Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33322d3332203d3e20323732353639.roa (raw, json)
Hash identifier:          hM/9D+67VdLzQOMgg8E6OEwiIRY9CS9zWRW6CccW8CY=
Subject key identifier:   3E:59:0C:3D:63:7C:CF:9A:BF:05:89:8B:4A:0C:CF:69:DF:CF:DB:29
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       58FB657DE90CF7AD2ECAD0431C38337612F318A6
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:14 +0000
ROA not before:           Mon 11 May 2026 18:25:14 +0000
ROA not after:            Mon 10 May 2027 18:30:14 +0000
asID:                     272569
IP address blocks:        2804:8548::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:65:7d:e9:0c:f7:ad:2e:ca:d0:43:1c:38:33:76:12:f3:18:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:14 2026 GMT
            Not After : May 10 18:30:14 2027 GMT
        Subject: CN=3E590C3D637CCF9ABF05898B4A0CCF69DFCFDB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:37:c6:7e:e1:00:8c:06:61:2c:c7:04:81:
                    f2:81:bb:d1:53:23:90:e2:c1:05:e5:93:e3:d7:26:
                    ae:9d:c0:62:e5:ed:e7:22:48:7e:3d:29:9c:55:37:
                    25:40:18:b9:1a:68:1a:03:02:f1:56:ee:c0:0d:69:
                    e2:27:44:7f:26:69:0c:41:f2:93:9b:aa:15:ff:4c:
                    f8:1c:ae:f8:1b:98:64:4a:97:8b:0c:4f:33:44:a7:
                    01:da:46:b4:00:6a:f4:52:0f:21:40:09:75:be:32:
                    02:d8:e4:0c:95:5b:a8:fd:32:69:15:e3:ce:ad:91:
                    6b:a4:d4:46:df:ce:a1:d3:f0:67:3a:c5:9a:46:ad:
                    26:9b:8e:f1:f2:5f:9f:99:e6:06:58:94:f0:ba:50:
                    2a:2e:c5:b4:fe:fd:db:de:5f:32:90:f2:30:cd:0d:
                    4a:f2:9a:fa:47:40:50:ce:04:1e:85:dd:80:d1:4e:
                    22:a8:b0:7b:e7:9d:69:a1:fa:76:fc:5a:12:b6:cb:
                    b1:4a:db:dc:9e:ee:d4:1c:cf:18:6d:30:dd:9f:63:
                    bd:24:c9:c3:98:a1:03:8d:f5:b9:12:a1:11:4c:a5:
                    94:a2:10:8c:22:61:cf:73:9d:20:86:54:24:a1:24:
                    24:7e:d1:a2:6e:ea:2f:13:66:39:d4:bd:ea:0d:d1:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:0C:3D:63:7C:CF:9A:BF:05:89:8B:4A:0C:CF:69:DF:CF:DB:29
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:77:5f:24:7d:9d:73:53:2d:91:a4:94:05:9e:de:75:7b:
         a7:64:9e:70:89:62:50:c2:ab:92:17:ac:bc:0e:2c:b3:56:36:
         08:a9:de:e2:0a:38:70:28:6a:ca:0f:4c:17:76:d8:c0:78:ea:
         ed:e3:0d:14:7a:b6:fd:47:83:c5:2c:d2:40:97:f6:c6:7d:e5:
         51:10:b8:36:f9:4c:c2:69:5b:90:e0:4f:cf:52:0a:56:8c:93:
         97:d4:ae:09:35:da:50:af:ec:6e:a3:68:c8:65:ae:2a:b1:a8:
         4f:38:b7:b8:63:6b:51:89:ef:2a:0f:28:fe:19:c0:38:83:95:
         ac:08:e6:70:b4:be:50:ce:3c:09:7b:ef:33:0d:91:55:99:8e:
         99:fc:39:ef:22:6f:5b:63:77:59:92:c4:be:8a:4d:10:bd:44:
         a8:02:63:84:c8:b8:48:50:69:5a:27:fc:d4:18:1c:24:bd:1b:
         26:46:87:2d:3d:36:32:3c:0f:b0:05:ab:42:fd:5f:df:60:23:
         02:28:16:88:92:0c:f2:6f:53:28:3a:81:38:b1:af:4b:02:7b:
         6c:04:fc:8c:25:a0:94:4d:9d:5e:36:a3:ab:e4:01:d6:00:29:
         75:07:f1:fe:52:a5:31:c1:2c:49:55:4a:fe:b6:31:cc:6f:cc:
         fb:ec:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:45:15 2026 by rpki-client