Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa
File:                     323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier:          8qSwM7BkIyYDFl5F8mXbc0KFTD9+iNHpeqGjOTlmTJ0=
Subject key identifier:   50:C0:0C:C9:79:C5:23:A8:35:45:F8:72:18:E0:0C:E3:D0:F8:F9:00
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       1E4C24E4A652321F864C8723DC523E4F4AEA86FE
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa
Signing time:             Wed 03 Sep 2025 13:16:12 +0000
ROA not before:           Wed 03 Sep 2025 13:11:12 +0000
ROA not after:            Wed 02 Sep 2026 13:16:12 +0000
asID:                     272218
IP address blocks:        2804:83c4:610::/44 maxlen: 44
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:24:e4:a6:52:32:1f:86:4c:87:23:dc:52:3e:4f:4a:ea:86:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep  3 13:11:12 2025 GMT
            Not After : Sep  2 13:16:12 2026 GMT
        Subject: CN=50C00CC979C523A83545F87218E00CE3D0F8F900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:96:21:91:d8:14:f7:7d:5b:d6:15:83:f9:
                    22:49:e6:c7:d5:a5:21:db:46:af:ad:b4:b2:c4:23:
                    57:7d:a5:9e:cb:f8:b1:59:53:de:47:0a:5e:9d:bc:
                    df:2a:a4:ff:10:ce:6f:5e:eb:3b:c2:c0:71:11:b2:
                    66:99:5f:46:03:64:b0:21:45:e8:24:42:58:c3:0b:
                    e7:b1:50:c8:9a:a2:23:ba:90:ab:cf:a9:b7:5f:b2:
                    df:3f:b2:6c:90:76:f1:3b:b8:71:37:cc:f5:d9:12:
                    83:ee:69:1b:de:a8:54:0c:d6:db:27:ce:13:d2:5e:
                    b3:3b:b6:ba:8e:4e:d7:bb:1f:28:6f:06:24:25:5f:
                    ee:ee:52:f6:9a:ed:af:54:b1:df:2c:a5:ac:44:bd:
                    e0:1d:f2:7f:17:79:a0:9e:6f:02:c5:e6:94:7b:0f:
                    da:5f:40:2f:41:bb:93:c9:c2:83:75:0d:61:1a:32:
                    17:71:4a:ac:74:db:cd:b4:d0:2d:ea:65:39:eb:f8:
                    7f:c7:30:43:0b:06:c8:3f:79:9b:95:12:45:57:c0:
                    4a:29:78:b0:15:e3:af:c0:7a:70:80:d3:c1:69:15:
                    8d:8a:f1:0b:da:2b:0f:07:a9:af:1e:34:c7:ec:5f:
                    1a:af:2c:66:c1:71:5c:2e:c5:cb:9a:ad:4c:3f:ba:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:0C:C9:79:C5:23:A8:35:45:F8:72:18:E0:0C:E3:D0:F8:F9:00
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:610::/44

    Signature Algorithm: sha256WithRSAEncryption
         ce:ed:93:54:03:5f:bd:4b:cb:e5:91:36:19:e7:03:f3:8d:9e:
         2a:26:c6:cf:80:ad:6e:11:b9:ca:50:80:70:97:d7:c1:18:c6:
         f1:6b:ee:15:72:75:a7:23:65:4a:8b:f2:84:60:2d:d6:28:7d:
         07:41:e3:62:52:98:14:f9:19:e2:54:17:43:59:e7:90:7f:62:
         65:d1:57:7e:eb:37:d7:38:a4:f5:2e:dd:b0:b6:09:55:b9:e8:
         a2:38:b7:0d:91:35:15:82:51:77:19:e4:05:22:07:cb:2b:f1:
         50:a5:51:44:62:0b:1a:98:3e:5b:77:6e:31:02:cb:43:3d:34:
         f1:d9:fa:bf:ab:86:b6:e8:7c:07:9f:95:9f:b6:12:59:4b:55:
         48:4a:33:5c:7c:d0:21:20:18:62:4a:94:a7:50:51:3d:9d:d7:
         a8:b9:a8:6d:71:55:85:44:d5:86:62:9b:84:89:bb:3f:75:7f:
         8b:2a:e1:a0:af:a5:fa:0b:8e:5b:68:a7:91:63:4d:e1:8f:df:
         43:ad:0b:40:28:59:60:07:4e:32:56:09:63:c4:64:39:be:f0:
         81:8c:43:9c:b7:58:9d:03:7c:27:d4:e0:4c:17:7a:61:54:ec:
         f3:67:1f:b3:90:31:49:44:8a:81:bf:d7:99:d6:7b:af:b7:e7:
         e2:67:bf:30
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUHkwk5KZSMh+GTIcj3FI+T0rqhv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNTA5MDMxMzExMTJaFw0yNjA5MDIxMzE2MTJaMDMxMTAvBgNV
BAMTKDUwQzAwQ0M5NzlDNTIzQTgzNTQ1Rjg3MjE4RTAwQ0UzRDBGOEY5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUO5YhkdgU931b1hWD+SJJ5sfV
pSHbRq+ttLLEI1d9pZ7L+LFZU95HCl6dvN8qpP8Qzm9e6zvCwHERsmaZX0YDZLAh
RegkQljDC+exUMiaoiO6kKvPqbdfst8/smyQdvE7uHE3zPXZEoPuaRveqFQM1tsn
zhPSXrM7trqOTte7HyhvBiQlX+7uUvaa7a9Usd8spaxEveAd8n8XeaCebwLF5pR7
D9pfQC9Bu5PJwoN1DWEaMhdxSqx028200C3qZTnr+H/HMEMLBsg/eZuVEkVXwEop
eLAV46/AenCA08FpFY2K8QvaKw8Hqa8eNMfsXxqvLGbBcVwuxcuarUw/un/fAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUMAMyXnFI6g1RfhyGOAM49D4+QAwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2EzNjMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNl
MjAzMjM3MzIzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBIPEBhAwDQYJKoZIhvcNAQELBQAD
ggEBAM7tk1QDX71Ly+WRNhnnA/ONniomxs+ArW4RucpQgHCX18EYxvFr7hVydacj
ZUqL8oRgLdYofQdB42JSmBT5GeJUF0NZ55B/YmXRV37rN9c4pPUu3bC2CVW56KI4
tw2RNRWCUXcZ5AUiB8sr8VClUURiCxqYPlt3bjECy0M9NPHZ+r+rhrbofAeflZ+2
EllLVUhKM1x80CEgGGJKlKdQUT2d16i5qG1xVYVE1YZim4SJuz91f4sq4aCvpfoL
jltop5FjTeGP30OtC0AoWWAHTjJWCWPEZDm+8IGMQ5y3WJ0DfCfU4EwXemFU7PNn
H7OQMUlEioG/15nWe6+35+JnvzA=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:45:07 2025 by rpki-client