Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa (raw, json)
Hash identifier:          kWRo8u3WuL3hzkgdNn6mnTGjwdYFLQGECR/4Y99MP9Y=
Subject key identifier:   9D:4E:06:AC:B8:40:D6:4D:3C:A4:16:07:87:52:08:A5:FC:4F:D4:E8
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       2FCFAE164EF7D871AC4959D784AF7074D1169952
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa
Signing time:             Thu 03 Jul 2025 22:12:14 +0000
ROA not before:           Thu 03 Jul 2025 22:07:14 +0000
ROA not after:            Thu 02 Jul 2026 22:12:14 +0000
asID:                     271080
IP address blocks:        177.86.136.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cf:ae:16:4e:f7:d8:71:ac:49:59:d7:84:af:70:74:d1:16:99:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Jul  3 22:07:14 2025 GMT
            Not After : Jul  2 22:12:14 2026 GMT
        Subject: CN=9D4E06ACB840D64D3CA41607875208A5FC4FD4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:7b:77:0e:b6:32:56:66:3c:6d:0d:7e:6a:
                    4d:92:9d:59:26:e8:a1:76:ea:ed:48:ce:3d:59:cf:
                    b2:00:c5:0c:84:b1:8e:16:81:dc:df:ac:31:9d:fc:
                    5c:6f:70:7c:a5:f8:05:36:42:ce:f4:45:0d:bf:3a:
                    76:f5:89:70:fa:1c:a4:de:1e:89:db:b2:7b:d0:b7:
                    0d:61:39:05:bb:6f:98:83:66:eb:6e:f9:c5:23:7b:
                    4f:b1:8a:2b:1c:6d:1e:7f:da:7b:d7:d6:58:6c:9a:
                    32:af:c5:df:f2:64:b9:02:d9:c5:3d:46:88:67:6f:
                    71:85:db:a6:8d:95:92:3b:d7:67:0d:22:cb:89:19:
                    a0:fa:aa:e1:36:1b:5d:89:85:d1:0e:0b:1f:ff:1e:
                    14:05:90:d4:f0:61:b8:0a:79:3c:09:71:1a:a9:80:
                    cc:62:fe:53:34:07:5f:ff:29:bb:47:0a:c3:52:3f:
                    f4:50:43:55:2b:e6:c2:f6:d8:2a:cd:11:31:26:18:
                    0f:50:42:0e:86:3a:43:d1:93:ad:f6:27:51:ed:2f:
                    1e:e8:b1:c8:0d:c2:46:4f:2f:f4:7d:c4:21:71:f7:
                    ab:2e:0f:09:d9:8a:23:de:82:f9:19:2d:69:54:81:
                    a0:2c:20:dd:1b:7d:a0:49:98:e5:d5:9a:b0:b1:38:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4E:06:AC:B8:40:D6:4D:3C:A4:16:07:87:52:08:A5:FC:4F:D4:E8
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32332d3233203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:17:88:5e:90:4e:98:df:60:b7:e9:07:53:43:92:bd:4c:5b:
         79:07:e7:26:aa:ca:96:83:27:56:29:d1:77:d4:5a:90:b4:d9:
         b6:89:7b:a4:97:8b:5b:5b:9e:c1:4e:b0:1b:a6:85:bd:b8:a4:
         24:c4:f1:7b:e1:a8:88:9f:9d:21:6e:9e:ea:35:d5:50:ef:0e:
         e1:1c:e4:3b:5f:99:8d:d2:c3:fb:57:87:6b:44:8c:09:c9:31:
         ff:df:a1:81:ba:b1:56:c6:61:49:08:7a:b1:96:a8:1f:92:fb:
         d4:ac:7d:59:c4:7f:d0:44:21:2a:07:c6:bf:87:b9:96:8e:57:
         84:3b:3b:6b:96:ed:19:02:d0:f7:96:09:e3:94:a3:e6:29:8f:
         95:6c:43:b7:c7:d6:32:99:c4:f2:a1:95:35:62:76:a7:0b:14:
         f3:50:75:e6:32:1f:e0:6b:ed:f4:f3:73:fc:c9:43:e6:48:6a:
         35:33:86:f8:c3:e3:e5:9d:68:b2:1c:27:b4:2b:19:6d:cd:1c:
         6f:5f:69:2c:02:a4:2c:f4:4a:f4:48:9b:d7:59:b9:4e:32:55:
         dd:09:20:fb:09:60:4a:8d:d3:52:5b:7f:9e:eb:45:34:fe:9e:
         b3:c8:14:71:a2:81:d4:30:d5:2a:06:0a:25:c8:ee:09:cd:40:
         22:e1:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 21:03:07 2025 by rpki-client