Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          hQQ7q/yNTSYm7TweheY6XCw2Mh7SW9L8yZJEnhw7VdI=
Subject key identifier:   94:0F:C2:D9:00:33:5F:E2:BC:CB:B7:59:11:7D:C0:E5:C8:07:F1:12
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       4FF42BF4F50031E69D13F2111A20AEA769BA48EE
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 25 Aug 2025 20:12:52 +0000
ROA not before:           Mon 25 Aug 2025 20:07:52 +0000
ROA not after:            Mon 24 Aug 2026 20:12:52 +0000
asID:                     272218
IP address blocks:        2804:83c4:8006::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f4:2b:f4:f5:00:31:e6:9d:13:f2:11:1a:20:ae:a7:69:ba:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug 25 20:07:52 2025 GMT
            Not After : Aug 24 20:12:52 2026 GMT
        Subject: CN=940FC2D900335FE2BCCBB759117DC0E5C807F112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:24:3d:03:68:b2:24:cc:a2:88:57:43:3b:
                    72:9e:47:aa:3f:ab:bc:30:ca:d2:db:1b:4d:35:b2:
                    38:7f:fe:ae:e7:6b:06:d4:25:9f:8c:8b:4c:1f:7a:
                    1c:fa:b9:22:6d:74:e9:fb:0b:43:da:94:85:51:db:
                    bf:b1:38:67:9c:48:22:59:c8:90:04:0b:01:60:ca:
                    00:36:63:04:f9:03:a1:44:8b:9f:bf:58:cd:f6:5a:
                    a3:38:da:05:06:ce:a7:8f:9f:60:4a:14:d7:67:5d:
                    5b:d6:18:e8:d8:47:c4:66:35:81:59:f1:bd:4c:b8:
                    b3:25:b0:5a:61:e5:8e:dd:1d:8e:0d:65:7c:69:89:
                    71:c6:47:64:fc:f8:e0:47:5b:c2:06:ec:ee:ee:63:
                    2c:62:3a:42:d1:7a:69:07:17:52:9c:09:ed:4b:8c:
                    e6:ec:62:7a:ab:e3:c4:9f:45:b7:b5:92:cf:d1:8a:
                    f7:3d:9d:af:e5:26:6b:1a:75:89:ef:05:8b:88:23:
                    cc:11:4a:f3:cd:a7:0f:ad:a4:19:61:c9:74:40:2a:
                    35:50:a9:3c:fe:a0:bf:7a:50:0c:3e:af:89:96:5b:
                    a3:04:42:08:d6:f9:55:35:60:6b:f3:74:a4:a9:67:
                    06:dd:34:ff:7a:62:f9:3b:4c:d2:85:50:20:bd:fa:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:C2:D9:00:33:5F:E2:BC:CB:B7:59:11:7D:C0:E5:C8:07:F1:12
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030363a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:29:08:fd:9f:fe:09:d6:18:78:7e:c0:1f:e9:19:6e:94:21:
         42:25:32:4c:cb:ba:a4:13:ba:be:30:c5:e1:fb:2c:7d:ab:22:
         75:0c:25:11:fd:26:17:6b:80:b5:50:9c:d5:d3:28:19:00:68:
         a2:b6:40:0e:db:34:77:03:31:82:5c:f9:5d:89:e9:10:b1:6a:
         13:71:b6:e8:a6:a0:b7:bf:d4:35:71:d3:98:4e:de:95:05:1c:
         df:55:f5:4d:bd:01:24:d0:02:53:2e:0f:09:ab:df:fc:12:50:
         1e:91:08:d0:10:a4:ae:3d:c7:83:da:f6:f3:13:eb:78:5e:06:
         cf:8b:b1:a4:90:c4:16:96:5c:20:8b:e5:0e:f8:96:07:c1:6b:
         60:02:30:11:be:0e:5c:65:79:c4:34:8d:61:4c:fe:f5:29:4c:
         5c:20:b5:14:98:c2:97:d5:b7:01:7b:22:1c:d8:75:b7:0d:51:
         d5:2b:cb:e5:ec:e5:cd:e9:8d:e0:06:59:23:5d:b9:b3:a8:3f:
         ed:d6:34:45:b0:ef:1f:3d:05:de:5a:57:fa:7a:7a:32:45:4c:
         cd:4c:78:0e:0d:d8:36:21:f2:c3:80:ba:10:5e:2e:1c:6d:4f:
         ba:cc:32:f4:8d:7a:2d:c2:0c:7e:26:a4:8b:38:8b:77:e5:6c:
         95:f5:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:23 2025 by rpki-client