Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          9WDNNRIS13pBHwoeSIEdaOS9guz19gtr+VCJYCxVHK8=
Subject key identifier:   D4:4B:A1:73:D8:66:D7:0D:F7:50:4E:F2:23:BF:64:F2:C6:E7:09:51
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       7FD2DB9D737BBD35C472AE03F3A5730A234453D7
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:08 +0000
ROA not before:           Mon 11 May 2026 18:25:08 +0000
ROA not after:            Mon 10 May 2027 18:30:08 +0000
asID:                     272569
IP address blocks:        2804:8548:5000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d2:db:9d:73:7b:bd:35:c4:72:ae:03:f3:a5:73:0a:23:44:53:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:08 2026 GMT
            Not After : May 10 18:30:08 2027 GMT
        Subject: CN=D44BA173D866D70DF7504EF223BF64F2C6E70951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:64:46:e5:51:4e:31:fe:ff:25:f4:14:63:
                    12:55:db:2a:83:8d:71:34:d0:54:fe:9e:31:fd:44:
                    b7:c3:c6:1c:a7:1f:9a:43:fd:99:07:a3:5f:03:87:
                    d2:53:f2:32:f3:63:6b:ba:84:a1:1a:26:f3:73:dc:
                    ad:7a:9d:3b:41:e8:51:cc:31:8b:00:25:ba:51:da:
                    e5:04:dd:71:b5:d4:ec:d1:56:ad:b5:34:ce:cb:bb:
                    5c:54:94:30:de:cb:8f:45:94:22:d8:53:9c:95:a6:
                    9e:12:b8:d0:c7:db:68:8d:41:4e:f1:d1:64:c4:dc:
                    97:92:21:24:7e:2b:cc:56:1a:76:2b:12:c5:00:1e:
                    c8:7c:80:a2:62:98:92:82:1b:d9:eb:a2:9c:1d:55:
                    86:55:9c:15:49:b8:3f:8e:33:4d:59:21:d5:13:d2:
                    fa:60:8c:3c:0e:80:01:8c:ff:2a:d4:b4:4d:2e:d2:
                    66:82:69:32:66:3a:4d:1e:51:96:a9:ed:8d:a7:8e:
                    1c:72:c2:0a:aa:99:d9:2a:32:30:93:9c:d4:56:06:
                    4a:32:e5:25:b8:22:7f:f8:14:b2:30:64:3b:63:dc:
                    28:75:b5:2c:6d:52:90:61:74:63:18:d6:40:a2:b4:
                    68:09:ef:01:7f:f4:0f:63:bd:63:91:af:f7:6c:6e:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:A1:73:D8:66:D7:0D:F7:50:4E:F2:23:BF:64:F2:C6:E7:09:51
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a353030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:7b:d1:c4:7f:5b:37:c0:bc:e0:c0:29:18:7c:95:aa:fc:d4:
         f0:94:69:76:bb:87:d0:f7:d9:61:41:8f:8b:9e:bc:6b:7c:71:
         34:bd:88:d4:fb:55:ff:9b:ef:37:65:77:e8:5d:eb:a6:dd:f9:
         5c:a1:f7:e1:b0:a3:c1:38:fe:9c:df:a5:2d:7b:15:b2:2f:01:
         d0:8b:65:b7:e9:4c:81:0d:15:a7:00:3a:d6:06:dc:fa:ee:3f:
         cc:d2:ec:06:d4:27:34:e0:78:83:9b:a5:10:f0:78:a4:83:6b:
         3e:18:f0:2d:81:b5:60:91:6b:1d:8d:5b:56:e3:9a:54:ae:1a:
         7b:89:28:ec:37:b3:2a:09:b9:cc:03:d8:17:a6:58:a5:22:61:
         ce:2f:f2:12:99:c2:fd:a5:6e:e9:5c:eb:5c:62:47:32:90:54:
         ee:b8:a1:c5:d8:d7:ee:2c:74:a8:fb:97:80:25:d6:49:48:63:
         53:92:29:ac:c3:b6:f6:60:6f:04:c8:c3:a8:43:bd:d4:76:e1:
         eb:7e:dd:96:2e:48:9a:8a:23:d6:70:6d:63:16:d1:46:ec:47:
         df:ce:ce:3a:b8:56:d6:94:df:8b:33:57:78:d9:7c:5a:46:a7:
         6a:d8:09:fa:82:da:03:56:19:49:6c:26:55:48:7f:11:ab:d0:
         a6:5e:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:21 2026 by rpki-client