Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626430303a3a2f34312d3431203d3e20323732323138.roa
File:                     323830343a383363343a626430303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier:          wW4H0s6lRo7ItVU8MamlE9Z896eQRxif0eWeykyIgb0=
Subject key identifier:   94:C2:73:87:7E:4C:05:72:3B:2B:A5:1F:A1:F6:D5:4C:3D:F3:D2:26
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       5C45AAC0DB66A372DC1D4F096F13496A8FBF0F96
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626430303a3a2f34312d3431203d3e20323732323138.roa
Signing time:             Wed 16 Sep 2026 20:12:47 +0000
ROA not before:           Wed 16 Sep 2026 20:07:47 +0000
ROA not after:            Wed 15 Sep 2027 20:12:47 +0000
asID:                     272218
IP address blocks:        2804:83c4:bd00::/41 maxlen: 41
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:45:aa:c0:db:66:a3:72:dc:1d:4f:09:6f:13:49:6a:8f:bf:0f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 16 20:07:47 2026 GMT
            Not After : Sep 15 20:12:47 2027 GMT
        Subject: CN=94C273877E4C05723B2BA51FA1F6D54C3DF3D226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:5c:d5:20:35:8d:1c:fa:28:1d:49:d8:53:
                    b1:4b:ef:15:fd:a8:b2:27:d4:88:8a:08:56:71:70:
                    1c:23:99:73:2e:41:1a:32:1c:13:39:75:60:d0:da:
                    37:9a:a8:ae:23:f8:2b:20:0d:df:f4:40:60:a8:c5:
                    43:a8:79:fd:0c:85:5b:92:36:e8:47:7b:1a:da:73:
                    dc:f6:85:86:41:1a:25:df:44:94:5f:1b:23:9f:f4:
                    fb:4a:b0:51:e7:20:ec:79:06:ca:5a:08:61:30:ae:
                    b6:b0:a3:32:fd:c9:04:46:73:df:e3:d3:f4:36:be:
                    2d:03:43:fb:26:7b:bc:c5:f8:e8:fc:4d:4e:45:e4:
                    07:b6:02:a6:48:5c:a1:d7:62:19:8e:10:f2:9a:92:
                    98:2a:1d:bc:1f:87:09:aa:70:e9:ef:ff:b3:61:05:
                    b9:0e:21:33:eb:9b:96:99:34:a2:3a:4c:fc:bf:44:
                    60:ee:b1:78:76:1e:b4:59:ad:d9:77:54:99:3f:e5:
                    a3:93:5e:d6:92:b0:70:76:ca:01:14:a4:72:6e:de:
                    3f:f0:af:21:a6:e7:92:30:e0:6a:6d:45:09:77:1a:
                    ee:c6:22:de:55:2c:d3:88:28:2e:f5:0b:5e:7a:09:
                    85:d3:d7:78:83:08:be:94:85:fe:be:76:38:9e:8f:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:73:87:7E:4C:05:72:3B:2B:A5:1F:A1:F6:D5:4C:3D:F3:D2:26
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a626430303a3a2f34312d3431203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:bd00::/41

    Signature Algorithm: sha256WithRSAEncryption
         22:40:96:55:7a:55:2e:12:dd:b0:a5:d5:28:17:3c:53:6c:8a:
         28:89:d2:77:44:4e:38:4d:4e:60:50:98:df:fa:9e:81:99:2a:
         58:a6:98:da:e6:69:57:b3:06:34:53:8e:78:e5:be:be:26:53:
         43:a4:ce:15:0d:27:33:de:5b:22:42:9c:b9:fa:0a:a7:d3:30:
         92:a3:78:29:c5:d3:c0:b5:46:dc:df:b0:5f:e1:3d:80:41:1b:
         96:78:2f:e5:e5:9f:de:4f:8e:fa:05:2c:21:ec:58:76:e7:73:
         e7:bf:3b:7e:03:40:db:34:3f:b0:e2:f6:15:7a:eb:79:bf:9c:
         14:f7:53:02:53:2e:40:c8:73:48:84:fe:ce:07:69:78:dd:fe:
         03:4b:66:91:a3:82:54:05:d1:8d:f5:f2:da:ac:fe:52:ed:7c:
         8e:e5:07:9e:25:b4:32:fb:7a:24:24:fd:40:e2:37:ad:0b:1d:
         fc:03:49:5c:86:12:0a:0b:b7:db:3c:e4:71:c9:c8:4f:ff:2b:
         5d:f2:0b:42:3a:b2:a2:77:4c:9c:58:f9:21:a0:9f:48:ad:6e:
         e8:e3:d1:d7:eb:4f:b2:0b:9c:31:3b:95:b9:59:65:3a:97:fb:
         bc:0f:18:bc:ef:46:87:e4:0e:02:ca:6b:95:fa:f6:8f:c0:ff:
         3a:8d:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:42:47 2026 by rpki-client