bb:b5:8e:51:fc:44:ba:a7:c6:54:68:e8:d7:d7:
         2f:7b:13:7d:a3:00:2a:0a:6a:51:5f:db:eb:a7:dc:ba:43:a9:
         2c:dc:69:4f:f3:aa:4c:72:56:96:69:46:35:0f:f7:e5:1a:95:
         07:a6:db:7b:23:92:7e:06:3e:87:d1:40:61:79:61:f4:22:8b:
         c8:5c:ee:ca:fb:f7:af:de:bb:1c:41:dd:75:0a:f0:f8:dd:d7:
         61:91:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:44:13 2025 by rpki-client