Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          Iay5UCh9xK/fk2n2rEWkd7ayVXg0RGjxA/nPsTzdK5s=
Subject key identifier:   38:E8:52:12:E7:BE:D8:81:E9:6E:BA:9C:E3:7C:64:75:08:3D:E1:6D
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       4EFAD56F3A8974E9CC0F04DA39DF8B34B1CAB601
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 25 Aug 2025 20:12:52 +0000
ROA not before:           Mon 25 Aug 2025 20:07:52 +0000
ROA not after:            Mon 24 Aug 2026 20:12:52 +0000
asID:                     272218
IP address blocks:        2804:83c4:8000::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fa:d5:6f:3a:89:74:e9:cc:0f:04:da:39:df:8b:34:b1:ca:b6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug 25 20:07:52 2025 GMT
            Not After : Aug 24 20:12:52 2026 GMT
        Subject: CN=38E85212E7BED881E96EBA9CE37C6475083DE16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:49:7e:47:c3:52:55:99:78:83:9f:87:08:
                    8e:e8:f3:a1:9b:ae:b4:86:b9:d1:b8:44:2c:1f:1d:
                    7d:b6:96:b5:e2:47:cf:36:31:36:b7:18:db:68:82:
                    3e:8b:20:78:39:a7:43:bf:3c:27:e8:4c:15:5e:95:
                    95:64:0d:c8:65:9e:fa:89:f0:30:bb:2a:ad:56:f8:
                    31:df:56:f5:40:05:df:ea:d5:bf:5a:ab:94:67:8c:
                    40:3f:bf:93:fe:f5:22:ed:7c:5e:fc:ef:ca:93:63:
                    bd:21:89:f0:36:26:08:7f:16:cf:d1:ce:fb:f0:9d:
                    8a:fd:88:b7:27:fb:02:31:0d:9e:2e:78:91:a7:b5:
                    52:c4:3f:ea:d0:3e:38:42:47:8e:35:2a:97:74:0a:
                    c9:96:e9:ca:fa:28:d6:69:9f:1d:d5:9d:42:30:61:
                    72:bb:de:ab:f0:e1:01:c1:05:e2:78:9c:02:62:e8:
                    c9:57:c3:45:56:8d:a0:62:8d:10:35:8e:39:c2:5f:
                    59:9e:2d:60:53:0e:ed:da:11:26:86:dd:d7:fe:b4:
                    c9:55:d0:ef:ed:24:b1:87:4d:d8:69:e7:8b:29:23:
                    88:10:18:d4:fa:6e:52:48:85:66:4d:54:be:6d:45:
                    78:8c:dd:78:7a:23:61:9c:cd:c5:fa:48:33:43:0c:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:52:12:E7:BE:D8:81:E9:6E:BA:9C:E3:7C:64:75:08:3D:E1:6D
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:9c:d1:52:e0:8e:b3:4b:18:cf:10:9c:03:58:b8:c0:48:
         b9:c0:b5:cb:4a:64:20:18:30:97:91:cb:a3:4a:f0:a0:d0:31:
         a5:83:4d:ca:79:fd:23:e3:7d:06:44:33:a4:9a:75:61:11:94:
         ce:07:f4:16:8e:4a:25:38:d3:75:c9:de:72:cb:35:2c:40:5b:
         ea:e1:90:81:74:42:3f:64:84:cf:da:6a:89:d2:93:a5:6b:e0:
         c1:13:04:a8:3c:22:2e:c8:dd:dc:47:b3:f3:f6:d1:d7:69:87:
         75:3d:f7:21:57:6d:20:73:74:4d:8b:be:51:84:ac:9f:18:0a:
         c3:2d:b6:80:03:64:dc:ed:34:74:7c:d6:3c:87:9f:f3:cd:6e:
         9d:9a:10:25:52:57:9c:2c:52:22:48:8d:65:dc:1a:5f:12:b9:
         3b:ec:cd:c1:85:fb:65:a3:f3:a2:63:74:b5:8e:29:9f:e1:26:
         89:07:32:cb:a5:bd:98:b7:ca:6a:55:0c:4b:20:8d:87:b7:7f:
         9b:92:e0:c8:1a:c9:06:ce:65:82:2e:ac:37:ca:c9:d7:cb:12:
         95:df:2c:99:6f:bb:d5:af:91:9a:1e:0e:a8:3d:d6:90:1a:88:
         68:9b:70:c3:5d:e0:a8:c2:65:25:91:3d:25:bf:28:ce:1c:5f:
         52:28:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:23 2025 by rpki-client