Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32332d3233203d3e20323633353230.roa
File:                     3138312e3139322e38342e302f32332d3233203d3e20323633353230.roa (raw, json)
Hash identifier:          U3VRi/Mh8iCkecWb4Nh+GE6gsfTbIFJokkrYAWSnWf8=
Subject key identifier:   74:4A:E0:87:B0:0A:4B:91:09:A8:89:0A:C7:D7:DF:F0:0D:F0:B4:3D
Certificate issuer:       /CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
Certificate serial:       7C27D69418581B620F142E88A2E6DCB13C6A879B
Authority key identifier: DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32332d3233203d3e20323633353230.roa
Signing time:             Thu 15 Aug 2024 18:40:32 +0000
ROA not before:           Thu 15 Aug 2024 18:35:32 +0000
ROA not after:            Thu 14 Aug 2025 18:40:32 +0000
asID:                     263520
IP address blocks:        181.192.84.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:27:d6:94:18:58:1b:62:0f:14:2e:88:a2:e6:dc:b1:3c:6a:87:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72
        Validity
            Not Before: Aug 15 18:35:32 2024 GMT
            Not After : Aug 14 18:40:32 2025 GMT
        Subject: CN=744AE087B00A4B9109A8890AC7D7DFF00DF0B43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:dd:b3:29:bf:6b:1d:88:87:cf:0a:88:e7:
                    56:7b:a0:c2:1d:bd:00:f2:ae:bb:02:04:ab:77:67:
                    c8:35:2d:cd:e4:e9:d8:db:e7:86:57:a1:6c:51:8b:
                    00:50:c5:a9:e5:28:2e:0b:81:e3:09:e2:77:aa:2f:
                    eb:a8:51:58:a7:02:92:23:86:7f:85:69:69:9c:0d:
                    94:4e:0d:45:ca:b2:83:26:e1:a9:84:f5:46:14:23:
                    bb:42:c6:a2:f9:35:4d:6d:eb:81:73:d6:af:95:01:
                    b6:dd:c7:04:64:d3:9c:4d:91:98:70:12:34:78:5c:
                    5c:24:18:69:ef:37:cf:7c:0d:a5:e8:d3:55:80:00:
                    9f:d0:1c:99:d3:3e:11:c4:ec:74:31:fa:e7:c4:fd:
                    34:e6:63:79:db:45:a0:80:e5:0b:47:0e:14:fd:e9:
                    86:61:a2:54:b1:3f:86:77:82:7b:39:a6:d3:65:a9:
                    9e:ac:3a:48:0c:db:ea:93:f9:9b:04:86:3d:0c:14:
                    2d:b3:a5:29:39:f5:0d:5d:31:92:45:19:ff:b5:9d:
                    15:b0:2f:a7:e6:28:4a:92:81:67:e5:db:b4:17:17:
                    0c:a9:57:6c:7b:4a:3c:fc:95:cc:e0:28:94:2c:1d:
                    1d:14:5d:da:b6:45:2d:d2:61:54:fc:11:67:29:24:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:E0:87:B0:0A:4B:91:09:A8:89:0A:C7:D7:DF:F0:0D:F0:B4:3D
            X509v3 Authority Key Identifier:
                keyid:DA:B2:62:F1:CD:E0:D6:56:D1:ED:2F:94:95:5B:DA:2B:8C:81:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAB262F1CDE0D656D1ED2F94955BDA2B8C814E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3138312e3139322e38342e302f32332d3233203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:b1:5e:4d:f1:f8:cd:27:6a:81:2b:a0:c6:26:e0:5a:4d:
         85:f8:3b:7f:24:cf:5f:11:f7:7a:c4:16:e7:88:eb:a7:2d:75:
         b7:e3:53:f1:ea:7c:ba:0e:c3:9c:a8:df:51:cd:77:95:cf:33:
         5d:5d:81:5d:df:2d:09:a7:e6:8e:58:9a:e4:d7:94:4a:a0:e1:
         ab:77:58:75:04:11:a9:bb:aa:ee:16:a3:c4:c4:db:a8:87:63:
         b2:81:75:6d:81:02:76:b3:97:39:a8:76:10:9e:52:ba:06:f4:
         1f:18:f8:08:44:03:de:f6:31:e3:98:68:ab:29:91:c2:22:a4:
         22:b9:05:55:a1:17:16:6c:f4:80:1e:1c:8b:c8:64:68:fa:f2:
         75:ca:53:94:5f:bd:9b:9b:c9:e7:3a:e0:66:95:f1:25:5b:ed:
         18:ca:1f:92:20:58:53:80:20:ea:0e:c8:4d:6b:52:6a:c7:8c:
         53:d7:36:1c:76:ea:f0:25:66:5d:26:53:78:59:f0:03:a8:95:
         c6:11:64:25:cf:c9:cf:a3:8c:7b:11:e0:89:75:42:99:4e:ee:
         dd:ef:13:bb:a1:87:bf:0f:90:07:18:6b:64:4a:50:b5:6f:76:
         3a:de:82:8c:0f:14:34:69:82:cb:70:2b:8a:bf:51:ca:9d:de:
         cd:f6:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:42 2025 by rpki-client