Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          TC0l3ZvzqOmaZ9fEM7FbF1yxulhtVYWK77Gkhf3tk6U=
Subject key identifier:   54:4C:E5:5F:6D:EA:F2:82:80:0A:2F:08:1D:8E:B1:BF:04:C7:A4:19
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       1E26B288557FB4B99DB8BA9C787247502364CA25
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:15 +0000
ROA not before:           Mon 11 May 2026 18:25:15 +0000
ROA not after:            Mon 10 May 2027 18:30:15 +0000
asID:                     272569
IP address blocks:        2804:8548:4000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:b2:88:55:7f:b4:b9:9d:b8:ba:9c:78:72:47:50:23:64:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:15 2026 GMT
            Not After : May 10 18:30:15 2027 GMT
        Subject: CN=544CE55F6DEAF282800A2F081D8EB1BF04C7A419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:4a:d8:c4:55:d0:ca:12:f7:b9:03:78:4e:
                    30:dc:65:05:b2:b5:cb:d6:1b:8d:83:89:9e:52:5e:
                    b7:19:5c:88:c1:1b:1c:1f:c3:6c:e3:d8:31:2e:29:
                    d6:c6:39:21:e4:ad:1a:e5:2c:a5:b9:9a:63:29:a1:
                    dc:50:a2:e3:e9:4e:89:57:e2:85:f0:99:2b:3d:19:
                    d6:74:84:96:25:48:d8:89:d9:0a:1e:fb:11:3f:9d:
                    ba:58:15:1b:8e:6e:d5:63:b0:57:25:40:51:83:9f:
                    d9:51:1b:a8:08:2e:b5:46:32:c9:bf:d2:47:d4:a0:
                    2c:a2:47:9e:e7:19:be:dc:58:d1:27:40:69:75:48:
                    2b:f8:2a:bb:61:7c:6e:b3:f6:82:82:b4:07:1c:9c:
                    6b:57:1f:17:a1:f6:52:e8:a2:f1:6c:58:87:e3:8d:
                    47:c3:c4:31:dc:ac:a2:15:b9:68:a3:f9:6b:dc:f8:
                    23:7d:65:5b:0f:82:73:7d:b7:8e:ce:ce:79:04:7a:
                    56:0b:68:7d:07:31:ed:02:af:db:f6:ed:7c:fd:b0:
                    d0:bb:0b:b8:a3:2d:e0:35:58:69:b7:ab:c8:0c:cc:
                    90:8e:f7:76:18:c0:a6:a8:e2:38:ea:fa:06:22:fb:
                    18:83:ca:17:2e:47:75:05:71:35:82:a7:56:6d:90:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:E5:5F:6D:EA:F2:82:80:0A:2F:08:1D:8E:B1:BF:04:C7:A4:19
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d4:85:ed:dc:d0:c1:9b:e8:38:dc:8e:90:8e:5f:44:91:56:d7:
         9f:35:ed:0d:9c:66:91:b9:7d:31:2f:cd:df:29:11:47:49:cf:
         e8:2c:69:29:7b:81:17:a2:0b:ce:be:3c:95:58:ea:4a:4d:aa:
         84:18:68:f4:3e:67:24:74:d5:ee:af:99:55:e9:68:11:42:06:
         48:50:42:f3:e2:2f:3a:c4:a5:77:2c:83:9e:23:41:30:d8:66:
         48:20:f3:d5:43:bf:35:3f:47:78:ef:91:31:b1:de:cc:56:e4:
         84:a2:cc:82:36:a3:a0:9e:47:66:b5:34:79:50:f7:64:4f:a8:
         3b:5f:f3:4a:f0:41:61:a2:2b:5d:69:c5:a9:38:11:78:98:29:
         a2:fe:7d:62:35:8f:63:7c:66:96:4f:3e:8b:9b:09:3c:66:66:
         b8:43:a4:e4:0c:34:42:42:8a:e4:1c:c7:74:6d:77:ba:b6:5b:
         ba:74:56:a9:b9:e4:cf:3b:1d:e6:99:c3:c7:20:56:25:0e:38:
         88:2f:73:66:e9:b4:66:4c:45:bc:bf:5b:a0:5a:be:e7:7a:26:
         1c:80:b0:f4:cb:de:d7:c4:39:f2:bf:66:6b:7c:fd:2a:c8:bb:
         bc:5c:93:58:fb:e6:b1:9c:62:fc:f5:17:f7:94:e0:bc:b1:88:
         0f:81:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:17 2026 by rpki-client