Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38302e302f32312d3231203d3e20323633353230.roa
File:                     3138312e3139322e38302e302f32312d3231203d3e20323633353230.roa (raw, json)
Hash identifier:          MTMUysMt5onyKz+Vikqrk9YHeajqYOHJigvH6VAPAO4=
Subject key identifier:   26:42:D4:A9:4B:5B:25:3B:F8:48:58:7E:91:C9:05:AD:04:10:78:AA
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       55893783B9C7415088B8B8EF430D05F89C9652AE
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38302e302f32312d3231203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:32 +0000
ROA not before:           Thu 15 Aug 2024 18:35:32 +0000
ROA not after:            Thu 14 Aug 2025 18:40:32 +0000
asID:                     263520
IP address blocks:        181.192.80.0/21 maxlen: 21
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:89:37:83:b9:c7:41:50:88:b8:b8:ef:43:0d:05:f8:9c:96:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:32 2024 GMT
            Not After : Aug 14 18:40:32 2025 GMT
        Subject: CN=2642D4A94B5B253BF848587E91C905AD041078AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cb:8a:9b:1c:58:07:ee:3b:4f:71:ff:20:87:
                    94:bf:f5:31:4a:52:1d:74:75:89:00:0b:2a:0a:a7:
                    17:05:9c:5e:bc:14:53:bf:8e:e8:b3:e5:bb:f8:03:
                    e4:d4:2f:18:68:83:4e:17:1a:01:b8:93:d8:38:6d:
                    e1:76:3f:04:cd:ed:04:e7:c4:35:84:1a:29:ff:45:
                    5d:72:4a:fd:58:8b:af:93:0b:8a:59:06:cb:5a:2a:
                    82:72:20:17:c4:19:da:48:e8:d0:59:c2:31:1c:0b:
                    15:79:0b:7f:18:16:c0:0e:55:a2:c8:fd:7a:3e:87:
                    a2:94:c8:8e:a5:15:29:b9:68:0d:68:02:44:f5:c7:
                    b2:84:bc:a0:88:6f:2a:b3:9d:92:38:7b:9a:36:ee:
                    57:ef:73:65:50:8e:4f:f7:d1:5d:91:66:c2:4d:cf:
                    9e:54:d6:2c:28:a0:af:57:31:b9:56:f5:35:e6:b1:
                    25:55:21:f9:62:f8:a0:98:92:77:9f:88:b1:05:ff:
                    73:a1:84:b5:b2:51:7f:0c:54:22:b7:30:6f:ae:f1:
                    4d:c7:e2:4d:0b:db:24:58:0d:4a:b1:13:3a:6c:7e:
                    b9:98:83:f0:4d:e0:b8:c6:5b:fe:fc:07:4b:be:39:
                    3e:7a:06:13:a0:74:1e:b5:38:97:c8:8d:40:b2:34:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:42:D4:A9:4B:5B:25:3B:F8:48:58:7E:91:C9:05:AD:04:10:78:AA
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38302e302f32312d3231203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:84:74:37:22:81:c3:91:8e:fc:cb:46:0d:fc:66:52:b8:
         90:4f:f2:95:75:a6:e5:b3:62:23:c3:4d:03:80:e4:ad:3f:15:
         c3:cb:0d:39:a3:35:d4:83:b3:ac:ef:18:11:42:1f:40:0c:3f:
         a4:60:9f:99:76:b5:1c:18:d7:e1:52:03:3f:44:66:e8:51:a8:
         b0:df:f5:4d:ee:dd:6f:e0:75:b6:29:a2:71:16:fd:03:9f:c2:
         cf:29:76:40:2c:6a:01:82:b1:ed:cb:4a:d5:59:4e:db:25:54:
         8a:7c:82:ea:21:0d:6c:40:04:f6:de:95:5c:1b:7c:1a:59:e4:
         84:5a:d1:aa:b5:14:e8:d1:a4:18:bb:f5:d4:2b:fd:b3:bf:ce:
         fa:d3:2a:84:6d:ed:db:dd:78:56:b3:4d:d4:ff:60:d8:67:98:
         1d:0c:25:c6:8d:d9:88:96:62:3c:9f:73:8f:5a:fe:a5:00:fc:
         d5:78:80:a0:3d:b9:2f:fc:7a:e0:6f:a0:3d:11:a5:cc:a2:10:
         43:3b:8e:99:25:0b:0f:ff:9d:fe:6c:29:a8:71:f0:a3:71:a2:
         e2:da:63:3a:10:27:c5:d4:5b:9c:cf:12:e5:68:11:03:36:c0:
         32:f9:46:ab:61:64:a7:5b:2d:31:bc:69:8f:fd:74:80:71:c1:
         f7:dc:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:09 2025 by rpki-client