Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          UTapkZHpPBUkYqAMQGbKFPRbL6jQiU3zkftpWuH0YIY=
Subject key identifier:   47:DE:2C:55:80:25:F2:35:F1:0B:28:BB:FF:5C:E9:EB:41:ED:A0:03
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       43F3F659B9C76BB7C0B98D9E685E0AB9E9914063
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 25 Aug 2025 20:12:52 +0000
ROA not before:           Mon 25 Aug 2025 20:07:52 +0000
ROA not after:            Mon 24 Aug 2026 20:12:52 +0000
asID:                     272218
IP address blocks:        2804:83c4:8015::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f3:f6:59:b9:c7:6b:b7:c0:b9:8d:9e:68:5e:0a:b9:e9:91:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug 25 20:07:52 2025 GMT
            Not After : Aug 24 20:12:52 2026 GMT
        Subject: CN=47DE2C558025F235F10B28BBFF5CE9EB41EDA003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:81:13:80:6b:02:89:54:5c:53:be:26:8a:
                    de:bc:e1:a4:cb:e0:e6:9a:c0:e8:b5:39:85:2b:c2:
                    e8:a4:16:f6:fe:62:59:43:79:8f:1d:eb:58:80:a1:
                    40:00:11:a7:21:73:34:be:5f:a1:e1:4d:1c:98:77:
                    1d:7e:d6:49:80:05:89:ad:56:18:5f:7b:cb:c5:a3:
                    ca:08:f0:a1:86:ef:b2:9c:3d:53:cb:72:2a:da:0b:
                    03:42:a8:d1:31:b9:0d:3d:d7:b3:c1:12:4d:91:4d:
                    67:8e:8a:f3:a4:0a:51:c4:a8:17:33:d5:0c:0b:cc:
                    8e:21:52:c8:99:ca:d2:90:4c:38:a1:f3:c5:ec:91:
                    38:ff:78:ab:d8:f8:c2:0a:5d:39:a9:d5:75:d2:92:
                    50:4a:7d:e1:7f:44:1d:dc:24:dd:a8:ff:66:a8:95:
                    ca:47:d4:60:32:ef:49:02:a9:36:8d:c5:ea:4c:30:
                    d2:fc:b2:d4:f8:a1:3e:51:42:d8:b4:c8:c0:7c:d9:
                    a0:49:ed:dd:9d:c2:4d:2f:ee:e2:24:82:6b:89:51:
                    bd:72:48:4d:3f:3d:00:ce:46:b2:6d:52:01:d0:d1:
                    39:54:aa:f8:74:22:fd:f7:4e:24:8a:14:33:6b:57:
                    f6:a1:5c:e2:a3:ca:69:0b:2a:bd:6d:c1:88:ae:5c:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:2C:55:80:25:F2:35:F1:0B:28:BB:FF:5C:E9:EB:41:ED:A0:03
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031353a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8015::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:1d:8a:a6:ff:e0:83:6a:a5:34:af:ab:cb:4c:cb:ad:af:
         a9:db:9d:9b:4f:d6:1d:b7:59:2d:69:7f:d8:50:3e:5a:11:6b:
         97:bd:61:8f:2e:89:b4:34:a2:c1:89:1d:76:80:0d:2f:1b:60:
         71:37:f1:ab:15:60:8f:ab:1c:3e:f7:5b:38:f5:ec:9b:f5:cc:
         29:41:89:b1:74:2d:de:0c:f0:9d:b7:b0:81:f0:da:c2:e7:74:
         e3:17:e2:6c:9f:5f:e6:e7:fb:b4:99:ac:98:27:8f:13:92:c1:
         68:5a:0e:4a:1f:73:c8:f2:36:9e:b1:4f:21:0a:dc:56:49:ea:
         49:ae:ea:74:16:2a:d6:a2:92:c0:ba:bc:48:e2:d3:2d:87:ff:
         34:5b:8f:b3:38:6f:57:58:9e:6b:b3:fd:7c:a4:ba:50:10:88:
         4c:34:84:d5:2e:0c:50:e1:fd:68:58:8f:78:7b:84:01:8a:58:
         01:6c:4b:53:05:1e:42:37:7a:1c:98:21:3c:06:d5:2a:63:19:
         59:39:fd:9c:1d:8e:ae:f4:3a:16:49:6c:9d:c1:f8:8d:6e:60:
         2d:c5:a7:ee:fc:f2:22:2b:cb:d8:10:10:70:a1:c6:82:79:df:
         09:6d:3e:89:aa:62:90:7b:5c:ce:33:64:d8:99:7e:e7:f0:11:
         1f:67:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:55:16 2025 by rpki-client