Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33322d313238203d3e20323636333139.roa
File:                     323830343a333566633a3a2f33322d313238203d3e20323636333139.roa (raw, json)
Hash identifier:          ZN6mDwBJ2+JsRTJxVjw6LpNh+NaGtBUB84tmqojZMDw=
Subject key identifier:   4A:C2:E0:51:D4:EF:0C:C7:07:1B:99:88:1F:2F:A5:44:63:DE:C1:D0
Certificate issuer:       /CN=3D7F41D3B11458BBA134D22A2A7E6DD805142768
Certificate serial:       6429353AD9187509FDB2467F0B9AF0B7D6DD8C0A
Authority key identifier: 3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33322d313238203d3e20323636333139.roa
Signing time:             Thu 08 Oct 2026 15:04:39 +0000
ROA not before:           Thu 08 Oct 2026 14:59:39 +0000
ROA not after:            Thu 07 Oct 2027 15:04:39 +0000
asID:                     266319
IP address blocks:        2804:35fc::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:29:35:3a:d9:18:75:09:fd:b2:46:7f:0b:9a:f0:b7:d6:dd:8c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7F41D3B11458BBA134D22A2A7E6DD805142768
        Validity
            Not Before: Oct  8 14:59:39 2026 GMT
            Not After : Oct  7 15:04:39 2027 GMT
        Subject: CN=4AC2E051D4EF0CC7071B99881F2FA54463DEC1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:9a:d0:71:2a:8e:13:a5:98:da:2c:59:96:
                    df:d3:12:93:33:73:9a:65:46:c2:2d:ff:a8:24:99:
                    3e:f5:4e:e4:06:55:75:2c:17:cb:ce:fc:33:00:cf:
                    f6:37:b8:2f:12:de:19:14:8f:f1:48:38:b9:1e:fd:
                    e9:35:90:27:af:2f:a8:b9:4d:6d:93:51:d0:08:52:
                    db:a6:8a:71:21:51:31:1b:55:00:e1:99:28:26:23:
                    0b:4d:04:41:65:7b:79:01:a4:50:04:91:a4:0b:65:
                    7d:55:01:9a:72:f2:01:8f:d3:a1:28:53:a2:00:a0:
                    b3:fd:d9:f0:3f:1b:85:7f:b3:66:51:0b:ee:ed:fe:
                    a6:68:51:d7:7f:13:70:ad:4a:ac:71:2d:37:c4:a5:
                    c6:cb:26:d3:83:11:04:de:2f:f3:b3:6b:77:f0:5a:
                    59:c7:1d:ca:22:a6:b5:49:0e:fb:7b:21:72:80:1c:
                    17:fe:4d:85:fb:ee:54:f9:61:b5:1f:94:3e:61:1f:
                    fe:74:82:ca:20:51:a0:af:3e:31:e7:21:9e:74:ac:
                    7f:23:c9:84:f9:9d:3c:73:da:a4:25:f9:d0:28:e0:
                    bf:f3:f6:89:85:ff:df:89:81:df:91:b1:eb:61:00:
                    d2:09:4d:c8:41:af:de:7a:7a:1e:c0:e8:2e:8e:4d:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:E0:51:D4:EF:0C:C7:07:1B:99:88:1F:2F:A5:44:63:DE:C1:D0
            X509v3 Authority Key Identifier:
                keyid:3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3D7F41D3B11458BBA134D22A2A7E6DD805142768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/323830343a333566633a3a2f33322d313238203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:f2:3f:c8:9b:06:3d:a0:74:cb:c4:ae:02:45:19:9e:43:
         5f:ac:df:a6:b6:e9:16:0e:ea:b8:2c:94:57:9b:be:4b:11:69:
         9f:3c:41:5f:87:83:a6:0c:b2:58:dc:a2:80:b6:f8:e4:68:79:
         3e:0f:01:f7:fe:9f:da:db:dd:76:a7:33:94:aa:b7:0c:81:46:
         bd:c4:35:e8:17:70:3c:32:d4:b0:7e:86:a7:da:b6:3c:e4:a2:
         18:8c:94:f2:03:89:ee:c9:6d:f4:4b:84:e4:cb:90:cb:e8:cf:
         8a:3f:fb:d5:39:da:ed:16:b1:b4:28:b8:c7:91:01:1a:e5:a3:
         f2:90:f9:bd:77:76:d3:97:c7:66:40:07:e1:28:f4:ca:70:38:
         2a:97:3c:28:64:4a:31:4d:f3:f3:84:2a:b0:70:a9:d0:06:3d:
         11:c0:fd:bd:84:f4:a4:6c:7e:24:0a:93:14:87:40:d4:5e:a7:
         85:12:27:fa:db:8b:86:27:82:e2:4d:4c:21:43:96:b4:b6:42:
         cb:91:df:1a:68:20:3b:89:fb:a7:50:52:19:f1:d6:82:5f:33:
         65:d6:80:8e:c3:8c:0b:f8:6a:82:70:e5:cc:5e:4d:89:a7:e1:
         d0:5b:67:cb:18:fc:91:f3:14:b8:80:18:ef:5e:d8:8e:04:d0:
         50:84:da:d3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUZCk1OtkYdQn9skZ/C5rwt9bdjAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q3RjQxRDNCMTE0NThCQkExMzREMjJBMkE3RTZERDgw
NTE0Mjc2ODAeFw0yNjEwMDgxNDU5MzlaFw0yNzEwMDcxNTA0MzlaMDMxMTAvBgNV
BAMTKDRBQzJFMDUxRDRFRjBDQzcwNzFCOTk4ODFGMkZBNTQ0NjNERUMxRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseprQcSqOE6WY2ixZlt/TEpMz
c5plRsIt/6gkmT71TuQGVXUsF8vO/DMAz/Y3uC8S3hkUj/FIOLke/ek1kCevL6i5
TW2TUdAIUtuminEhUTEbVQDhmSgmIwtNBEFle3kBpFAEkaQLZX1VAZpy8gGP06Eo
U6IAoLP92fA/G4V/s2ZRC+7t/qZoUdd/E3CtSqxxLTfEpcbLJtODEQTeL/Oza3fw
WlnHHcoiprVJDvt7IXKAHBf+TYX77lT5YbUflD5hH/50gsogUaCvPjHnIZ50rH8j
yYT5nTxz2qQl+dAo4L/z9omF/9+Jgd+RsethANIJTchBr956eh7A6C6OTVR3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUSsLgUdTvDMcHG5mIHy+lRGPewdAwHwYDVR0j
BBgwFoAUPX9B07EUWLuhNNIqKn5t2AUUJ2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGJKRXFWRjVYb2F0VExlUGNzZ3BKMlpSbmRDNE1RS1RiY1ZLS1kyMnI3
aE0vMC8zRDdGNDFEM0IxMTQ1OEJCQTEzNEQyMkEyQTdFNkREODA1MTQyNzY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEN0Y0MUQzQjExNDU4QkJB
MTM0RDIyQTJBN0U2REQ4MDUxNDI3NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhiSkVxVkY1WG9hdFRMZVBjc2dwSjJaUm5kQzRNUUtUYmNWS0tZMjJyN2hNLzAv
MzIzODMwMzQzYTMzMzU2NjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDX8MA0GCSqGSIb3DQEBCwUAA4IBAQAhKvI/
yJsGPaB0y8SuAkUZnkNfrN+mtukWDuq4LJRXm75LEWmfPEFfh4OmDLJY3KKAtvjk
aHk+DwH3/p/a2912pzOUqrcMgUa9xDXoF3A8MtSwfoan2rY85KIYjJTyA4nuyW30
S4Tky5DL6M+KP/vVOdrtFrG0KLjHkQEa5aPykPm9d3bTl8dmQAfhKPTKcDgqlzwo
ZEoxTfPzhCqwcKnQBj0RwP29hPSkbH4kCpMUh0DUXqeFEif624uGJ4LiTUwhQ5a0
tkLLkd8aaCA7ifunUFIZ8daCXzNl1oCOw4wL+GqCcOXMXk2Jp+HQW2fLGPyR8xS4
gBjvXtiOBNBQhNrT
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:47:04 2026 by rpki-client