Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          bAcWAiWHr5pDJDrEgeN50idfCyHlFlIqfWYj8KgCHUw=
Subject key identifier:   41:F5:95:51:5F:C3:51:00:B5:01:D1:67:AF:66:FB:A7:EE:D6:B0:01
Certificate issuer:       /CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Certificate serial:       169CD01A8AEA82F7071A814241D2AD6635E5320E
Authority key identifier: B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 07 Feb 2025 17:17:35 +0000
ROA not before:           Fri 07 Feb 2025 17:12:35 +0000
ROA not after:            Fri 06 Feb 2026 17:17:35 +0000
asID:                     267035
IP address blocks:        45.227.150.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9c:d0:1a:8a:ea:82:f7:07:1a:81:42:41:d2:ad:66:35:e5:32:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B889BE89077CF75CB3D33CA36A19B935046D749F
        Validity
            Not Before: Feb  7 17:12:35 2025 GMT
            Not After : Feb  6 17:17:35 2026 GMT
        Subject: CN=41F595515FC35100B501D167AF66FBA7EED6B001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:7d:74:d7:a7:e5:6d:10:bc:43:00:68:58:
                    4d:45:b4:a7:29:a2:35:c5:7f:2f:e2:e5:52:35:6d:
                    62:7e:82:03:ca:bd:e4:e0:7a:e0:9f:09:3c:1b:ec:
                    81:24:ef:dc:64:eb:9d:89:b1:a7:11:e3:c9:86:14:
                    d1:b0:92:a0:94:0f:df:54:50:78:34:7c:46:d7:dd:
                    61:bb:d0:d5:d4:82:a8:a3:b2:8a:65:b3:c5:73:39:
                    8e:fa:3b:a2:08:25:c3:84:27:41:c8:16:d3:30:3f:
                    32:52:91:0c:75:3b:5c:9f:ad:5c:fd:7e:26:02:86:
                    9c:a2:7b:6c:b2:6d:16:e4:36:7d:0f:b0:80:54:9f:
                    dc:e9:33:0c:dc:c5:51:46:61:d7:cd:82:ea:36:ee:
                    77:6a:95:96:58:e0:1d:04:c0:c9:10:fa:87:19:b3:
                    92:da:ee:0f:67:73:2e:ff:ba:77:38:28:7f:09:c9:
                    c6:85:cc:94:64:9e:0e:83:1f:77:53:60:04:b6:39:
                    bd:74:77:56:e3:d1:6e:81:40:19:0e:07:8d:82:50:
                    8c:c0:66:14:1b:09:f7:e6:e3:7c:14:4d:fa:da:60:
                    e6:4a:e9:74:1d:4e:7f:7a:a2:0c:00:d7:03:07:70:
                    2e:22:e9:12:5d:79:5a:23:59:05:99:18:f8:e6:64:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:95:51:5F:C3:51:00:B5:01:D1:67:AF:66:FB:A7:EE:D6:B0:01
            X509v3 Authority Key Identifier:
                keyid:B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B889BE89077CF75CB3D33CA36A19B935046D749F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:69:87:9f:a5:ac:99:08:0e:f0:20:d2:64:44:cf:b2:3f:5b:
         e2:12:6e:35:11:68:39:c7:66:d7:34:6b:e4:ac:5f:83:7e:b8:
         45:bc:26:e1:15:2a:62:c1:56:57:af:8b:8e:b3:2a:3c:d0:e1:
         cc:78:94:d3:77:5a:7a:6b:90:00:8c:5f:ca:24:f4:9c:bd:f2:
         3a:8a:7d:d7:20:50:04:7b:1d:50:9e:5c:f5:00:23:e6:96:52:
         7e:a2:ad:63:a6:af:6f:9e:66:c2:be:06:ce:cd:c5:d2:17:98:
         5a:5c:b5:bd:07:c3:1c:ab:7b:3a:a1:2d:f5:39:a6:da:a1:44:
         a9:ae:cd:5a:4d:e7:91:35:cf:c1:b8:ac:b6:ce:8d:9a:a8:15:
         83:3b:a3:21:c2:fb:49:57:56:1a:14:b6:02:68:ab:e4:cd:fc:
         f5:82:62:fc:eb:02:2b:ea:87:f0:1d:ff:5e:b2:b4:e2:f8:a0:
         c6:d6:59:47:70:0b:5f:02:c6:f3:55:cc:a1:1d:99:dd:8d:c6:
         94:b3:1f:3f:aa:0d:1f:68:86:4d:e0:aa:c8:e4:9a:7c:11:c4:
         5a:2d:bc:62:b3:58:52:70:36:43:f9:29:24:40:aa:f5:b4:3b:
         c5:f8:b3:31:b0:63:97:01:5f:3b:9b:76:90:8d:6c:11:bc:25:
         99:bf:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:31:02 2025 by rpki-client