Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138352e302f32342d3234203d3e20323733343937.roa
File:                     3230312e34392e3138352e302f32342d3234203d3e20323733343937.roa (raw, json)
Hash identifier:          qyLDK9UyLZyZp4foKoo439JBnjXK/Cu7iUD3MVnO9Xc=
Subject key identifier:   9C:67:E7:B9:B0:EF:5A:C2:78:21:E5:83:2F:2E:6D:67:CD:DD:17:66
Certificate issuer:       /CN=EBA12609A41810B238CACDE900F107B8CA74828D
Certificate serial:       513FAC9E3DBE9D85CF08F82617DEE95A3A9529E8
Authority key identifier: EB:A1:26:09:A4:18:10:B2:38:CA:CD:E9:00:F1:07:B8:CA:74:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA12609A41810B238CACDE900F107B8CA74828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138352e302f32342d3234203d3e20323733343937.roa
Signing time:             Mon 22 Jun 2026 14:23:32 +0000
ROA not before:           Mon 22 Jun 2026 14:18:32 +0000
ROA not after:            Mon 21 Jun 2027 14:23:32 +0000
asID:                     273497
IP address blocks:        201.49.185.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3f:ac:9e:3d:be:9d:85:cf:08:f8:26:17:de:e9:5a:3a:95:29:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA12609A41810B238CACDE900F107B8CA74828D
        Validity
            Not Before: Jun 22 14:18:32 2026 GMT
            Not After : Jun 21 14:23:32 2027 GMT
        Subject: CN=9C67E7B9B0EF5AC27821E5832F2E6D67CDDD1766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:16:95:7f:ed:eb:a2:1c:a3:77:66:69:c6:
                    83:5a:78:ee:21:0c:94:f4:eb:23:62:bb:ac:72:75:
                    70:1c:91:14:0a:4a:8b:33:c5:f7:09:ba:94:ff:d9:
                    6b:ec:0d:02:c2:65:e6:6c:51:9d:31:ee:8f:38:64:
                    6d:5d:43:a3:36:bf:e7:45:45:76:36:04:69:0a:5b:
                    72:64:e0:8e:3b:15:d5:00:d7:c0:b2:af:0b:cf:58:
                    47:04:13:6a:a1:fd:ad:34:35:ba:18:f6:af:8c:31:
                    b6:44:24:bb:92:fe:c0:92:c5:a5:d5:c0:77:8d:8b:
                    98:b3:9f:03:68:1f:f0:2d:cd:9b:5f:63:81:3d:82:
                    15:5a:ca:3f:31:e1:d8:89:46:2e:3e:37:a4:b6:b6:
                    f9:68:df:64:ac:ca:4d:63:ac:49:81:07:d1:fc:3c:
                    c4:01:a0:7e:f4:9e:5e:de:d1:44:88:16:e6:f1:82:
                    98:e7:ce:81:4e:50:1d:62:03:62:d4:d5:fe:7c:20:
                    13:3b:39:b5:05:2a:3a:6d:81:dc:3f:33:ef:77:96:
                    7d:b3:33:af:97:96:61:2e:cb:37:dd:50:b0:77:7a:
                    09:d7:29:30:16:ca:41:e1:16:70:39:06:8b:bc:f7:
                    40:eb:bd:43:48:b4:7c:d5:09:f4:de:70:49:ad:19:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:67:E7:B9:B0:EF:5A:C2:78:21:E5:83:2F:2E:6D:67:CD:DD:17:66
            X509v3 Authority Key Identifier:
                keyid:EB:A1:26:09:A4:18:10:B2:38:CA:CD:E9:00:F1:07:B8:CA:74:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/EBA12609A41810B238CACDE900F107B8CA74828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA12609A41810B238CACDE900F107B8CA74828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/3230312e34392e3138352e302f32342d3234203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:97:79:a8:24:a0:65:8c:4a:d3:bd:39:f8:d5:22:89:d9:89:
         43:51:2a:01:86:4d:dc:3e:4f:e4:6b:aa:a3:23:ff:18:c8:32:
         72:ac:8b:3f:ee:f2:5a:05:95:61:24:4a:9f:a1:6d:4d:38:9f:
         06:08:01:9a:8a:dc:7d:e4:42:c5:27:a3:02:0c:90:bd:12:41:
         08:26:86:0b:58:c6:cb:5e:d8:e3:e4:cd:ac:43:fe:fb:13:57:
         1c:6c:df:8e:f8:9f:51:37:29:ff:c2:47:93:fe:fb:9f:fb:10:
         b1:3f:cf:3f:bb:23:41:36:e9:43:e2:8d:39:e2:44:e1:15:09:
         d0:8a:27:30:67:6b:c1:95:4a:12:2e:3a:d3:fc:c0:e0:11:03:
         b8:58:92:70:44:67:7a:0f:01:ad:6d:ed:e6:e3:ec:c0:b1:9d:
         b4:31:65:1b:21:c1:da:d3:70:2e:89:50:7b:ed:c8:35:41:04:
         3b:c3:5a:e3:37:85:a0:3a:07:47:a4:72:4c:85:ba:fd:df:5f:
         fa:a5:b3:3f:28:11:5b:6c:b7:04:e0:80:a1:09:85:b5:5c:71:
         e4:0c:4a:f6:00:95:ff:b3:94:c4:60:ae:02:6f:8f:37:d5:8d:
         65:79:6b:3f:fc:8f:b0:b4:c1:3f:1f:81:d4:60:78:44:42:82:
         5c:42:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:36 2026 by rpki-client