Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa
File:                     323830343a333635343a3a2f33322d3333203d3e20323636333432.roa (raw, json)
Hash identifier:          u6+9WPYzLE8p3kCewbWxqfT/doQJALFJAkBIFrGv7MU=
Subject key identifier:   82:E6:8F:EB:28:63:22:1E:E3:B1:D1:0F:6C:19:81:6E:BE:6C:21:A5
Certificate issuer:       /CN=6301FDFBED14D7F3201221EA08B655E661A278D0
Certificate serial:       4F5064234200BC128F53B897475F8EF4262960A9
Authority key identifier: 63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa
Signing time:             Sun 03 May 2026 21:24:08 +0000
ROA not before:           Sun 03 May 2026 21:19:08 +0000
ROA not after:            Sun 02 May 2027 21:24:08 +0000
asID:                     266342
IP address blocks:        2804:3654::/32 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:50:64:23:42:00:bc:12:8f:53:b8:97:47:5f:8e:f4:26:29:60:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6301FDFBED14D7F3201221EA08B655E661A278D0
        Validity
            Not Before: May  3 21:19:08 2026 GMT
            Not After : May  2 21:24:08 2027 GMT
        Subject: CN=82E68FEB2863221EE3B1D10F6C19816EBE6C21A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:d5:03:9c:f3:2b:2d:c9:26:72:a6:20:99:
                    29:61:2e:de:ed:5d:82:85:2d:b2:56:f7:51:04:fd:
                    e9:8f:fb:43:b3:e0:6c:d6:16:3b:d4:f8:38:95:05:
                    e3:25:ad:c9:ff:cf:b9:3a:f0:c3:a2:21:4a:8b:fe:
                    0b:4f:a0:7d:c9:09:76:c0:bc:bf:23:ad:ac:59:b8:
                    95:05:c5:05:bc:5e:03:4d:37:dd:97:ce:db:4e:e8:
                    3b:5e:1d:2c:73:c3:14:af:61:87:ca:01:bd:ed:08:
                    ac:ec:93:cf:5d:5c:b0:59:3f:c2:3b:d2:19:e2:90:
                    35:a6:6f:52:0c:87:ed:88:35:58:c4:50:2a:28:22:
                    9a:10:da:e3:4c:4f:36:96:3b:29:c8:d8:17:1f:d1:
                    f9:89:a8:33:ca:fc:ce:49:98:6d:f3:ab:1e:01:87:
                    5b:56:3b:98:ef:b2:5b:73:3d:9a:44:b4:f6:1b:4f:
                    50:0b:db:45:dd:43:b9:e7:b3:42:80:6a:ae:cd:7c:
                    01:c7:72:c7:ab:7d:b7:6c:46:a4:9b:f4:5b:7f:66:
                    77:56:83:75:86:34:99:d7:92:68:cc:9b:17:f1:43:
                    dc:00:56:56:8a:81:60:e2:a8:64:d8:4e:54:1a:4e:
                    a7:04:d2:4c:14:58:e8:98:36:18:9d:4c:c8:f2:90:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E6:8F:EB:28:63:22:1E:E3:B1:D1:0F:6C:19:81:6E:BE:6C:21:A5
            X509v3 Authority Key Identifier:
                keyid:63:01:FD:FB:ED:14:D7:F3:20:12:21:EA:08:B6:55:E6:61:A2:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/6301FDFBED14D7F3201221EA08B655E661A278D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6301FDFBED14D7F3201221EA08B655E661A278D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/323830343a333635343a3a2f33322d3333203d3e20323636333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3654::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:2d:f9:f6:a7:08:1e:05:c3:58:0c:3a:7a:3b:77:37:e3:
         c7:37:d2:db:71:06:c2:a9:9b:59:f5:cc:7e:34:7d:85:63:0d:
         5d:54:1b:5d:d5:5a:0d:ed:cb:2d:92:13:35:1c:5e:41:70:d6:
         1b:c0:0e:b8:16:0f:7b:fa:9e:27:81:63:36:36:8d:d8:87:49:
         4a:ee:62:1a:f2:0c:98:f7:bd:a9:88:3f:90:18:16:f8:3b:2f:
         7f:ee:d8:1b:43:b9:88:7f:75:2d:65:96:49:80:78:50:bc:cd:
         99:49:32:75:cd:fa:26:65:83:ff:36:49:57:81:d6:81:6b:b0:
         ae:8a:d1:c5:92:3a:bd:03:6f:0b:8d:8e:aa:23:1e:5a:b9:8b:
         5f:6e:44:96:59:aa:7d:25:f8:cf:47:50:50:26:fe:0c:47:5c:
         50:d0:f9:31:c7:90:e4:05:cb:3e:ca:13:d1:99:5d:e3:00:3d:
         d6:75:cd:fe:4c:f0:db:b0:90:88:25:7d:40:80:46:cf:ad:b8:
         b7:ba:ac:31:2c:37:15:90:87:88:af:75:1d:d1:7c:a1:24:9f:
         a2:12:b4:43:1c:b8:42:3b:98:ed:1b:26:d8:a7:86:89:a1:ca:
         4c:ee:34:43:46:27:6d:aa:36:fd:4c:dd:db:29:56:d5:82:f4:
         a2:84:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:24:01 2026 by rpki-client