Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35342e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          SzXKBBWiuH446bUGZTlyHlQKaQ0w67kNtbmUc9pa/TY=
Subject key identifier:   F7:3C:84:DB:1A:32:C1:6A:A4:BD:EE:AB:8C:92:37:6D:B4:3A:59:95
Certificate issuer:       /CN=958953A4AA375C5503E39C46573EE52C1795B779
Certificate serial:       1C8A14AED5CF4E2B000543D2DA981068373CD786
Authority key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32342d3234203d3e203532353936.roa
Signing time:             Thu 07 Aug 2025 01:09:29 +0000
ROA not before:           Thu 07 Aug 2025 01:04:29 +0000
ROA not after:            Thu 06 Aug 2026 01:09:29 +0000
asID:                     52596
IP address blocks:        179.191.54.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8a:14:ae:d5:cf:4e:2b:00:05:43:d2:da:98:10:68:37:3c:d7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958953A4AA375C5503E39C46573EE52C1795B779
        Validity
            Not Before: Aug  7 01:04:29 2025 GMT
            Not After : Aug  6 01:09:29 2026 GMT
        Subject: CN=F73C84DB1A32C16AA4BDEEAB8C92376DB43A5995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:1f:4e:58:77:ef:e5:2c:8c:0d:05:7f:d3:
                    0d:a1:19:d9:3a:aa:ff:65:18:ec:fa:44:6a:bd:4e:
                    3d:ce:10:53:7e:25:e0:a6:4f:28:39:d8:dd:02:d5:
                    7e:7c:72:31:4f:7a:4d:2f:70:29:3d:12:d5:76:e3:
                    32:8e:97:66:95:0d:58:af:c7:ca:1e:a7:e5:14:d9:
                    3f:1a:c7:93:6e:60:13:8f:58:6c:50:57:72:5b:f9:
                    49:a0:5e:3d:31:a8:b4:3a:af:20:fb:f2:06:f1:c3:
                    e4:ac:ec:63:c4:5b:e5:b7:76:1b:6b:8b:84:5e:d4:
                    37:ee:8a:e8:56:ac:07:93:06:e1:e1:b4:b3:44:95:
                    f3:d5:08:25:f0:9c:87:96:74:42:5a:73:d7:e4:06:
                    81:09:66:ed:f2:5e:84:60:38:b1:8e:d6:ed:77:af:
                    93:db:f1:7a:6a:3a:52:fe:76:3e:98:49:b3:de:66:
                    7c:60:62:c5:77:cd:1b:46:52:35:46:72:34:2d:a2:
                    10:41:28:1b:59:6b:87:cc:90:32:7c:aa:61:9e:25:
                    61:29:6f:51:40:b8:77:88:91:cf:9e:4a:e6:c0:98:
                    73:72:f9:20:2c:9c:a6:84:c4:aa:52:3b:7e:8c:e9:
                    2a:3b:b4:71:73:c1:49:5b:31:e6:61:0a:56:df:f1:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:84:DB:1A:32:C1:6A:A4:BD:EE:AB:8C:92:37:6D:B4:3A:59:95
            X509v3 Authority Key Identifier:
                keyid:95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35342e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:9e:c7:0b:2b:b2:eb:9b:82:80:e6:e4:7b:c0:09:8d:e1:
         ae:62:1b:bb:8c:15:dc:1b:72:84:a3:6d:8b:44:a6:25:50:38:
         f1:7c:0d:4d:d8:b7:bd:95:e3:fe:f5:9f:3c:40:85:de:e7:db:
         b1:47:8b:6e:36:6b:35:d7:79:55:dc:58:9d:cc:31:4a:71:3c:
         df:82:da:f3:de:bb:0e:b1:10:4f:b2:11:6c:01:c5:fd:dc:25:
         af:56:8b:44:03:5f:1f:2b:13:e4:e7:c5:ab:5f:6f:7e:53:11:
         0d:22:9c:0a:e3:b8:c7:fd:ff:e7:2d:cf:7f:4e:29:b0:22:7f:
         15:80:fe:10:0b:9e:0c:02:57:fd:06:74:7e:06:7e:a1:1d:c9:
         ad:df:26:94:78:73:00:11:7d:e4:95:ce:c8:d4:1f:c5:10:a1:
         00:ca:f8:1e:77:df:76:50:7f:59:63:e5:4f:65:c4:01:12:38:
         c4:0b:9d:00:db:cf:39:e6:cf:8e:f9:03:cb:d1:e6:f4:d0:c7:
         d8:0e:be:71:83:3f:20:7b:39:a6:41:d6:9b:d4:74:46:58:96:
         e1:9b:2d:c5:fe:e6:cf:b7:ba:c0:43:59:2a:af:02:ce:1c:f0:
         1c:eb:2a:db:22:cd:18:22:54:e0:1d:eb:d3:b0:b2:51:0a:14:
         53:1d:fc:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHIoUrtXPTisABUPS2pgQaDc814YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU4OTUzQTRBQTM3NUM1NTAzRTM5QzQ2NTczRUU1MkMx
Nzk1Qjc3OTAeFw0yNTA4MDcwMTA0MjlaFw0yNjA4MDYwMTA5MjlaMDMxMTAvBgNV
BAMTKEY3M0M4NERCMUEzMkMxNkFBNEJERUVBQjhDOTIzNzZEQjQzQTU5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmB9OWHfv5SyMDQV/0w2hGdk6
qv9lGOz6RGq9Tj3OEFN+JeCmTyg52N0C1X58cjFPek0vcCk9EtV24zKOl2aVDViv
x8oep+UU2T8ax5NuYBOPWGxQV3Jb+UmgXj0xqLQ6ryD78gbxw+Ss7GPEW+W3dhtr
i4Re1DfuiuhWrAeTBuHhtLNElfPVCCXwnIeWdEJac9fkBoEJZu3yXoRgOLGO1u13
r5Pb8XpqOlL+dj6YSbPeZnxgYsV3zRtGUjVGcjQtohBBKBtZa4fMkDJ8qmGeJWEp
b1FAuHeIkc+eSubAmHNy+SAsnKaExKpSO36M6So7tHFzwUlbMeZhClbf8TSbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9zyE2xoywWqkve6rjJI3bbQ6WZUwHwYDVR0j
BBgwFoAUlYlTpKo3XFUD45xGVz7lLBeVt3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmliTllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJm
V3gvMC85NTg5NTNBNEFBMzc1QzU1MDNFMzlDNDY1NzNFRTUyQzE3OTVCNzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1ODk1M0E0QUEzNzVDNTUw
M0UzOUM0NjU3M0VFNTJDMTc5NUI3NzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpYk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAv
MzEzNzM5MmUzMTM5MzEyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAs782MA0GCSqGSIb3DQEBCwUAA4IBAQCMSZ7HCyuy
65uCgObke8AJjeGuYhu7jBXcG3KEo22LRKYlUDjxfA1N2Le9leP+9Z88QIXe59ux
R4tuNms113lV3FidzDFKcTzfgtrz3rsOsRBPshFsAcX93CWvVotEA18fKxPk58Wr
X29+UxENIpwK47jH/f/nLc9/TimwIn8VgP4QC54MAlf9BnR+Bn6hHcmt3yaUeHMA
EX3klc7I1B/FEKEAyvged992UH9ZY+VPZcQBEjjEC50A28855s+O+QPL0eb00MfY
Dr5xgz8gezmmQdab1HRGWJbhmy3F/ubPt7rAQ1kqrwLOHPAc6yrbIs0YIlTgHevT
sLJRChRTHfx7
-----END CERTIFICATE-----
Generated at Wed Aug 20 20:44:57 2025 by rpki-client