Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a343030303a3a2f33342d3334203d3e20323633383430.roa
File:                     323830343a323639343a343030303a3a2f33342d3334203d3e20323633383430.roa (raw, json)
Hash identifier:          cOZTZxJoDeaRjrpnlahtCAp68v8BbAPLWb6HTi+Isd0=
Subject key identifier:   9A:0F:04:D5:53:08:17:09:BC:70:67:EF:BC:CF:81:1D:00:41:EC:51
Certificate issuer:       /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial:       48A59EAFB7CCBE29C68CBDBA2C19B703428F67D6
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a343030303a3a2f33342d3334203d3e20323633383430.roa
Signing time:             Thu 01 Oct 2026 21:00:33 +0000
ROA not before:           Thu 01 Oct 2026 20:55:33 +0000
ROA not after:            Thu 30 Sep 2027 21:00:33 +0000
asID:                     263840
IP address blocks:        2804:2694:4000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:9e:af:b7:cc:be:29:c6:8c:bd:ba:2c:19:b7:03:42:8f:67:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
        Validity
            Not Before: Oct  1 20:55:33 2026 GMT
            Not After : Sep 30 21:00:33 2027 GMT
        Subject: CN=9A0F04D553081709BC7067EFBCCF811D0041EC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:58:12:0d:06:49:6e:5c:a4:a1:74:72:2f:
                    9c:d7:e3:61:7e:e4:f6:e1:c5:8a:82:78:65:40:11:
                    ad:ad:d1:7c:f8:8d:68:03:f4:38:14:1d:33:90:a0:
                    6c:10:27:f6:2a:db:4b:61:5e:c6:e6:46:16:ab:52:
                    79:ef:d9:0c:c9:f0:90:a3:99:aa:c9:94:df:8f:61:
                    21:6e:45:2d:0b:cd:03:75:54:42:d4:63:c9:89:de:
                    30:95:e0:3b:f7:84:50:f5:46:85:0e:85:51:a2:70:
                    f6:69:11:95:5e:12:65:d8:82:08:d6:10:80:d7:1e:
                    92:7b:0c:2f:db:93:53:37:c6:6f:f6:b3:78:e3:71:
                    fe:af:52:f0:fd:29:1e:21:d3:c4:9c:81:ae:2b:1d:
                    7c:df:52:37:0f:f7:6e:c3:27:b2:4a:2e:99:64:5c:
                    a0:e4:de:08:29:3a:a9:3e:4b:2a:c3:23:d7:61:6e:
                    8f:ef:af:5b:06:7b:52:ad:a0:01:70:9e:2d:4c:fa:
                    1e:c6:7a:11:70:56:97:59:a4:5b:b5:8d:96:4b:58:
                    10:b9:6b:b5:38:c3:fa:2f:1b:c0:8a:08:10:4a:c1:
                    be:fe:ee:8c:c5:33:c1:6a:ee:b0:df:3e:71:fb:75:
                    fd:5d:64:80:f8:c9:dc:b4:54:8c:f5:7d:00:e0:79:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0F:04:D5:53:08:17:09:BC:70:67:EF:BC:CF:81:1D:00:41:EC:51
            X509v3 Authority Key Identifier:
                keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a343030303a3a2f33342d3334203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2694:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:34:8b:44:cd:bc:ef:70:5e:6c:da:a6:c1:67:43:7d:45:
         6b:ca:48:3a:4c:7b:91:93:1b:eb:ce:b3:e2:c3:77:aa:7f:db:
         b4:4a:1f:e7:35:8c:c3:a7:5a:5e:34:56:23:47:be:fa:08:cb:
         b7:5f:1f:9c:35:5e:cd:89:64:be:30:f8:bf:95:f4:d8:33:58:
         e0:20:6b:79:96:d1:3a:be:6c:5b:54:ab:b2:56:c9:e8:d2:8f:
         a2:3b:ed:ab:cd:74:3a:6e:6f:36:96:a4:d2:3d:e2:8b:e8:ec:
         23:49:48:10:9b:98:36:84:80:99:35:74:ec:27:71:b8:67:9d:
         40:b8:7b:17:20:5f:47:cf:15:39:30:83:f5:6b:44:4f:2d:f1:
         2c:85:32:24:aa:13:2b:f2:b9:37:af:7f:4a:a7:c3:63:47:cb:
         cd:dd:a1:6e:86:23:4a:a0:f0:97:c3:b3:9e:6f:ec:9a:a4:b0:
         14:d4:7a:25:a1:f9:3f:9c:56:92:a7:4f:5e:52:3f:5d:43:30:
         bc:98:e8:40:d2:ca:c6:d3:91:27:f1:4d:cb:fc:4a:d3:33:b0:
         73:56:17:5f:8a:db:53:d5:69:ca:ff:e2:47:39:0e:5f:6b:e2:
         4f:83:ae:b7:c3:2c:8a:5a:21:a6:4c:fc:66:70:0e:b1:66:9d:
         e6:67:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:36:56 2026 by rpki-client