Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          hTiHZmACF9SshJTbrsI2Bwvfx6DXz5SKMkxWVt5WJCc=
Subject key identifier:   AD:D6:0D:E2:93:10:56:97:EF:E1:EF:FC:B7:54:F8:24:32:B9:EB:D8
Certificate issuer:       /CN=B889BE89077CF75CB3D33CA36A19B935046D749F
Certificate serial:       7FD92A83D7DA7DE6E46E5166C2730979B87FD7E9
Authority key identifier: B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 07 Feb 2025 17:17:35 +0000
ROA not before:           Fri 07 Feb 2025 17:12:35 +0000
ROA not after:            Fri 06 Feb 2026 17:17:35 +0000
asID:                     267035
IP address blocks:        45.227.151.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d9:2a:83:d7:da:7d:e6:e4:6e:51:66:c2:73:09:79:b8:7f:d7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B889BE89077CF75CB3D33CA36A19B935046D749F
        Validity
            Not Before: Feb  7 17:12:35 2025 GMT
            Not After : Feb  6 17:17:35 2026 GMT
        Subject: CN=ADD60DE293105697EFE1EFFCB754F82432B9EBD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:af:fe:2f:44:ad:d6:94:9c:da:eb:64:ba:
                    d3:6d:9a:11:2f:dc:f4:ef:49:54:4e:fd:3c:22:b3:
                    ff:c0:5b:cd:f5:e7:fe:b9:5d:9a:4a:38:ef:4b:15:
                    7c:2e:ef:c9:9d:db:01:91:ab:fc:e3:0c:95:d0:07:
                    0d:a0:f1:da:00:2a:9a:59:19:17:90:7c:fd:6c:ff:
                    25:bb:20:5c:e4:a2:e6:a0:06:9f:3f:89:91:06:38:
                    96:ea:41:ae:49:ed:1c:96:81:5b:47:fa:0a:40:f4:
                    49:44:f4:e3:9b:bc:51:57:fb:ed:80:6f:0e:6a:87:
                    12:78:8b:91:6d:ee:41:92:69:5b:28:54:25:a9:4f:
                    7a:f7:6d:37:cc:29:fc:55:75:90:d9:84:e4:5f:fb:
                    b0:c7:01:ea:c2:36:0c:2c:88:95:b1:ef:97:a5:8c:
                    27:88:65:e6:0b:c8:55:07:a0:ef:03:b8:99:8f:83:
                    a5:d8:20:96:4d:29:b9:22:6a:92:01:6f:21:72:49:
                    6d:21:df:92:a0:97:43:38:1d:a8:a9:9f:bf:9a:bb:
                    11:a0:96:79:dd:ec:34:f6:7e:16:e9:1c:d4:e2:0d:
                    88:a3:af:6a:11:a6:2e:93:58:a2:1c:ba:9c:bb:dd:
                    11:d5:bb:ee:14:79:25:43:88:52:49:45:7a:fd:e7:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:0D:E2:93:10:56:97:EF:E1:EF:FC:B7:54:F8:24:32:B9:EB:D8
            X509v3 Authority Key Identifier:
                keyid:B8:89:BE:89:07:7C:F7:5C:B3:D3:3C:A3:6A:19:B9:35:04:6D:74:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/B889BE89077CF75CB3D33CA36A19B935046D749F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B889BE89077CF75CB3D33CA36A19B935046D749F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:6d:05:90:ae:dd:d2:9c:e1:0e:d8:8b:a7:ed:5e:dd:97:
         6e:f1:be:9a:ce:84:5b:03:f1:68:c7:2c:c3:11:a1:0f:84:50:
         68:d0:a6:1c:ad:ca:4f:e5:b6:c5:d9:8e:84:40:f5:1c:83:e2:
         f2:82:f9:c0:9d:a9:ea:2d:25:c9:9e:60:21:77:2e:bd:a5:1f:
         49:4c:aa:d2:e3:b4:3c:28:a8:88:c6:08:e8:81:75:d1:e6:e8:
         c2:bf:98:bf:1f:93:23:f3:22:d9:a3:af:18:47:59:52:07:d3:
         6d:97:1d:6c:0c:c6:80:81:8e:d4:5d:b9:60:4e:1f:ec:69:0d:
         6a:ac:fe:d5:fe:fa:96:95:a2:1a:01:a8:60:27:9b:19:44:e5:
         be:d4:48:02:38:37:e9:36:a4:67:9f:59:05:14:6a:92:d9:f6:
         aa:d4:4c:ad:bf:28:77:cb:70:02:5f:d0:87:ed:6e:30:1b:c9:
         f8:68:dd:86:79:7f:49:23:33:b3:d0:72:8b:82:0b:ee:ae:13:
         86:04:dd:fa:8a:68:a8:84:9b:63:32:42:66:c1:e6:7f:79:63:
         ce:b6:19:ac:77:95:a2:95:35:00:54:3c:79:16:bd:f5:fa:92:
         9a:eb:1e:1e:ab:1f:4c:6c:48:3e:13:3b:19:cb:ea:c7:31:c1:
         8d:93:da:03
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUf9kqg9fafebkblFmwnMJebh/1+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4OUJFODkwNzdDRjc1Q0IzRDMzQ0EzNkExOUI5MzUw
NDZENzQ5RjAeFw0yNTAyMDcxNzEyMzVaFw0yNjAyMDYxNzE3MzVaMDMxMTAvBgNV
BAMTKEFERDYwREUyOTMxMDU2OTdFRkUxRUZGQ0I3NTRGODI0MzJCOUVCRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcia/+L0St1pSc2utkutNtmhEv
3PTvSVRO/Twis//AW8315/65XZpKOO9LFXwu78md2wGRq/zjDJXQBw2g8doAKppZ
GReQfP1s/yW7IFzkouagBp8/iZEGOJbqQa5J7RyWgVtH+gpA9ElE9OObvFFX++2A
bw5qhxJ4i5Ft7kGSaVsoVCWpT3r3bTfMKfxVdZDZhORf+7DHAerCNgwsiJWx75el
jCeIZeYLyFUHoO8DuJmPg6XYIJZNKbkiapIBbyFySW0h35Kgl0M4Haipn7+auxGg
lnnd7DT2fhbpHNTiDYijr2oRpi6TWKIcupy73RHVu+4UeSVDiFJJRXr95yNfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUrdYN4pMQVpfv4e/8t1T4JDK569gwHwYDVR0j
BBgwFoAUuIm+iQd891yz0zyjahm5NQRtdJ8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvQjg4OUJFODkwNzdDRjc1Q0IzRDMzQ0EzNkExOUI5MzUwNDZENzQ5Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CODg5QkU4OTA3N0NGNzVDQjNE
MzNDQTM2QTE5QjkzNTA0NkQ3NDlGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzQz
NTJlMzIzMjM3MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt45cwDQYJKoZIhvcNAQELBQADggEBAFO7bQWQrt3S
nOEO2Iun7V7dl27xvprOhFsD8WjHLMMRoQ+EUGjQphytyk/ltsXZjoRA9RyD4vKC
+cCdqeotJcmeYCF3Lr2lH0lMqtLjtDwoqIjGCOiBddHm6MK/mL8fkyPzItmjrxhH
WVIH022XHWwMxoCBjtRduWBOH+xpDWqs/tX++paVohoBqGAnmxlE5b7USAI4N+k2
pGefWQUUapLZ9qrUTK2/KHfLcAJf0IftbjAbyfho3YZ5f0kjM7PQcouCC+6uE4YE
3fqKaKiEm2MyQmbB5n95Y862Gax3laKVNQBUPHkWvfX6kprrHh6rH0xsSD4TOxnL
6scxwY2T2gM=
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:15:48 2025 by rpki-client