Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa
File:                     323830343a336162633a3a2f33322d3333203d3e20323636313036.roa (raw, json)
Hash identifier:          7LKtUy9g3j3CYdDE97GVKmwZiZ+fMk16qAqbQ/EKeDA=
Subject key identifier:   13:52:ED:6C:AA:B0:75:A6:91:03:31:FA:B4:23:AF:71:11:3B:37:D1
Certificate issuer:       /CN=06C90052786F2FC17ABF12F517AFA0A24268662C
Certificate serial:       1DCFFCC12763727F24C1A7F1D7DA44AFE8B9D0D4
Authority key identifier: 06:C9:00:52:78:6F:2F:C1:7A:BF:12:F5:17:AF:A0:A2:42:68:66:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C90052786F2FC17ABF12F517AFA0A24268662C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa
Signing time:             Sun 03 May 2026 21:24:23 +0000
ROA not before:           Sun 03 May 2026 21:19:23 +0000
ROA not after:            Sun 02 May 2027 21:24:23 +0000
asID:                     266106
IP address blocks:        2804:3abc::/32 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:fc:c1:27:63:72:7f:24:c1:a7:f1:d7:da:44:af:e8:b9:d0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C90052786F2FC17ABF12F517AFA0A24268662C
        Validity
            Not Before: May  3 21:19:23 2026 GMT
            Not After : May  2 21:24:23 2027 GMT
        Subject: CN=1352ED6CAAB075A6910331FAB423AF71113B37D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:8e:b6:aa:a8:c1:ac:51:cf:31:d9:d5:08:
                    19:5e:93:cd:c1:4e:4a:60:1b:9e:ec:b7:c6:5c:2c:
                    84:f9:24:24:0e:fc:28:ba:f1:7d:c2:88:63:a0:04:
                    c8:2e:42:f3:1c:06:cf:80:27:d8:79:b8:79:b5:f0:
                    73:96:af:58:69:64:b5:f1:ec:93:16:f2:a5:98:ea:
                    9d:74:20:e7:56:e3:ab:d1:5e:b2:92:25:de:6a:2f:
                    04:83:66:44:f1:9e:8b:09:b5:f5:a6:f3:ea:d8:f5:
                    1c:de:b1:0f:f9:b5:ac:86:07:6d:56:94:d2:6c:95:
                    63:47:3d:5f:88:3e:8d:5a:91:65:34:9e:14:46:15:
                    f4:f7:ad:4d:7b:6a:7d:33:e2:2a:7d:88:15:70:ba:
                    0d:1a:fa:fb:46:4f:79:41:fe:c1:64:3e:6d:99:08:
                    f1:c8:d3:a6:01:d7:1d:73:0f:d4:48:76:0d:00:33:
                    03:75:bb:e6:37:ca:ae:2f:2c:8d:d5:39:36:15:50:
                    53:0d:7d:5a:1d:41:db:f6:76:c3:37:44:cc:87:72:
                    87:34:80:64:ca:c0:f3:cc:ef:5f:bf:20:8d:3c:6a:
                    05:f0:e8:dd:09:0f:29:26:61:86:f2:f6:68:42:06:
                    9a:c8:b5:d8:3f:7f:6d:3f:12:9c:63:6e:68:5d:0f:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:52:ED:6C:AA:B0:75:A6:91:03:31:FA:B4:23:AF:71:11:3B:37:D1
            X509v3 Authority Key Identifier:
                keyid:06:C9:00:52:78:6F:2F:C1:7A:BF:12:F5:17:AF:A0:A2:42:68:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/06C90052786F2FC17ABF12F517AFA0A24268662C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06C90052786F2FC17ABF12F517AFA0A24268662C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:6c:e6:af:83:f6:12:a2:9d:e4:6c:65:7d:79:59:21:9b:
         2f:58:3f:68:db:4c:04:52:45:99:57:83:38:fc:50:bc:bb:23:
         f3:87:76:43:27:c9:c7:4e:85:39:d6:22:b0:a0:55:4f:af:cb:
         23:43:c6:44:c8:14:07:b8:2d:5a:94:79:35:90:b0:df:5b:43:
         67:5b:67:cc:e0:4f:29:7e:35:b5:ab:15:ce:ba:08:38:d4:34:
         38:f7:4f:e0:08:5b:07:51:f2:a4:ab:d3:2a:d8:7d:32:1c:e8:
         dc:73:de:07:23:8b:04:6f:94:ca:e2:2f:f7:dd:28:88:a8:3d:
         ab:d9:08:5b:52:97:f4:15:6f:58:46:36:b8:9a:a4:9e:54:e3:
         21:5d:9d:81:50:04:0c:2c:35:3a:df:76:fa:e2:ec:d5:b4:71:
         54:b0:66:4f:10:4a:c4:61:a3:10:ef:0a:13:d1:eb:5a:04:11:
         86:36:86:40:d7:c3:1a:e8:79:5a:02:f0:9e:ba:c5:eb:bb:52:
         73:35:b8:6e:a9:80:c1:71:d1:48:54:b2:13:e0:33:22:42:0b:
         fd:e3:6f:8f:fe:d4:1d:17:f2:bf:c6:1b:87:44:45:26:b5:1b:
         93:85:e9:bf:2a:02:9b:85:6f:3c:71:cb:c5:f5:c9:b0:92:55:
         9c:aa:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:01 2026 by rpki-client