Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d313238203d3e20323637343232.roa
File:                     323830343a346434633a3a2f33322d313238203d3e20323637343232.roa (raw, json)
Hash identifier:          b2zwvRk6CLJXeep0vRY9NQiaidnBTToB/MBRW8j7PoI=
Subject key identifier:   65:B1:13:62:9E:13:B2:26:91:37:3E:02:A1:33:F3:CF:7C:37:A1:00
Certificate issuer:       /CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
Certificate serial:       5CB69D9C12D6E6A8581AF314B8C8461D30D6C57F
Authority key identifier: D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d313238203d3e20323637343232.roa
Signing time:             Mon 09 Mar 2026 18:49:25 +0000
ROA not before:           Mon 09 Mar 2026 18:44:25 +0000
ROA not after:            Mon 08 Mar 2027 18:49:25 +0000
asID:                     267422
IP address blocks:        2804:4d4c::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:9d:9c:12:d6:e6:a8:58:1a:f3:14:b8:c8:46:1d:30:d6:c5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B
        Validity
            Not Before: Mar  9 18:44:25 2026 GMT
            Not After : Mar  8 18:49:25 2027 GMT
        Subject: CN=65B113629E13B22691373E02A133F3CF7C37A100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:83:33:d8:43:45:9f:fa:70:32:17:a3:e5:
                    aa:22:88:81:cc:c6:8c:c1:8a:d3:07:72:2d:9a:3d:
                    a7:03:b8:07:1a:44:3c:30:f0:fe:3d:15:b0:e9:43:
                    9e:d7:60:c3:4b:3b:89:e1:ac:94:96:92:08:62:f8:
                    e6:89:2a:69:e8:5e:b0:34:62:6f:fa:6b:f2:e1:89:
                    87:d4:88:b0:a6:18:f6:00:83:e4:1c:8e:5e:49:3f:
                    6b:4b:2d:a0:ad:38:04:12:7e:8d:20:dd:9d:03:a6:
                    2a:11:ea:aa:22:28:aa:e9:c2:26:24:3f:b1:30:10:
                    83:10:b1:a4:d8:dc:97:c9:8c:6a:a8:99:88:fe:4c:
                    6b:b6:37:f8:ec:07:21:f7:3f:26:54:80:f7:4f:0e:
                    55:a8:46:77:6b:9d:fa:f1:9d:17:26:7e:e3:89:7e:
                    ff:41:2d:b6:88:0d:71:fd:02:ef:bf:7e:a8:94:f9:
                    9b:12:1d:de:12:cd:09:ee:84:41:58:92:8b:35:94:
                    d5:9b:9c:62:8e:c9:f7:85:e3:62:85:21:77:f3:0f:
                    8c:2b:29:3a:a7:bd:77:16:9f:53:f8:9b:35:f9:77:
                    a6:06:34:44:03:7f:92:02:72:57:17:23:7a:0d:75:
                    93:bb:d8:78:e0:d6:53:20:e1:4c:d1:07:68:fd:3d:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B1:13:62:9E:13:B2:26:91:37:3E:02:A1:33:F3:CF:7C:37:A1:00
            X509v3 Authority Key Identifier:
                keyid:D2:AE:4E:16:03:54:2F:0C:EA:C3:B5:A1:DF:CF:FC:92:28:08:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2AE4E1603542F0CEAC3B5A1DFCFFC922808DE1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d313238203d3e20323637343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:59:db:b8:54:55:00:b9:ed:16:49:78:d8:ef:cb:e9:6c:90:
         fe:07:a7:18:22:9b:90:97:79:35:5d:f2:eb:c9:58:e4:26:ff:
         05:5e:ef:ac:b8:22:a9:82:9d:0f:5d:fa:fc:ff:67:79:ab:bf:
         21:16:8b:89:ea:1b:08:32:83:4b:43:6f:71:40:70:46:f9:de:
         18:66:a4:72:0d:02:96:b1:5b:30:a7:b7:66:e9:b5:a5:20:70:
         a0:d5:db:66:d3:c9:2e:db:ce:a5:3d:11:8c:e1:57:98:f8:e0:
         00:ca:b4:4f:cd:a4:0a:97:1d:5d:a1:4e:24:cb:ce:cf:8c:99:
         42:11:e9:dd:1d:6e:29:a6:49:7f:79:78:6f:2f:96:94:48:b4:
         4e:fd:b2:fe:62:5e:01:6a:92:82:d5:6b:fe:a8:21:93:37:f1:
         a4:76:b3:90:31:75:74:b5:6e:8d:ab:81:dc:b4:3e:98:c1:8d:
         62:2a:f0:e3:c4:c4:e0:5f:4e:1b:c0:8e:35:ad:1e:ed:d2:5b:
         94:2e:6b:80:60:f8:48:36:b5:93:08:6e:03:89:43:90:38:47:
         9e:97:b1:53:c8:83:32:aa:68:a8:80:6a:dc:5f:49:ec:b8:88:
         3e:05:45:50:cf:47:bd:c4:8e:90:e8:8b:8a:2a:02:69:30:91:
         d1:40:55:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:54 2026 by rpki-client