Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa
File:                     34352e3136392e33352e302f32342d3234203d3e20323638313133.roa (raw, json)
Hash identifier:          QmoIiyy1O8NTkc3cKoccjHnO49BWetpFKaLKwE2dWng=
Subject key identifier:   85:43:67:5E:52:9C:68:0E:33:13:5F:DB:3E:E8:3C:4A:69:8C:C0:4E
Certificate issuer:       /CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
Certificate serial:       0A1CA8D16C25D1B519753D3FD32CAFB259C1D12E
Authority key identifier: A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa
Signing time:             Wed 26 Mar 2025 17:01:31 +0000
ROA not before:           Wed 26 Mar 2025 16:56:31 +0000
ROA not after:            Wed 25 Mar 2026 17:01:31 +0000
asID:                     268113
IP address blocks:        45.169.35.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:a8:d1:6c:25:d1:b5:19:75:3d:3f:d3:2c:af:b2:59:c1:d1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
        Validity
            Not Before: Mar 26 16:56:31 2025 GMT
            Not After : Mar 25 17:01:31 2026 GMT
        Subject: CN=8543675E529C680E33135FDB3EE83C4A698CC04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:69:b2:27:b6:22:7e:02:1b:bb:8e:c2:3c:
                    d5:68:b6:a1:a1:30:89:eb:9e:0a:c2:95:01:12:55:
                    cc:06:6e:fe:2f:38:d1:7c:53:3c:71:43:ed:e6:b5:
                    86:87:f4:f5:dd:1b:59:fb:4a:c6:a1:8f:93:ea:45:
                    3b:f7:64:b8:ed:25:fd:9f:30:74:ed:ae:18:7e:2a:
                    fa:86:b1:bd:75:f2:a0:bb:b2:a9:ad:02:78:d8:c4:
                    fb:db:89:0b:be:a7:df:13:81:40:6c:cd:2b:43:5e:
                    f8:cd:ad:6c:af:b6:c5:12:d5:36:e0:51:99:79:80:
                    c3:21:01:ae:4e:cd:61:1d:bb:33:c2:e4:5e:54:32:
                    e1:29:e7:b9:21:fb:d5:bc:cf:3e:72:6e:33:48:ba:
                    3e:e7:3d:47:a1:67:5b:7e:8c:13:9f:a9:7c:4d:b3:
                    d9:e3:98:f7:e8:86:71:88:b6:99:63:fd:2b:5f:46:
                    61:7b:80:a3:c1:dc:db:99:d4:86:a1:b3:06:e5:a0:
                    d5:fb:e8:78:15:d4:b3:78:4d:dd:f2:33:ed:6d:58:
                    34:a0:4a:6c:dc:99:b5:e4:84:f2:42:87:0a:ab:05:
                    89:76:cc:9b:e0:7f:3e:8f:13:97:fc:5e:fd:bb:cf:
                    25:dc:6f:29:71:2a:d0:36:45:21:d8:99:40:c4:fd:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:43:67:5E:52:9C:68:0E:33:13:5F:DB:3E:E8:3C:4A:69:8C:C0:4E
            X509v3 Authority Key Identifier:
                keyid:A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/34352e3136392e33352e302f32342d3234203d3e20323638313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:18:86:90:45:33:a8:d9:3c:87:74:6d:50:68:d3:05:78:a9:
         5c:60:d5:68:26:0e:c1:f7:83:19:81:d4:37:18:00:0c:8a:17:
         fd:9a:4c:c1:d8:0c:46:17:d8:9f:46:34:62:a0:c8:ab:28:ca:
         0a:a3:78:75:18:81:68:80:65:a9:ae:5d:9a:a9:0f:49:cc:49:
         22:17:00:77:ff:f6:c7:df:00:1f:ba:0f:fe:8f:9c:57:67:19:
         bc:57:00:18:63:10:43:6b:ae:ec:e5:33:7b:3a:79:b8:3a:7a:
         ab:bd:8d:9f:6a:62:27:21:d6:10:78:0c:74:08:7e:70:5e:8f:
         c5:55:c9:35:b7:a3:46:ea:4e:77:97:f2:9e:50:e3:26:77:c2:
         f0:76:83:42:99:0b:d6:9c:fb:b3:c6:71:ed:b9:01:00:73:e5:
         9b:b7:5c:58:30:5f:72:8d:fc:c1:55:72:db:8f:04:2e:2e:a4:
         47:6d:67:b2:08:8b:0b:a3:ee:09:ab:c0:f8:b7:78:b2:12:ff:
         58:86:fb:2f:c2:f2:d0:34:fb:6f:43:45:30:ff:29:2a:d8:73:
         10:ff:50:d6:d6:2b:fd:47:b0:eb:7a:c6:50:17:37:96:25:e0:
         48:55:18:86:9d:42:b7:2c:42:1a:33:60:cb:b2:8a:08:eb:6d:
         3b:d3:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:12 2025 by rpki-client