Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          WWFWhcTTXEcRgPo4xINVe0eV5Az7XImmwrI9C94ypBw=
Subject key identifier:   00:85:32:9D:EE:69:78:80:7D:F1:BA:9C:FD:41:5D:3B:9E:63:6C:03
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       48266A2745A0570D179E506DE948C9BA06BBC0F8
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 11 May 2026 18:30:13 +0000
ROA not before:           Mon 11 May 2026 18:25:13 +0000
ROA not after:            Mon 10 May 2027 18:30:13 +0000
asID:                     272569
IP address blocks:        2804:8548:d000::/36 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:26:6a:27:45:a0:57:0d:17:9e:50:6d:e9:48:c9:ba:06:bb:c0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: May 11 18:25:13 2026 GMT
            Not After : May 10 18:30:13 2027 GMT
        Subject: CN=0085329DEE6978807DF1BA9CFD415D3B9E636C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:29:4e:65:c4:f7:e4:a8:ac:69:ec:b9:c1:
                    57:94:c7:98:38:93:5f:f3:1b:d3:31:c2:ab:4e:99:
                    22:85:e6:91:ea:d6:ae:80:76:46:32:05:31:8b:4c:
                    97:25:de:fe:3f:b7:df:7f:a8:48:d5:53:a1:57:d0:
                    c1:b4:ca:3f:a1:c6:9e:19:a2:cb:33:99:97:f2:7d:
                    1f:1d:90:e3:2b:6f:fb:93:bb:b3:76:5a:4b:0e:b2:
                    9a:4b:30:d7:54:06:91:a6:c4:b1:df:93:9e:66:00:
                    a2:53:23:ce:2f:d6:bb:37:21:44:51:7f:9c:fd:de:
                    78:ac:95:90:06:18:94:ac:14:48:d2:ee:0e:c0:19:
                    c5:1f:36:9c:6a:d6:a9:fe:da:6f:ac:4a:34:b9:db:
                    8e:14:7d:ab:62:db:f3:1e:c2:ab:90:76:b4:9c:ea:
                    29:05:ae:a2:47:af:c5:f4:7a:1f:ee:f6:b5:f8:ff:
                    f5:0c:7d:20:75:cd:81:a8:96:f5:f6:52:31:09:07:
                    64:50:31:8e:0a:be:2f:56:bb:7b:81:ba:a8:9a:20:
                    db:93:e0:a1:d3:35:c1:f1:a8:c8:33:f7:8f:93:d6:
                    02:da:ed:29:f2:24:15:9e:59:24:e5:59:48:08:15:
                    50:cc:2f:2b:45:17:db:6f:8d:90:42:05:1a:bc:32:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:32:9D:EE:69:78:80:7D:F1:BA:9C:FD:41:5D:3B:9E:63:6C:03
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:e1:8e:b4:60:7a:d3:89:aa:83:8d:e9:85:b7:a7:91:c5:
         7c:ff:5b:9b:5f:60:ce:39:ef:ef:19:3d:8f:13:cd:d1:99:2a:
         42:c2:f3:1b:21:6e:c0:b1:18:44:01:0f:64:9d:fa:d9:ff:16:
         70:ae:8a:12:1d:b3:d1:86:fe:34:4d:ed:6e:57:d0:6b:0e:2d:
         5d:4b:a0:be:bb:ac:81:9e:5e:6a:71:ae:0a:8f:b4:53:97:f6:
         22:7f:d9:7f:0a:1f:39:a7:ea:b6:49:0f:30:0e:82:95:5f:5b:
         da:19:ba:07:4e:dd:92:6b:04:e6:89:32:21:ba:64:15:5f:27:
         50:a1:11:a5:35:60:b3:d1:71:04:ea:d3:d6:a8:67:70:20:bb:
         97:4e:4b:f6:f1:41:a5:04:c2:03:b7:6c:e2:70:77:4f:92:c2:
         53:d5:bc:ef:77:4d:af:a5:39:4c:a3:ed:a5:94:dd:da:f4:79:
         74:1b:86:7d:bb:d8:dd:6b:0e:18:30:81:01:d6:df:a2:d1:47:
         38:8d:af:56:cf:66:22:55:d9:b5:15:78:69:6d:df:59:2b:e3:
         72:78:7d:e7:88:58:5c:46:78:9a:11:9d:51:25:01:2d:df:ad:
         a6:ec:5e:fd:97:b6:fd:82:c1:33:91:0a:16:82:56:6e:4e:27:
         56:34:b1:5e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSCZqJ0WgVw0XnlBt6UjJuga7wPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE0ODk0Mjg0QThBNDkyQkVBODgxNUIzMDIxMUI5NDZF
MDkxNTc1QzAeFw0yNjA1MTExODI1MTNaFw0yNzA1MTAxODMwMTNaMDMxMTAvBgNV
BAMTKDAwODUzMjlERUU2OTc4ODA3REYxQkE5Q0ZENDE1RDNCOUU2MzZDMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCylOZcT35Kisaey5wVeUx5g4
k1/zG9MxwqtOmSKF5pHq1q6AdkYyBTGLTJcl3v4/t99/qEjVU6FX0MG0yj+hxp4Z
osszmZfyfR8dkOMrb/uTu7N2WksOsppLMNdUBpGmxLHfk55mAKJTI84v1rs3IURR
f5z93nislZAGGJSsFEjS7g7AGcUfNpxq1qn+2m+sSjS5244Ufati2/MewquQdrSc
6ikFrqJHr8X0eh/u9rX4//UMfSB1zYGolvX2UjEJB2RQMY4Kvi9Wu3uBuqiaINuT
4KHTNcHxqMgz94+T1gLa7SnyJBWeWSTlWUgIFVDMLytFF9tvjZBCBRq8MuIvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAIUyne5peIB98bqc/UFdO55jbAMwHwYDVR0j
BBgwFoAU6kiUKEqKSSvqiBWzAhG5RuCRV1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWQ2Zm5GOVRiUUh3NWgzYnZOeTlneEdxTnZ3Tk15NTdnYkpqQjR1VFd1
UHMvMC9FQTQ4OTQyODRBOEE0OTJCRUE4ODE1QjMwMjExQjk0NkUwOTE1NzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNDg5NDI4NEE4QTQ5MkJF
QTg4MTVCMzAyMTFCOTQ2RTA5MTU3NUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVkNmZuRjlUYlFIdzVoM2J2Tnk5Z3hHcU52d05NeTU3Z2JKakI0dVRXdVBzLzAv
MzIzODMwMzQzYTM4MzUzNDM4M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMjM1MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEhUjQMA0GCSqGSIb3DQEBCwUA
A4IBAQBJ0OGOtGB604mqg43phbenkcV8/1ubX2DOOe/vGT2PE83RmSpCwvMbIW7A
sRhEAQ9knfrZ/xZwrooSHbPRhv40Te1uV9BrDi1dS6C+u6yBnl5qca4Kj7RTl/Yi
f9l/Ch85p+q2SQ8wDoKVX1vaGboHTt2SawTmiTIhumQVXydQoRGlNWCz0XEE6tPW
qGdwILuXTkv28UGlBMIDt2zicHdPksJT1bzvd02vpTlMo+2llN3a9Hl0G4Z9u9jd
aw4YMIEB1t+i0Uc4ja9Wz2YiVdm1FXhpbd9ZK+NyeH3niFhcRniaEZ1RJQEt362m
7F79l7b9gsEzkQoWglZuTidWNLFe
-----END CERTIFICATE-----
Generated at Wed May 13 18:45:19 2026 by rpki-client