Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          thn3OlkdJyO33yuR781uglG+nZ33H7iTnxXoqKLdBnA=
Subject key identifier:   09:B5:00:05:0D:5A:9E:C6:48:70:7E:89:E9:DC:22:2E:42:0E:F6:87
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       5D2ED78E0B767B80749A25B22C9407E6BA67C8B8
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:16 +0000
ROA not before:           Mon 11 May 2026 18:25:16 +0000
ROA not after:            Mon 10 May 2027 18:30:16 +0000
asID:                     272569
IP address blocks:        2804:8548:1000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2e:d7:8e:0b:76:7b:80:74:9a:25:b2:2c:94:07:e6:ba:67:c8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:16 2026 GMT
            Not After : May 10 18:30:16 2027 GMT
        Subject: CN=09B500050D5A9EC648707E89E9DC222E420EF687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:de:a3:4d:d9:ce:53:de:48:72:13:3d:39:
                    5f:a9:5a:2e:67:18:f4:4e:1e:76:87:c9:29:7f:b0:
                    f5:56:db:c5:35:a0:26:9d:d2:59:d9:15:fb:dc:11:
                    85:7b:2c:2d:45:22:24:50:34:94:9d:68:3c:a3:d0:
                    d1:6d:92:9d:ae:a7:93:b7:e7:9f:d7:df:d4:57:2c:
                    c1:f2:ed:cc:81:10:53:99:7c:2a:b4:4b:29:3b:f8:
                    04:b7:93:db:b5:f2:18:66:d4:be:7c:1a:b5:a7:f9:
                    2e:a5:e2:87:04:9c:1d:21:f2:b0:56:ad:46:59:96:
                    05:d3:98:ac:96:34:cc:3f:ba:46:64:f6:4a:49:6d:
                    da:bc:cb:29:e5:85:8e:f3:e9:84:1e:8e:f8:64:4e:
                    ba:62:fc:78:a5:e9:55:46:8f:fa:38:00:43:a5:65:
                    38:07:15:e0:a1:0c:31:bc:85:b5:89:2d:ff:a3:76:
                    ca:d4:77:0a:04:ae:21:74:7a:44:34:dd:b2:af:3a:
                    3e:ad:41:41:3b:69:0b:13:00:c6:43:05:77:11:71:
                    a6:0f:4f:64:d1:64:0b:84:09:72:db:d2:35:d5:07:
                    0a:b8:1a:47:c8:df:29:4a:fa:68:04:73:e4:80:f3:
                    4e:a8:92:0f:28:1d:d3:b5:d8:97:ff:ff:90:5a:82:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:00:05:0D:5A:9E:C6:48:70:7E:89:E9:DC:22:2E:42:0E:F6:87
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:53:fd:37:2b:55:dc:71:1a:a0:cd:94:fe:6c:01:a4:6e:73:
         8f:ec:e4:79:68:b5:c7:38:3a:a1:4a:df:52:9b:11:65:d2:72:
         98:cb:bc:94:d1:bc:de:bf:e7:08:f7:aa:a2:89:15:fe:a9:2c:
         79:84:8a:a4:5e:ad:01:08:6c:07:54:06:45:43:e2:0d:dd:e3:
         e9:c6:e3:b0:9a:b0:8d:80:d8:bc:d2:90:43:b5:03:97:b5:eb:
         75:06:ba:3c:18:a1:69:cd:98:42:02:4a:45:90:6b:35:9c:df:
         dd:46:f2:72:55:68:3d:7f:81:35:fc:24:5f:ff:41:35:59:b8:
         f2:e3:de:90:f0:54:74:86:d6:7a:7e:dc:2a:53:64:44:cc:47:
         f1:12:3e:7a:b2:82:09:7c:60:e0:5a:bd:c2:03:2d:2a:2a:a3:
         0e:fd:0a:cf:d1:83:54:6a:9d:e3:ef:db:9a:e1:ac:ac:b1:a1:
         62:96:d8:65:a9:50:00:06:6b:e2:a3:1e:fc:55:c5:b9:60:71:
         fe:ab:6a:15:c9:07:12:5c:3c:80:ca:d1:3f:c7:70:a2:75:c8:
         32:04:46:84:11:81:f8:c7:7a:37:46:b1:6f:1f:77:62:14:b7:
         c1:de:8b:60:15:86:71:a3:4b:fa:7c:69:16:80:b7:35:36:e4:
         ea:83:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:17 2026 by rpki-client