Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a383030303a3a2f33342d3334203d3e20323633383430.roa
File:                     323830343a323639343a383030303a3a2f33342d3334203d3e20323633383430.roa (raw, json)
Hash identifier:          lLydJ3KqL5o/uC7/6ItFl6bAE60n3q1OLFTFl5JlI64=
Subject key identifier:   F7:D8:E8:5E:84:26:A6:3F:E6:6E:38:D9:1D:F0:34:C8:ED:D5:B2:48
Certificate issuer:       /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial:       081BA31FD2D315E9538A9A7FF4B6A04FD8CDA986
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a383030303a3a2f33342d3334203d3e20323633383430.roa
Signing time:             Thu 01 Oct 2026 21:00:33 +0000
ROA not before:           Thu 01 Oct 2026 20:55:33 +0000
ROA not after:            Thu 30 Sep 2027 21:00:33 +0000
asID:                     263840
IP address blocks:        2804:2694:8000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1b:a3:1f:d2:d3:15:e9:53:8a:9a:7f:f4:b6:a0:4f:d8:cd:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
        Validity
            Not Before: Oct  1 20:55:33 2026 GMT
            Not After : Sep 30 21:00:33 2027 GMT
        Subject: CN=F7D8E85E8426A63FE66E38D91DF034C8EDD5B248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:72:fe:04:8d:a0:75:71:12:c6:3e:e7:5d:
                    b5:c9:d9:d1:cc:f9:7f:fa:61:e4:cb:2c:d1:f9:06:
                    15:e7:7d:b6:0b:ec:30:d9:fa:23:a1:48:68:ec:b8:
                    32:18:42:39:61:30:f2:4c:eb:b7:16:29:e7:4d:76:
                    0e:6e:78:ec:20:86:ad:0b:5a:bd:70:2c:92:11:a3:
                    e7:3f:1b:ec:00:f1:09:a9:1f:7b:9b:80:99:00:24:
                    4c:3a:1f:eb:de:5b:31:7a:d5:3a:ab:d7:9b:13:be:
                    4e:3a:40:cd:a3:35:0b:dd:f8:51:75:59:42:c8:3f:
                    15:f6:23:1e:5e:30:ed:c8:3d:c9:35:e3:d5:dd:c1:
                    f9:ee:3b:5f:a9:2f:e0:5b:6e:c1:cc:f5:0e:f7:fa:
                    f8:91:3a:ed:ab:1e:d3:94:c6:98:15:ce:81:ac:24:
                    7a:a2:59:95:35:78:3d:ed:7b:7a:8d:a4:5c:27:c6:
                    4c:bc:93:f5:ed:8f:f7:01:69:39:0b:7d:5e:2a:3a:
                    2b:47:2f:37:a8:9e:32:22:54:4a:19:54:98:78:86:
                    80:02:80:a0:37:d6:94:1a:18:eb:50:88:1d:50:a5:
                    b9:c7:6d:f2:54:48:5d:6b:48:cf:02:1d:64:6a:9c:
                    88:f3:33:17:6b:e7:3a:31:70:6b:ad:d1:bc:ea:24:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:E8:5E:84:26:A6:3F:E6:6E:38:D9:1D:F0:34:C8:ED:D5:B2:48
            X509v3 Authority Key Identifier:
                keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a383030303a3a2f33342d3334203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2694:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:95:c7:4f:ca:b4:59:8a:af:bf:dc:f4:c1:ab:ae:a1:8b:
         c6:f7:f2:24:7a:af:cf:ac:54:88:a3:79:75:b3:63:1a:ee:2d:
         d6:a9:a5:2d:c8:60:16:8e:9d:05:cd:c1:e4:3a:ea:c6:be:65:
         e2:3b:8c:bd:0d:32:22:e5:b8:03:b3:d4:43:17:8c:cb:fc:7a:
         ce:7c:c8:54:db:38:ff:7e:22:3b:bf:c7:6c:a8:01:4b:b4:4f:
         06:5f:49:13:c2:a6:5f:fb:bd:d0:39:ed:f0:80:38:d5:98:84:
         59:17:ae:e7:3f:4a:7f:a5:a9:1e:0f:12:05:eb:39:a6:4a:22:
         e4:dd:e5:40:6d:00:7b:00:ff:df:5d:58:97:9c:47:d9:05:4f:
         a4:b8:68:16:32:c2:06:3b:da:ae:d6:50:35:d0:fa:53:f0:c7:
         1b:50:21:a1:94:a4:1b:19:1f:f8:0b:9a:33:8f:fe:ab:c2:da:
         cf:be:c3:31:b6:80:82:50:04:76:dc:5e:92:30:86:2a:06:cc:
         75:f1:79:94:4b:d0:77:a2:de:37:22:22:37:8a:6a:d0:90:41:
         b9:f7:98:3e:7a:60:e0:38:ee:f1:83:51:cd:ef:ff:1c:cd:83:
         1f:87:7b:7d:6c:45:a0:22:14:f2:7c:c0:ea:2e:a9:e2:c5:9d:
         8b:ba:cc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:37:05 2026 by rpki-client