Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa
File:                     323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa (raw, json)
Hash identifier:          Czo48sR+mYJJS8poiINfAcgQ/NJlhR6SDljFNRJb4fk=
Subject key identifier:   A0:78:4E:17:4D:37:2B:C3:5C:44:4B:F5:83:B6:1B:C3:15:09:1C:FB
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       3BAC0C6898AC3BCF96CAFA45DDA601E6EE793CDD
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     266623
IP address blocks:        2804:3ed4:23aa::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ac:0c:68:98:ac:3b:cf:96:ca:fa:45:dd:a6:01:e6:ee:79:3c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject: CN=A0784E174D372BC35C444BF583B61BC315091CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:16:cb:7c:72:92:18:d3:d5:39:28:44:37:
                    c7:52:9b:e1:58:cc:cb:46:e2:40:24:39:62:88:c9:
                    fa:c2:9a:bb:77:46:b1:56:e8:3e:db:9a:21:54:ab:
                    4f:ac:48:04:90:82:2b:14:5c:b0:1f:9d:63:c1:96:
                    8c:37:1b:52:5b:9b:0a:b2:c7:63:f8:30:f8:9d:1f:
                    74:cb:34:a9:6b:53:e1:f5:13:e6:79:c6:19:0f:11:
                    6c:37:b4:dc:1c:58:ea:1e:da:c6:f1:28:b5:07:e5:
                    04:1c:21:61:9c:33:c6:0e:3b:9c:ae:6e:c9:18:07:
                    8d:60:8d:87:8d:f3:b3:dc:ce:96:0c:29:4a:01:71:
                    a0:0e:a7:37:b0:08:b5:12:e6:c7:0b:5d:fd:98:f7:
                    e4:dc:7f:ea:61:c9:83:c8:b3:e5:50:47:05:72:f3:
                    d3:85:e2:80:81:7e:83:e4:75:88:9f:5c:ff:ab:c5:
                    44:77:74:46:ec:f8:e5:73:90:2e:dd:06:aa:e7:21:
                    cc:07:ff:4e:35:33:a6:e9:ca:40:08:69:51:1c:33:
                    a5:03:8d:f4:3f:d9:2c:fe:43:14:c7:ac:b6:5f:b1:
                    61:43:80:db:75:16:5d:a0:fe:a0:e7:b7:d4:48:bb:
                    ef:e9:b2:71:03:7d:ea:54:1c:a9:51:78:bc:59:57:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:78:4E:17:4D:37:2B:C3:5C:44:4B:F5:83:B6:1B:C3:15:09:1C:FB
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a323361613a3a2f34382d3438203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:23aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:83:eb:e3:28:c8:db:e3:af:1b:cc:83:b8:d7:11:04:ac:
         8e:23:60:5d:c3:7d:a2:52:a8:b7:d6:fc:b9:bc:6f:32:4d:4a:
         fc:03:70:05:8f:30:7b:e6:48:56:53:40:4c:81:cb:49:2c:93:
         ad:1a:47:81:24:a4:eb:00:1c:ce:9b:45:19:0a:d3:73:7a:e9:
         f6:95:28:4b:f2:24:c8:f6:11:f6:69:53:72:30:fb:ab:e9:fb:
         93:3b:09:e0:70:33:21:34:bf:54:45:8f:10:9d:86:d7:4f:c4:
         30:62:e0:95:4f:00:fa:80:d0:81:88:5b:d3:2c:97:03:a6:5b:
         0c:8e:05:41:e7:9a:59:b1:4d:ac:8c:29:0c:ca:3c:e5:98:6d:
         37:26:40:e6:91:5b:73:51:36:40:b2:9c:74:9b:50:86:ff:d2:
         85:50:53:cc:b0:80:15:d6:8c:ea:e8:34:8d:88:9d:5e:ab:9e:
         bd:ab:65:bc:9f:c1:15:1b:4d:b7:05:3c:d9:fe:e3:40:b6:1e:
         5a:73:df:ae:0d:59:78:0b:e1:a4:5b:4f:41:44:78:2d:37:9e:
         3e:0e:12:0e:90:23:61:9c:1e:d9:2d:4d:1d:20:dd:7e:3f:4f:
         24:fa:20:a0:77:b2:f6:66:fd:69:0b:2a:59:dd:52:0d:56:12:
         8c:46:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:09:32 2025 by rpki-client