Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32332d3233203d3e20323731303830.roa
File:                     3137372e38362e3133382e302f32332d3233203d3e20323731303830.roa (raw, json)
Hash identifier:          WPW8wxeKfUhylku71GwyL6U7qF+ERaCNQL67z4XlkD4=
Subject key identifier:   F2:D4:18:4C:EF:11:15:EB:63:C3:18:6C:C0:45:27:D5:3E:73:B9:0E
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       34EDE3B5151E6891C0F8C1EF4DD19F6EFF59957D
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32332d3233203d3e20323731303830.roa
Signing time:             Thu 03 Jul 2025 22:12:16 +0000
ROA not before:           Thu 03 Jul 2025 22:07:16 +0000
ROA not after:            Thu 02 Jul 2026 22:12:16 +0000
asID:                     271080
IP address blocks:        177.86.138.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ed:e3:b5:15:1e:68:91:c0:f8:c1:ef:4d:d1:9f:6e:ff:59:95:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Jul  3 22:07:16 2025 GMT
            Not After : Jul  2 22:12:16 2026 GMT
        Subject: CN=F2D4184CEF1115EB63C3186CC04527D53E73B90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:59:fe:91:1f:95:e9:2c:88:2d:40:22:c1:5a:
                    fb:45:f5:f3:ae:cd:59:a6:2d:ec:f1:5f:3c:07:a9:
                    34:7f:9b:bb:ba:02:ad:07:e4:71:74:ea:aa:f6:31:
                    e8:15:b7:a9:ea:c1:ae:dd:90:7d:86:ef:bf:b6:29:
                    bc:05:a5:d0:01:92:2e:13:5b:52:fe:7f:54:bc:64:
                    f4:e6:f5:45:66:7a:5b:cb:57:c5:1f:6a:cf:d1:e9:
                    53:cc:53:42:0a:53:b4:52:39:75:ce:7b:52:30:41:
                    36:5b:f3:5d:6b:4c:5f:95:22:9c:5a:a6:6a:6c:75:
                    0c:0b:3b:60:cf:13:f8:d7:9b:cf:93:aa:c7:23:b0:
                    f2:e4:41:6d:38:da:d4:83:bc:be:95:8c:4a:ac:f0:
                    eb:34:ba:07:4e:b6:4c:43:50:62:03:f6:0d:08:89:
                    d1:54:b1:fc:cd:ab:48:92:88:0d:80:f2:78:d7:38:
                    8c:08:76:8f:c7:85:aa:51:de:b7:f7:b0:10:16:86:
                    7f:08:af:2a:d4:2b:b4:58:93:f8:3b:ce:ee:d0:de:
                    37:f2:59:1b:d6:5f:8e:9e:e7:22:e0:07:d3:0b:49:
                    20:35:da:70:d4:3d:42:58:d0:f4:cc:2e:9d:cc:a5:
                    1a:fe:97:88:c7:64:85:e5:6a:06:09:38:91:36:de:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:18:4C:EF:11:15:EB:63:C3:18:6C:C0:45:27:D5:3E:73:B9:0E
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32332d3233203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:13:5e:e9:0f:30:7f:b8:78:ea:18:7d:65:92:60:03:8a:0e:
         42:7a:9d:79:76:24:76:9d:8c:32:52:42:23:98:97:6f:fe:42:
         fc:7a:84:7e:25:39:7a:51:b7:95:67:08:a7:9b:0a:52:ae:c2:
         25:db:bf:54:6b:8b:d5:63:15:e2:b5:5b:ea:05:3c:48:f0:12:
         fe:e6:10:7e:82:5b:46:57:4b:ac:de:b8:3f:ad:6b:3a:cd:1d:
         2e:fd:43:1c:de:24:e3:b3:6b:34:bc:e0:6f:3a:ae:8b:2f:c5:
         dd:eb:bb:a3:df:48:e5:24:db:4f:cb:cb:f3:03:19:c6:e2:19:
         8c:9d:40:e9:14:0a:4a:3a:b7:e7:6b:e5:4d:7c:44:26:af:14:
         03:b0:04:14:4e:02:dd:7f:99:36:bf:bd:5a:08:2e:5e:5d:d8:
         30:0b:b6:59:8d:08:cf:f4:29:73:45:11:bb:34:73:7b:15:7e:
         a6:e3:c8:0b:51:0a:06:a6:c7:e8:a6:7d:e4:4b:ad:b6:0f:0f:
         8b:04:01:61:40:0e:c9:04:48:55:03:1d:dc:17:bd:a9:c2:f5:
         11:ae:7d:da:5a:67:dc:8f:41:59:a1:4d:69:cb:22:df:e9:c2:
         7e:c2:20:32:7d:42:4b:d4:ef:75:b2:8a:26:f2:30:53:68:83:
         e8:0a:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 21:02:28 2025 by rpki-client