Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa
File:                     3137392e3139312e35302e302f32332d3233203d3e203532353936.roa (raw, json)
Hash identifier:          K636cb9Y1MdetaDuFwlV60qSWSACxv3S0SGtdphcYj0=
Subject key identifier:   8A:4C:EB:BD:75:E1:18:D6:00:DB:78:87:BF:80:9A:59:A7:09:67:D9
Certificate issuer:       /CN=958953A4AA375C5503E39C46573EE52C1795B779
Certificate serial:       2BC2A85646D0233C2391004FA6F3188EBD815AD4
Authority key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa
Signing time:             Thu 07 Aug 2025 01:09:28 +0000
ROA not before:           Thu 07 Aug 2025 01:04:28 +0000
ROA not after:            Thu 06 Aug 2026 01:09:28 +0000
asID:                     52596
IP address blocks:        179.191.50.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c2:a8:56:46:d0:23:3c:23:91:00:4f:a6:f3:18:8e:bd:81:5a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958953A4AA375C5503E39C46573EE52C1795B779
        Validity
            Not Before: Aug  7 01:04:28 2025 GMT
            Not After : Aug  6 01:09:28 2026 GMT
        Subject: CN=8A4CEBBD75E118D600DB7887BF809A59A70967D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:16:a1:96:c9:fc:d1:6d:e9:e3:06:d0:1b:
                    50:bc:d5:27:6a:0d:67:eb:57:e4:9e:02:ba:b7:1f:
                    de:87:58:61:d9:2e:d7:9a:30:fe:e7:46:89:18:74:
                    1d:4b:af:27:e2:79:be:96:0b:96:b5:69:34:b7:8d:
                    54:74:31:ca:b0:b5:aa:a8:f7:86:e9:98:f5:35:f7:
                    46:c7:f7:d9:9f:0f:15:1c:49:15:49:dc:ca:e4:12:
                    dd:a4:6c:12:09:2b:81:bb:32:d4:f5:87:61:5a:b8:
                    4f:09:bd:4a:a0:70:27:e1:83:a6:b7:c7:9d:67:cf:
                    ea:fb:03:92:56:61:6d:00:ee:ec:e9:68:e5:52:13:
                    b7:ce:88:59:a7:18:5d:bb:0a:ee:e9:4b:f2:f9:cf:
                    48:5c:91:27:c2:ba:3d:95:9c:e0:80:78:67:9d:fc:
                    36:f7:00:47:8e:e5:29:68:e2:8f:27:ee:1a:a6:70:
                    77:16:e8:85:23:41:77:de:19:65:b3:d4:de:a8:7d:
                    ae:2a:3d:7d:92:07:32:1a:29:c4:b8:c4:84:19:41:
                    e2:48:53:e2:58:a3:c0:bc:15:5e:d6:63:b5:cf:a3:
                    8f:eb:be:23:93:97:53:8a:23:4c:74:ff:6e:22:5d:
                    d1:ec:83:3b:54:e1:1f:68:0d:7b:07:69:98:3d:bc:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4C:EB:BD:75:E1:18:D6:00:DB:78:87:BF:80:9A:59:A7:09:67:D9
            X509v3 Authority Key Identifier:
                keyid:95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35302e302f32332d3233203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:fa:8c:1e:73:d5:e3:07:68:ca:00:27:14:d4:a0:f7:15:
         fd:54:a5:8e:8d:ee:28:49:c6:ce:0d:48:83:ef:94:8c:84:5f:
         0c:7c:1d:83:7a:90:5a:f2:1b:f9:5a:b0:8f:4b:f0:0a:d7:15:
         91:7c:00:68:ee:a0:d3:c9:6e:7e:24:1a:ab:6b:39:50:d5:22:
         f0:24:3b:10:66:36:91:a2:a2:ff:b1:ea:10:67:7e:f1:45:3b:
         78:4e:06:23:c3:74:4e:eb:c8:e2:65:c0:74:eb:81:51:88:fc:
         5e:18:72:92:2b:ab:ed:fb:c9:70:77:97:da:f9:a4:45:90:8a:
         0b:ff:83:e4:00:bd:5c:34:bf:aa:01:2d:7f:03:77:d2:bb:c0:
         fe:d7:fd:d3:71:16:4d:af:d6:e1:28:f6:92:93:42:94:58:10:
         07:ec:7e:a3:41:46:86:23:21:96:b3:df:28:bb:c7:7a:64:5d:
         d6:b5:4b:90:2f:25:6c:4d:84:1f:6a:30:12:72:6f:4c:80:40:
         93:9b:c9:46:a7:70:78:3e:6b:81:23:27:e9:e9:ed:41:1a:fd:
         92:a6:5b:91:c7:a8:03:e3:73:95:06:cb:43:61:17:d8:55:ea:
         3b:07:28:c1:de:f0:e8:f2:eb:44:d3:44:d2:5b:a0:f6:db:a1:
         fc:c3:a1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:44:08 2025 by rpki-client