Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa
File:                     34352e3136392e33322e302f32342d3234203d3e20323638313133.roa (raw, json)
Hash identifier:          QeY96c/t1AsN22HM/T3xv+XZiSNurUbyTie1lMgmQ9Q=
Subject key identifier:   6B:C8:1B:9C:A5:87:B9:43:EB:C3:D6:BD:65:73:CE:EF:44:C6:05:26
Certificate issuer:       /CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Certificate serial:       2930DFDB8BBC0F6F2EB85075E30F5B145E7BD246
Authority key identifier: A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa
Signing time:             Wed 26 Mar 2025 17:01:32 +0000
ROA not before:           Wed 26 Mar 2025 16:56:32 +0000
ROA not after:            Wed 25 Mar 2026 17:01:32 +0000
asID:                     268113
IP address blocks:        45.169.32.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:30:df:db:8b:bc:0f:6f:2e:b8:50:75:e3:0f:5b:14:5e:7b:d2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
        Validity
            Not Before: Mar 26 16:56:32 2025 GMT
            Not After : Mar 25 17:01:32 2026 GMT
        Subject: CN=6BC81B9CA587B943EBC3D6BD6573CEEF44C60526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:04:f3:86:f5:7a:8f:31:e1:a8:29:03:82:
                    ea:a0:89:87:44:f6:87:5a:c6:39:c5:7b:52:f0:dd:
                    24:ec:e0:ad:86:b5:49:80:c9:be:04:ed:b5:a7:65:
                    a1:94:75:b4:47:d5:5a:16:2a:75:0c:b3:05:27:b2:
                    1b:d5:45:c6:ce:31:0a:28:fd:65:8b:65:4a:ef:4b:
                    86:25:68:6d:a2:02:4a:71:23:62:e4:d9:a0:09:16:
                    0c:e4:ac:f0:0f:f9:7f:bc:e5:06:e6:2b:55:51:b4:
                    5b:4a:4a:5b:33:b8:1c:9a:b4:f9:d8:dd:e3:64:ec:
                    9f:1a:b0:63:2b:cb:d2:e4:ef:a1:db:81:8f:9c:4d:
                    6d:a5:90:13:47:95:09:ea:51:70:d2:f7:16:5a:b4:
                    af:21:38:d0:a5:19:fc:95:c2:fd:56:d3:c2:7d:26:
                    50:bf:cb:1c:6f:71:66:6a:88:6f:74:73:c2:a7:a7:
                    3f:3a:cc:a2:5f:4c:88:dd:ed:d1:b1:b1:58:e8:a3:
                    66:a2:59:eb:f7:92:f3:e6:58:da:5e:45:f4:0c:4b:
                    06:49:df:9d:76:9a:70:c0:2d:dc:23:c9:c9:36:ce:
                    0e:c0:45:cd:c7:9c:8c:86:57:09:5c:d6:7d:ac:15:
                    a7:10:7a:df:ae:96:98:1b:bb:7a:6d:b5:a4:9e:c1:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C8:1B:9C:A5:87:B9:43:EB:C3:D6:BD:65:73:CE:EF:44:C6:05:26
            X509v3 Authority Key Identifier:
                keyid:A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33322e302f32342d3234203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:39:d7:54:a1:ba:f6:9b:fb:b7:f5:1f:19:e0:04:77:d9:
         2c:3a:69:a5:e9:d8:22:3f:dd:58:35:68:87:df:d3:3e:fc:ac:
         0a:90:be:60:a1:1e:08:7f:73:4f:89:05:6e:17:8a:6d:37:b8:
         56:c1:10:70:5a:95:07:ca:d5:1c:1f:a9:98:bf:42:96:77:39:
         53:dc:40:5f:c3:cb:16:ad:05:9d:4f:a2:bc:ad:c6:21:3d:50:
         c9:8a:b7:21:a4:14:7d:34:2a:16:0f:a5:08:06:df:4d:ad:2b:
         a6:4e:53:34:bd:53:ce:49:06:ad:88:83:8b:96:2a:2f:ed:fd:
         fa:bc:97:7d:65:dc:65:ba:1c:09:fe:4b:88:70:1d:8d:4c:68:
         48:6f:6e:d6:57:a1:92:56:20:69:99:57:a7:59:92:a0:a1:a2:
         f7:4f:11:7c:68:7b:45:04:aa:cb:36:24:ce:98:1b:ec:10:0d:
         c7:5b:b3:97:05:28:66:5c:63:ca:40:b3:ba:83:2b:fe:8e:fd:
         1e:0c:e7:dc:29:ce:83:07:a6:86:7c:0e:a3:a9:99:0c:38:a9:
         63:5a:a0:b9:e4:21:74:a2:3f:ec:f1:cf:eb:23:58:f2:f4:4f:
         d3:05:e7:12:8f:59:cc:c6:eb:2e:0c:aa:8e:df:28:20:5f:0f:
         a9:0a:95:46
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUKTDf24u8D28uuFB14w9bFF570kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM5QUExNDRBNjE2MzRCNjBBMzNFNDE3QjlBMjBDN0Mw
NjFEODZBMzAeFw0yNTAzMjYxNjU2MzJaFw0yNjAzMjUxNzAxMzJaMDMxMTAvBgNV
BAMTKDZCQzgxQjlDQTU4N0I5NDNFQkMzRDZCRDY1NzNDRUVGNDRDNjA1MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5wTzhvV6jzHhqCkDguqgiYdE
9odaxjnFe1Lw3STs4K2GtUmAyb4E7bWnZaGUdbRH1VoWKnUMswUnshvVRcbOMQoo
/WWLZUrvS4YlaG2iAkpxI2Lk2aAJFgzkrPAP+X+85QbmK1VRtFtKSlszuByatPnY
3eNk7J8asGMry9Lk76HbgY+cTW2lkBNHlQnqUXDS9xZatK8hONClGfyVwv1W08J9
JlC/yxxvcWZqiG90c8Knpz86zKJfTIjd7dGxsVjoo2aiWev3kvPmWNpeRfQMSwZJ
3512mnDALdwjyck2zg7ARc3HnIyGVwlc1n2sFacQet+ulpgbu3pttaSewetpAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUa8gbnKWHuUPrw9a9ZXPO70TGBSYwHwYDVR0j
BBgwFoAUo5qhRKYWNLYKM+QXuaIMfAYdhqMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9IYWRGU2hlMkJZNW14M0U3NDhVZmtKWDZuelF4SkxDVkZaOXZrc0oxVG1j
LzAvQTM5QUExNDRBNjE2MzRCNjBBMzNFNDE3QjlBMjBDN0MwNjFEODZBMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMzlBQTE0NEE2MTYzNEI2MEEz
M0U0MTdCOUEyMEM3QzA2MUQ4NkEzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I
YWRGU2hlMkJZNW14M0U3NDhVZmtKWDZuelF4SkxDVkZaOXZrc0oxVG1jLzAvMzQz
NTJlMzEzNjM5MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzEz
MTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQALakgMA0GCSqGSIb3DQEBCwUAA4IBAQBO7znXVKG69pv7
t/UfGeAEd9ksOmml6dgiP91YNWiH39M+/KwKkL5goR4If3NPiQVuF4ptN7hWwRBw
WpUHytUcH6mYv0KWdzlT3EBfw8sWrQWdT6K8rcYhPVDJirchpBR9NCoWD6UIBt9N
rSumTlM0vVPOSQatiIOLliov7f36vJd9ZdxluhwJ/kuIcB2NTGhIb27WV6GSViBp
mVenWZKgoaL3TxF8aHtFBKrLNiTOmBvsEA3HW7OXBShmXGPKQLO6gyv+jv0eDOfc
Kc6DB6aGfA6jqZkMOKljWqC55CF0oj/s8c/rI1jy9E/TBecSj1nMxusuDKqO3ygg
Xw+pCpVG
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:10 2025 by rpki-client