Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a383030303a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          2G0fXCEhtxymDr6qA3czPbW+PD7d4VeNJqiKpBOHf1U=
Subject key identifier:   58:18:C6:83:1B:8C:6C:35:17:5F:14:74:30:49:D7:BC:03:AC:62:15
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       01B26276BC97C4786A328EF97CF90F7B77636251
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:09 +0000
ROA not before:           Mon 11 May 2026 18:25:09 +0000
ROA not after:            Mon 10 May 2027 18:30:09 +0000
asID:                     272569
IP address blocks:        2804:8548:8000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b2:62:76:bc:97:c4:78:6a:32:8e:f9:7c:f9:0f:7b:77:63:62:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:09 2026 GMT
            Not After : May 10 18:30:09 2027 GMT
        Subject: CN=5818C6831B8C6C35175F14743049D7BC03AC6215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:bb:8e:61:e3:37:2e:9b:b0:29:37:9e:41:
                    dc:81:41:fc:a3:36:b6:61:35:17:39:4d:75:51:ce:
                    89:9d:a6:b4:f2:54:1e:9d:be:cc:a0:cc:c1:4a:3e:
                    a7:d1:e5:65:14:82:88:18:54:bb:33:d7:c3:93:a6:
                    6c:e4:c9:b8:53:b1:ad:b9:32:2a:11:36:b6:b2:89:
                    53:e1:7b:b7:6c:5b:46:00:e5:fe:98:d0:1b:4b:0d:
                    90:1e:ed:d2:95:b9:b2:c3:5c:19:69:a5:f4:5f:1a:
                    b7:6e:a5:8a:fd:d3:c4:ef:7c:b6:d1:ba:83:81:d6:
                    91:dc:b3:df:02:41:1b:b3:91:16:2d:1f:2a:df:ef:
                    86:bf:09:cd:8c:b3:48:da:22:c2:60:75:c2:88:ff:
                    3c:65:7a:61:50:43:c0:47:99:13:b0:45:cb:75:f5:
                    3d:8e:eb:2c:1d:f9:bd:6d:2c:23:2f:c4:ef:1e:3c:
                    91:22:a6:77:83:c0:74:44:b7:19:0f:b4:2a:f5:44:
                    ca:03:0b:a1:18:41:14:d6:b4:fe:2b:5d:cb:30:1a:
                    93:ee:2d:f2:bf:38:28:1d:02:8a:c5:18:88:6b:0e:
                    a2:0a:6c:1a:7f:52:6c:66:22:4e:67:57:99:a9:d0:
                    34:fd:a7:a7:1f:fb:dc:18:67:93:c6:c9:ad:9b:81:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:18:C6:83:1B:8C:6C:35:17:5F:14:74:30:49:D7:BC:03:AC:62:15
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a383030303a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:25:51:69:8a:84:6d:7a:cc:23:9a:67:33:1d:ca:65:bf:fb:
         18:48:9d:fa:19:12:1f:d3:f7:06:58:74:9c:6a:98:7f:4f:44:
         60:ba:5a:4e:74:83:86:fb:d6:6b:c9:7b:3c:b0:18:ec:84:1e:
         5e:33:9f:bf:6e:d0:c1:ec:f5:93:c6:e7:16:72:60:a3:56:54:
         33:0c:86:a2:e7:11:5f:a7:53:e6:9e:ef:47:f2:60:35:7d:97:
         03:b7:2b:4f:62:de:5a:d8:e4:26:57:6b:9a:7f:33:f1:bc:2c:
         c2:51:55:0e:af:e9:2c:79:9d:d1:ed:ec:77:cf:98:00:fa:e6:
         49:d8:15:de:20:25:61:c9:06:e1:bd:24:7d:73:37:1a:9e:1c:
         a4:be:da:07:43:23:2a:69:bb:0d:d9:8a:39:4a:d2:de:89:9c:
         9a:e0:d3:4c:b3:39:40:3e:fb:67:46:46:2f:45:21:13:5d:49:
         05:0d:e5:75:ca:7b:68:cd:89:1c:c1:8a:9f:8f:d2:30:fd:bf:
         51:5b:a5:c1:c4:5f:aa:20:c2:77:09:b6:68:e8:00:d6:dc:4a:
         90:ee:c7:8b:bf:bd:70:22:43:ee:fa:5a:56:a7:bc:21:c3:26:
         d5:94:ba:8f:13:22:b7:97:7a:53:70:03:51:32:15:5c:db:7e:
         e2:2b:54:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:16 2026 by rpki-client