Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35352e302f32342d3234203d3e203532353936.roa
File:                     3137392e3139312e35352e302f32342d3234203d3e203532353936.roa (raw, json)
Hash identifier:          XLRnyIbGOLnJVJaM2v/JWNxrxLNq4UrjDr2SW5Pqt/8=
Subject key identifier:   6E:F2:AE:23:CC:F8:4E:02:9D:8E:92:C2:ED:BD:4B:6C:05:43:F6:00
Certificate issuer:       /CN=958953A4AA375C5503E39C46573EE52C1795B779
Certificate serial:       36A53319A156781A242979359D555D28FD988C0D
Authority key identifier: 95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35352e302f32342d3234203d3e203532353936.roa
Signing time:             Thu 07 Aug 2025 01:09:31 +0000
ROA not before:           Thu 07 Aug 2025 01:04:31 +0000
ROA not after:            Thu 06 Aug 2026 01:09:31 +0000
asID:                     52596
IP address blocks:        179.191.55.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a5:33:19:a1:56:78:1a:24:29:79:35:9d:55:5d:28:fd:98:8c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958953A4AA375C5503E39C46573EE52C1795B779
        Validity
            Not Before: Aug  7 01:04:31 2025 GMT
            Not After : Aug  6 01:09:31 2026 GMT
        Subject: CN=6EF2AE23CCF84E029D8E92C2EDBD4B6C0543F600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:62:5c:d7:f6:ac:06:c5:56:45:2b:17:f3:
                    9d:24:d6:96:7a:7d:9f:7a:92:7d:e7:34:57:fb:f5:
                    5c:f0:db:90:84:8f:b5:33:dd:7d:3a:de:e5:cc:29:
                    90:64:ba:f9:86:62:e0:39:bd:6a:b4:98:18:ef:0b:
                    be:a0:33:fb:d3:57:28:7c:7e:4b:fc:46:f4:32:2d:
                    1f:4e:e2:d3:d1:fc:b4:79:7c:ce:ac:f6:03:8c:9a:
                    ef:48:5e:47:11:ce:4a:d7:d9:ca:a3:9a:12:83:2a:
                    13:01:87:bc:7d:14:f3:b1:f1:be:9f:9e:83:e3:cc:
                    8c:81:a9:11:5a:79:8d:0c:45:fc:e6:98:8e:08:cc:
                    35:c5:35:77:c8:02:91:aa:2b:a9:3e:a0:c7:de:f2:
                    d3:0a:17:10:32:ed:8a:6f:b3:85:f4:de:81:7b:f3:
                    8f:63:7e:2b:1d:a7:18:08:ca:e3:5f:73:62:ed:c7:
                    18:94:05:d7:14:d9:cc:a9:5d:fd:eb:59:ae:4b:f4:
                    ef:cd:ea:ff:a8:98:63:7e:f1:6c:92:53:9c:d8:7c:
                    c5:8e:8d:26:8a:8f:de:5d:ec:cb:1f:e3:94:21:6c:
                    57:26:41:6e:56:35:2b:29:6b:c5:bb:db:32:7a:d2:
                    44:83:af:9b:d0:7b:51:3e:08:7c:50:b7:13:c8:8f:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:AE:23:CC:F8:4E:02:9D:8E:92:C2:ED:BD:4B:6C:05:43:F6:00
            X509v3 Authority Key Identifier:
                keyid:95:89:53:A4:AA:37:5C:55:03:E3:9C:46:57:3E:E5:2C:17:95:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/958953A4AA375C5503E39C46573EE52C1795B779.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/958953A4AA375C5503E39C46573EE52C1795B779.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/3137392e3139312e35352e302f32342d3234203d3e203532353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:f9:5f:88:a6:64:49:6f:95:37:2d:51:f8:71:12:56:b1:
         e0:c3:0d:58:1e:b5:39:b9:ef:b6:76:55:a8:ea:47:ec:35:29:
         98:0f:e2:e0:0c:7c:ff:fd:5a:15:c7:f7:3d:0c:a9:20:c3:01:
         97:98:4f:8a:d6:30:ba:79:02:09:fc:c4:02:5e:69:de:c2:ac:
         c9:4b:ac:0b:00:f0:82:97:0e:3c:cd:c6:a4:98:0f:7c:a7:2f:
         e9:0e:8e:37:6d:59:6d:ca:80:98:ab:ad:de:2e:c2:d2:35:b6:
         24:3f:29:0b:4a:a8:d1:a6:73:dc:0f:61:e1:9d:62:f5:0e:72:
         73:8b:8e:6d:f0:b9:29:95:b5:7d:8f:bf:be:0e:71:91:97:40:
         90:cc:22:b1:79:eb:7d:8f:4f:fa:d7:e8:cf:34:b9:b2:c3:59:
         ae:46:f8:e0:53:c5:21:c5:66:b9:4c:19:fe:75:ba:b3:7a:6d:
         6b:c7:19:df:9d:1f:41:b0:e4:a9:b9:43:8a:ee:1f:12:86:64:
         6f:ce:1f:00:0a:48:76:b8:28:5b:62:2d:7d:91:88:11:72:03:
         16:b0:84:bc:4a:bf:f2:23:78:1a:c4:d5:fe:c4:73:92:2a:48:
         7b:0c:16:02:b2:79:11:cd:6c:3c:d4:f0:7d:ee:6f:42:43:f7:
         1e:c0:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:54:23 2025 by rpki-client