Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          Fq9TAQMY/00s3W/hrbH9xxEdHYupZNB5NH9ljLO00wY=
Subject key identifier:   BC:1D:A9:57:5B:8D:6F:5F:76:83:7B:21:E7:CD:A4:72:95:D1:49:31
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       0E9F7EA622AA744D15208B6048B44A4089C7F3B5
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 25 Aug 2025 20:12:51 +0000
ROA not before:           Mon 25 Aug 2025 20:07:51 +0000
ROA not after:            Mon 24 Aug 2026 20:12:51 +0000
asID:                     272218
IP address blocks:        2804:83c4:8008::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9f:7e:a6:22:aa:74:4d:15:20:8b:60:48:b4:4a:40:89:c7:f3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug 25 20:07:51 2025 GMT
            Not After : Aug 24 20:12:51 2026 GMT
        Subject: CN=BC1DA9575B8D6F5F76837B21E7CDA47295D14931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:14:4f:31:6e:c8:82:01:83:c5:b4:e3:0c:56:
                    9f:10:ab:0f:4e:16:66:f8:ad:b8:d9:f8:93:b6:49:
                    10:26:f3:a7:24:b1:17:2e:46:2d:23:01:5a:e3:23:
                    93:54:fe:5c:b3:a4:88:17:dc:af:69:fe:70:00:ab:
                    46:bb:18:58:b8:1b:fb:18:1f:eb:0f:d7:f1:97:43:
                    34:27:1f:28:67:17:c1:6c:83:2a:d1:4f:63:53:78:
                    8a:a2:1d:34:e8:02:bf:c5:0a:04:50:8a:55:f1:78:
                    ed:f5:06:b2:95:c6:9c:82:5b:15:25:0f:27:b5:7d:
                    04:e3:b4:ef:04:68:83:65:7c:77:dc:c2:dc:df:ea:
                    49:41:aa:16:02:cb:ce:dc:58:0a:07:fd:7b:fb:e6:
                    88:ac:8f:65:1f:cc:d1:0f:c1:71:4e:02:0d:26:72:
                    1c:57:35:d6:c5:cb:ef:07:f0:6a:79:b1:9d:f8:b8:
                    98:19:c6:53:5f:4c:a0:1b:89:2d:0d:29:ee:35:c3:
                    7b:8e:de:a3:fb:02:84:6f:44:59:d1:e6:39:1c:ef:
                    91:6a:d0:b9:68:c9:8e:b6:30:7d:a7:43:23:2d:08:
                    b2:50:51:33:83:60:04:33:18:ec:65:16:c4:31:07:
                    22:46:c2:3b:84:f0:c1:82:92:47:16:f4:8a:93:7e:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1D:A9:57:5B:8D:6F:5F:76:83:7B:21:E7:CD:A4:72:95:D1:49:31
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8008::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:62:7e:99:c9:73:e7:50:17:65:8e:d5:84:c8:6e:d3:8d:c1:
         7c:39:21:d1:67:6c:84:8c:44:81:73:80:82:2f:b5:4e:2e:32:
         b6:ae:3f:5e:e6:16:5f:e6:57:21:d9:62:1b:f5:40:9c:52:61:
         5e:af:e9:81:44:4f:a0:ae:4c:c9:7f:2a:54:ab:c3:0d:1d:72:
         ab:1b:62:e1:6c:c6:9d:41:54:14:3f:52:ff:a2:34:be:21:a1:
         89:f7:e9:34:9d:4f:35:fd:92:4c:ec:39:2e:b3:e0:c7:2a:c9:
         79:01:a7:2b:a1:b9:4b:6b:3d:ef:5b:e5:51:0d:7a:5e:0e:74:
         26:ae:2d:13:91:44:3b:69:98:47:c0:46:f8:07:17:2a:87:bd:
         43:0a:d8:cb:26:db:2f:d9:fd:7d:d1:65:e8:35:45:19:78:f7:
         16:76:18:bf:7c:41:d7:fe:bc:c4:e8:bd:24:0c:39:b8:04:fb:
         95:cf:e8:39:c7:59:c4:7a:ca:3e:f9:84:61:47:0c:50:94:79:
         e0:c4:53:bc:6b:9f:35:15:87:16:fb:23:3f:b3:40:54:f2:60:
         94:0c:1f:a8:95:84:fc:56:fd:d5:9d:b3:25:82:a7:20:5d:05:
         cc:e7:d8:e9:b4:81:15:1d:68:dc:75:f2:15:77:c3:34:62:d0:
         5f:93:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:32 2025 by rpki-client