Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030623a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030623a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          chFBLpx52mPoiBdmIURwvz0/8CmXGYp3QU2whtEYjYg=
Subject key identifier:   63:55:D4:52:F8:56:9F:20:9B:27:0A:3F:8F:55:50:01:6C:E7:15:06
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       580CAFBEB09400C1628A8AA80C49E96C5504B956
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030623a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 25 Aug 2025 20:12:51 +0000
ROA not before:           Mon 25 Aug 2025 20:07:51 +0000
ROA not after:            Mon 24 Aug 2026 20:12:51 +0000
asID:                     272218
IP address blocks:        2804:83c4:800b::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:af:be:b0:94:00:c1:62:8a:8a:a8:0c:49:e9:6c:55:04:b9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug 25 20:07:51 2025 GMT
            Not After : Aug 24 20:12:51 2026 GMT
        Subject: CN=6355D452F8569F209B270A3F8F5550016CE71506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:9e:a0:0f:06:b9:4a:0b:0b:0b:f9:da:00:
                    e2:5f:f4:60:62:fd:83:71:9e:6f:2a:cd:01:b0:eb:
                    57:16:c3:a0:47:78:57:bc:d8:98:b7:8a:9f:16:24:
                    a8:7b:ef:81:75:8c:18:b6:c5:2f:95:38:e6:c3:9e:
                    2c:10:16:96:97:61:35:1f:4f:dc:2a:6c:bc:98:13:
                    0d:ae:2a:74:50:a7:5c:b7:6b:15:b2:08:14:e3:06:
                    a9:7f:48:88:26:20:b5:84:3c:69:0e:87:5d:49:57:
                    49:41:c5:5f:4a:39:05:04:21:bc:e2:54:1c:6f:c8:
                    aa:19:c5:ee:eb:26:67:c1:af:cc:6a:30:11:e4:e7:
                    fc:bb:7c:4a:bf:f4:9a:46:2a:de:f0:c5:da:0f:b2:
                    30:6c:f9:6a:88:e8:94:99:0b:d1:62:73:53:15:38:
                    19:a3:58:fe:11:41:0c:e7:7f:e9:86:26:e4:c7:48:
                    18:69:a9:ce:ba:43:21:32:f8:a9:c6:be:9d:d2:06:
                    24:bc:9b:1d:54:4b:ca:2e:92:bd:0f:7e:85:54:62:
                    00:80:6e:0b:e9:e8:cc:48:5a:35:d2:71:b3:42:16:
                    6c:5f:2c:50:2c:3d:3c:4e:fd:34:b6:f7:d4:a1:61:
                    33:4a:17:f3:fa:78:30:df:0f:78:70:da:ee:ee:1c:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:D4:52:F8:56:9F:20:9B:27:0A:3F:8F:55:50:01:6C:E7:15:06
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030623a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:800b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:34:f2:33:c8:bc:4f:b6:4d:ee:78:e5:70:8e:5f:ca:cb:
         46:4d:92:9f:5e:e0:fb:3a:81:34:2b:41:cc:f1:20:f3:25:d2:
         17:c1:64:b2:a6:3b:2d:59:80:f9:ae:0b:e3:be:c3:16:1e:76:
         80:e0:31:23:20:96:62:17:dd:a2:49:1b:c5:ad:2d:d7:1f:85:
         01:cb:29:89:63:44:6f:bf:e7:ba:09:09:40:b5:58:0c:51:e7:
         13:00:93:3f:9f:eb:dc:93:f3:46:71:e1:52:d0:a4:f1:03:1a:
         24:70:32:64:84:64:38:70:9d:ad:4a:d6:d2:37:58:df:27:08:
         b6:7a:ed:d7:d9:29:cc:88:25:ac:31:6f:6c:c8:97:ce:b5:10:
         2e:12:b1:f6:99:b5:e4:61:1a:47:3b:3e:f6:d3:a0:70:0b:10:
         65:f8:ed:17:0f:27:a7:0f:a5:76:c5:10:a2:7f:4f:56:a0:61:
         8c:0f:8f:c5:47:25:c3:1b:97:1a:8c:73:e2:5e:16:79:36:2c:
         b1:6f:71:d8:74:82:af:d1:ed:65:17:85:d7:be:10:be:77:62:
         b5:33:98:ea:cb:05:46:9f:40:56:04:9b:45:f7:91:92:52:f1:
         82:37:78:6d:4f:9a:81:2e:4d:45:53:f7:b8:d1:e9:6b:8b:cb:
         df:8e:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:18 2025 by rpki-client