Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          wK/8loNcmAmOzJ6w1fZwm9d/9NhrHk3zsUt51Wa/0bM=
Subject key identifier:   F4:28:11:D3:44:48:46:24:7A:6C:62:3F:61:38:63:9A:DE:C7:FF:A0
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       08EDBB9A8D3349C0A779FC5FF5175C4C966244B4
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:16 +0000
ROA not before:           Mon 11 May 2026 18:25:16 +0000
ROA not after:            Mon 10 May 2027 18:30:16 +0000
asID:                     272569
IP address blocks:        2804:8548:7000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ed:bb:9a:8d:33:49:c0:a7:79:fc:5f:f5:17:5c:4c:96:62:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:16 2026 GMT
            Not After : May 10 18:30:16 2027 GMT
        Subject: CN=F42811D3444846247A6C623F6138639ADEC7FFA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:46:98:a1:a2:42:da:75:10:d7:2f:0e:8d:
                    ac:bd:4a:f3:b7:56:6c:68:79:e8:86:ca:b3:56:fd:
                    4f:3d:03:6a:5d:7c:b8:16:4c:c4:6f:8b:fe:52:69:
                    4f:07:e5:6d:ca:6a:e5:b9:de:8f:3b:dd:e5:76:18:
                    d6:4f:5d:57:14:f7:81:25:25:a8:75:7d:1d:b9:fc:
                    6b:c3:5a:6d:d8:c9:43:4a:d4:27:b9:ee:b6:7b:86:
                    54:a4:fc:66:c3:3d:00:ad:4c:dc:b5:63:07:17:7a:
                    a3:34:01:2b:ed:9b:fb:e4:bf:f1:78:51:7e:81:8f:
                    2d:10:15:b9:da:d8:25:37:2d:23:9b:48:b7:78:f9:
                    ea:93:29:28:aa:6b:3c:14:63:de:2d:3d:e8:86:3d:
                    41:8a:0f:94:2a:76:99:4b:c6:4e:fb:ae:a4:b7:5d:
                    88:23:9c:ac:c4:03:38:72:c7:bd:7d:a5:f5:ef:e8:
                    42:4b:97:ea:0a:11:03:80:ea:d4:51:06:3b:89:bb:
                    0a:9b:af:9b:ee:c3:de:f1:d4:51:56:3f:37:b3:35:
                    6a:87:e4:b7:dc:a7:de:e2:f3:4b:98:46:44:b4:c9:
                    b1:8c:53:fd:21:47:1c:08:c7:eb:eb:22:30:7b:1b:
                    be:e7:f8:ee:c7:e6:91:a8:18:c9:45:9e:8c:bc:13:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:28:11:D3:44:48:46:24:7A:6C:62:3F:61:38:63:9A:DE:C7:FF:A0
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a373030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:49:9d:d0:f6:db:40:c6:42:2b:8f:5c:26:d7:8a:b8:ce:ba:
         a5:20:11:11:a4:b9:1b:9e:f7:b6:65:b6:8a:45:5d:73:3f:e2:
         66:87:5a:40:a0:2f:c8:aa:e6:b1:9a:32:e3:22:e4:d3:12:0e:
         60:8d:f9:d8:fa:a0:37:e1:d3:ba:97:bf:04:51:d0:c3:25:eb:
         a1:d0:31:5d:40:ad:81:c6:f3:91:44:31:ea:d6:04:ef:c8:ba:
         73:91:f8:b6:8e:f6:06:23:97:18:af:44:df:0b:a9:60:ef:a5:
         6f:77:8a:7e:d1:c7:20:c0:f4:45:c1:94:43:27:1a:86:94:74:
         ae:75:34:29:86:08:21:ec:45:a0:e6:f7:85:e0:13:03:29:f3:
         b7:e0:3a:de:88:4b:0b:64:1b:4a:27:82:85:cc:84:c8:b4:2a:
         93:d9:cf:5a:81:f5:b5:31:20:da:7b:d6:7d:f0:1b:32:da:c5:
         46:05:41:5c:92:9a:64:a5:12:f1:0c:3b:ad:e1:0b:3f:08:d1:
         4d:6e:a6:70:40:17:5d:02:25:00:c6:16:96:37:c1:73:8d:92:
         28:61:29:cb:87:b6:db:b1:2e:af:22:71:62:c8:8d:12:0c:43:
         c5:b5:16:fe:b2:de:8e:8f:0e:64:b3:11:c5:26:19:34:ce:a8:
         f9:22:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:15 2026 by rpki-client