Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32322d3232203d3e20323633353230.roa
File:                     3138312e3139322e38342e302f32322d3232203d3e20323633353230.roa (raw, json)
Hash identifier:          fV78AFz9TKUSH2meQL9oL/CRnTGfgRbYGeGUkeHfGeo=
Subject key identifier:   5C:25:52:73:AC:A8:B9:EA:E2:F2:90:F6:45:13:59:DE:4F:9A:2A:9C
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       47AEE0712DC9E30A2EB1F8947917FCAF77B44AC9
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32322d3232203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:30 +0000
ROA not before:           Thu 15 Aug 2024 18:35:30 +0000
ROA not after:            Thu 14 Aug 2025 18:40:30 +0000
asID:                     263520
IP address blocks:        181.192.84.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ae:e0:71:2d:c9:e3:0a:2e:b1:f8:94:79:17:fc:af:77:b4:4a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:30 2024 GMT
            Not After : Aug 14 18:40:30 2025 GMT
        Subject: CN=5C255273ACA8B9EAE2F290F6451359DE4F9A2A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:a9:0d:9f:17:b8:c0:00:6e:c1:88:88:77:
                    7a:22:e0:a6:e9:28:4d:fb:44:41:f6:2c:fb:95:03:
                    17:5b:a1:d2:23:21:47:2a:66:34:25:d2:e7:e4:f1:
                    7b:91:0d:44:07:dc:f7:37:6d:de:e2:fa:df:9c:2d:
                    5c:5b:82:b4:e4:51:cf:7e:30:36:c3:dd:c8:29:29:
                    9c:77:94:24:8e:e4:a5:47:ee:d0:5e:c5:df:f3:df:
                    02:ed:c7:a0:4d:2e:0b:4e:82:32:2a:7f:02:b2:bb:
                    60:ac:34:49:95:b3:30:57:9c:32:32:9a:8d:0b:7c:
                    5e:89:f5:f9:ae:70:cb:2e:fc:73:74:88:ac:9a:cd:
                    f1:7c:51:a6:41:0b:df:89:5a:2c:5b:cc:68:3d:d9:
                    11:85:73:1e:41:88:1d:8f:2b:94:1c:83:e9:00:95:
                    fb:19:8b:e6:ce:b5:34:d8:4f:de:d8:5e:5c:a2:0e:
                    2a:39:1a:6e:4e:53:88:9d:aa:a5:aa:1e:1f:23:43:
                    2c:43:a8:a7:6f:41:d1:08:31:f7:42:ea:eb:5c:9a:
                    81:02:9a:38:10:dd:f8:8c:23:3e:3e:41:b9:e4:0e:
                    65:22:c7:e3:9f:e3:b0:a5:91:34:9e:d4:de:06:55:
                    ca:49:07:d8:fc:5e:48:e6:b3:6d:5a:bc:a2:4b:00:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:52:73:AC:A8:B9:EA:E2:F2:90:F6:45:13:59:DE:4F:9A:2A:9C
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32322d3232203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:83:46:ae:24:f6:52:eb:db:b5:ba:75:a8:72:3d:9f:90:
         00:e9:30:37:11:0e:6b:5b:17:71:1e:17:0b:3e:41:e2:6d:27:
         a3:7d:24:17:8e:9f:7b:f6:eb:d2:94:c1:04:1c:81:2f:1d:c0:
         11:f3:40:6c:64:d6:e0:0e:66:86:ed:ff:96:d9:e1:a2:f1:70:
         00:3f:76:d5:4f:b9:7d:e4:aa:76:32:04:c8:17:1e:8f:b7:03:
         8f:83:73:25:80:b1:1e:3d:1b:92:14:b1:15:2d:46:75:a2:2d:
         28:61:ee:07:ff:37:b3:69:ba:0f:f1:f2:4b:43:2a:74:2f:a7:
         d2:4b:88:14:b0:7d:f8:45:55:63:e0:a8:d9:8a:13:c8:ae:67:
         d0:9a:72:5c:55:1c:0b:9e:d6:41:61:dd:f5:25:1a:18:75:29:
         a1:5a:e7:ff:8e:e5:65:f6:9a:96:2f:f4:30:f4:fd:63:4f:7c:
         50:69:99:4b:e1:dc:41:93:cc:e7:00:cc:51:8f:40:98:d8:d1:
         30:98:46:b4:81:7f:c3:51:79:c1:40:5e:0c:8a:96:51:0f:f1:
         8c:ed:63:99:4f:4b:b1:df:99:a4:62:1f:a2:9a:f3:fe:1f:9a:
         06:01:0f:2d:85:82:37:fe:de:7d:e6:f3:42:7d:39:b8:89:10:
         9e:1b:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:52 2025 by rpki-client