Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa
File:                     323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa (raw, json)
Hash identifier:          YNyA0ovJy3lf+8X8IcU2KIXyXWMef1/4izB8Jk6t3E0=
Subject key identifier:   6B:EC:44:BB:95:9F:01:46:39:8B:EB:6C:E4:49:48:4C:D0:ED:4C:B1
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       7E685BD023BB936244021AB1C7483B5A6AAE4B01
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa
Signing time:             Wed 03 Sep 2025 13:12:46 +0000
ROA not before:           Wed 03 Sep 2025 13:07:46 +0000
ROA not after:            Wed 02 Sep 2026 13:12:46 +0000
asID:                     272218
IP address blocks:        2804:83c4:b3f0::/44 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:68:5b:d0:23:bb:93:62:44:02:1a:b1:c7:48:3b:5a:6a:ae:4b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep  3 13:07:46 2025 GMT
            Not After : Sep  2 13:12:46 2026 GMT
        Subject: CN=6BEC44BB959F0146398BEB6CE449484CD0ED4CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fb:da:d2:a4:7a:2d:70:c3:9b:c2:d2:59:fd:
                    22:71:7e:c8:e3:b4:4f:75:c0:53:21:35:6f:b5:16:
                    7f:49:09:e3:ac:06:97:32:3f:d9:2b:7d:fe:f7:9c:
                    42:f4:3d:95:28:7b:67:45:f1:2a:2e:e2:0b:94:8d:
                    eb:8f:51:43:3f:f0:a0:e9:14:cd:84:12:1c:d3:ac:
                    51:fd:b3:cc:bd:0e:cb:1a:a6:ff:b2:dc:41:25:8d:
                    12:fc:e3:72:5e:5a:e9:de:59:e6:d9:35:4c:d2:b5:
                    7a:c4:3b:ed:4e:87:db:d1:94:45:77:21:e9:69:31:
                    fe:8a:c3:13:f3:98:79:cb:33:76:74:ae:8f:f7:81:
                    06:3c:98:63:15:76:c6:a7:cb:90:11:d8:63:fc:8c:
                    80:7f:03:da:6d:92:d6:13:7f:d1:43:33:d6:bb:a1:
                    91:1e:04:81:a3:6d:ca:b4:d0:da:fa:32:89:dd:d7:
                    6f:50:26:6d:eb:5a:15:06:51:1e:64:7a:c9:e0:e0:
                    cb:a7:07:16:13:d9:8c:d3:2b:bb:0e:7b:8f:fe:4e:
                    70:88:b1:f3:29:6e:02:5f:c7:10:ec:1b:3a:32:05:
                    b8:ce:84:52:6c:16:f9:34:fa:91:bd:77:aa:6e:db:
                    74:5d:a8:1a:4c:f4:af:6a:f4:e1:d8:c5:a9:20:bb:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:44:BB:95:9F:01:46:39:8B:EB:6C:E4:49:48:4C:D0:ED:4C:B1
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623366303a3a2f34342d3634203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:b3f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:b4:22:a7:27:70:75:8a:ce:b7:c9:b9:c9:bf:fb:7b:a3:
         3e:ef:4b:70:d2:b0:fd:a8:fa:15:95:3e:c9:dd:7b:59:00:a5:
         a4:2d:f9:5d:97:5f:f4:7b:8e:0a:d4:78:63:34:7d:88:bb:7d:
         b2:a6:69:72:6f:49:83:37:89:2b:fb:2d:e5:93:f8:1a:01:1a:
         97:a3:9d:66:85:cf:9a:1d:4f:9d:e7:0c:06:d9:b7:b4:31:45:
         09:b3:c5:aa:c0:dd:10:43:9b:36:b9:ea:0d:01:30:9f:29:c0:
         3b:eb:09:f1:b0:42:8f:6d:7c:e0:10:0a:b0:38:12:8c:f4:87:
         3d:b5:06:f5:33:55:44:05:ff:c0:6f:61:cf:22:67:37:2b:b4:
         db:74:03:95:7e:a9:a2:6f:71:82:7c:78:ba:f4:6c:c8:1f:31:
         18:30:25:4e:47:f9:cf:97:35:53:09:c2:40:a0:42:a6:ff:26:
         74:22:6e:7f:a8:62:91:71:f0:c1:33:e9:60:db:6a:60:04:8b:
         30:99:63:7e:45:ed:63:13:01:d3:ac:53:b3:59:cb:79:db:4e:
         02:fe:6b:32:0b:6f:20:82:2f:93:0a:0c:80:b8:dc:99:3a:bc:
         f4:08:7a:20:d9:8b:04:10:eb:d0:44:33:d1:10:fe:1b:48:8f:
         8f:64:cd:c7
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUfmhb0CO7k2JEAhqxx0g7WmquSwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNTA5MDMxMzA3NDZaFw0yNjA5MDIxMzEyNDZaMDMxMTAvBgNV
BAMTKDZCRUM0NEJCOTU5RjAxNDYzOThCRUI2Q0U0NDk0ODRDRDBFRDRDQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+9rSpHotcMObwtJZ/SJxfsjj
tE91wFMhNW+1Fn9JCeOsBpcyP9krff73nEL0PZUoe2dF8Sou4guUjeuPUUM/8KDp
FM2EEhzTrFH9s8y9Dssapv+y3EEljRL843JeWuneWebZNUzStXrEO+1Oh9vRlEV3
IelpMf6KwxPzmHnLM3Z0ro/3gQY8mGMVdsany5AR2GP8jIB/A9ptktYTf9FDM9a7
oZEeBIGjbcq00Nr6Mond129QJm3rWhUGUR5kesng4MunBxYT2YzTK7sOe4/+TnCI
sfMpbgJfxxDsGzoyBbjOhFJsFvk0+pG9d6pu23RdqBpM9K9q9OHYxakgu/XrAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUa+xEu5WfAUY5i+ts5ElITNDtTLEwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2E2MjMzNjYzMDNhM2EyZjM0MzQyZDM2MzQyMDNk
M2UyMDMyMzczMjMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgEg8Sz8DANBgkqhkiG9w0BAQsF
AAOCAQEAdQy0IqcncHWKzrfJucm/+3ujPu9LcNKw/aj6FZU+yd17WQClpC35XZdf
9HuOCtR4YzR9iLt9sqZpcm9JgzeJK/st5ZP4GgEal6OdZoXPmh1PnecMBtm3tDFF
CbPFqsDdEEObNrnqDQEwnynAO+sJ8bBCj2184BAKsDgSjPSHPbUG9TNVRAX/wG9h
zyJnNyu023QDlX6pom9xgnx4uvRsyB8xGDAlTkf5z5c1UwnCQKBCpv8mdCJuf6hi
kXHwwTPpYNtqYASLMJljfkXtYxMB06xTs1nLedtOAv5rMgtvIIIvkwoMgLjcmTq8
9Ah6INmLBBDr0EQz0RD+G0iPj2TNxw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:50 2025 by rpki-client