Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e34382e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          o3RhSoiEm9C4P/9eZtDp0VqNur2SpWPZlalomn+zWk0=
Subject key identifier:   27:23:20:42:A6:E3:ED:E8:A4:F4:4F:A8:D1:8B:05:55:FE:ED:EB:A3
Certificate issuer:       /CN=958953A4AA375C5503E39C46573EE52C1795B779
Certificate serial:       2967542A76D0B5F5FD5FA5194A783DDCC51D6027
Authority key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa
Signing time:             Thu 07 Aug 2025 01:09:30 +0000
ROA not before:           Thu 07 Aug 2025 01:04:30 +0000
ROA not after:            Thu 06 Aug 2026 01:09:30 +0000
asID:                     52596
IP address blocks:        179.191.48.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:67:54:2a:76:d0:b5:f5:fd:5f:a5:19:4a:78:3d:dc:c5:1d:60:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958953A4AA375C5503E39C46573EE52C1795B779
        Validity
            Not Before: Aug  7 01:04:30 2025 GMT
            Not After : Aug  6 01:09:30 2026 GMT
        Subject: CN=27232042A6E3EDE8A4F44FA8D18B0555FEEDEBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:04:bf:91:6a:35:01:bc:2d:f2:7c:da:a8:
                    57:9f:24:26:c0:2d:e5:9c:53:c2:b0:df:d3:26:8b:
                    b1:64:80:57:35:ac:2d:d2:cf:be:58:61:c3:93:0c:
                    44:6e:69:55:3c:8e:fd:72:d1:0e:7d:9c:13:89:96:
                    ca:74:50:3b:11:52:d5:3c:f1:23:16:b4:5f:07:15:
                    b2:55:1c:db:69:3d:56:5f:b5:67:5c:1e:ce:31:72:
                    42:93:e6:be:4e:08:38:3e:26:76:77:18:1c:75:c0:
                    09:d8:8b:7e:9f:4c:25:33:1f:1b:09:9d:ed:1e:79:
                    98:38:42:93:0a:fa:7d:e5:55:6c:25:43:98:93:0d:
                    27:c1:ae:f5:cc:90:ad:bd:98:88:9c:12:e4:5b:e0:
                    96:86:e8:d9:46:cd:92:93:61:f1:87:51:e2:6d:d3:
                    f9:50:de:81:0c:c0:85:43:09:d1:ee:56:cf:a1:8d:
                    83:d7:0a:c6:e1:2c:2a:14:7c:22:79:29:0d:70:eb:
                    22:5c:3d:2f:9e:15:26:f5:f4:70:9c:87:ae:bb:d8:
                    c5:98:1f:b6:60:c1:9c:ac:bb:c0:89:00:e1:e4:07:
                    86:77:d5:3e:fe:3b:cb:61:ef:70:27:28:02:b2:2d:
                    a1:fd:e2:35:4c:d7:3f:ab:4f:1d:b3:d1:f3:b1:89:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:20:42:A6:E3:ED:E8:A4:F4:4F:A8:D1:8B:05:55:FE:ED:EB:A3
            X509v3 Authority Key Identifier:
                keyid:95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e34382e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:57:bd:07:ad:fc:6c:b5:eb:3d:b9:9c:cf:4e:07:3b:fb:
         ac:8f:36:c3:12:b2:82:8e:85:82:cf:f9:77:b3:61:e1:4a:18:
         f2:a9:fd:eb:8e:c6:29:72:3b:e0:2f:3b:f2:cf:a4:50:ea:cf:
         c8:e6:23:aa:43:9e:7f:aa:17:95:db:42:bf:60:6d:73:73:4c:
         bf:39:f7:d3:ba:f3:be:89:c5:fa:fb:da:53:09:4d:ea:3a:55:
         35:a1:9e:29:63:57:a9:69:a2:be:bb:f9:7b:66:57:57:47:eb:
         59:72:52:fa:77:d0:9b:51:d3:b5:f3:7d:94:0f:2a:c5:c2:ea:
         44:67:a8:09:e9:ae:68:6b:e8:6f:af:5f:98:64:e2:81:f0:92:
         9a:08:22:0d:e9:43:bb:69:f7:02:67:9b:14:e2:af:84:47:1f:
         29:75:eb:f0:80:20:7f:95:20:7d:db:cd:83:ee:8f:56:51:cf:
         ea:f9:9e:d3:92:09:c3:1c:b8:91:07:3b:a6:54:96:cf:98:08:
         59:d9:7e:82:d5:e2:ff:03:50:ac:57:6e:7c:9d:2f:1a:ec:88:
         07:d2:a8:0f:a0:0e:ab:fe:4b:c2:0c:39:31:d4:82:a6:26:fc:
         13:08:59:dc:56:ac:bc:6e:b0:ef:85:06:38:83:67:9e:b0:b5:
         62:65:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:54:07 2025 by rpki-client