Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3335203d3e20323731333335.roa
File:                     323830343a373965383a3a2f33322d3335203d3e20323731333335.roa (raw, json)
Hash identifier:          +cC4h/GB9ys5eDvWW7kEqs1BNxue4K5GqEcKCwMAHMs=
Subject key identifier:   4B:B7:7C:2A:16:AE:07:E6:94:BC:0C:50:59:91:80:12:FC:81:CA:59
Certificate issuer:       /CN=CDF9B344093A732ACA13F9626B1A7EE142D0CFF1
Certificate serial:       659FEAD161EC8674C1D6745E5FC1A8BF9994EBC2
Authority key identifier: CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3335203d3e20323731333335.roa
Signing time:             Tue 14 Oct 2025 13:45:11 +0000
ROA not before:           Tue 14 Oct 2025 13:40:11 +0000
ROA not after:            Tue 13 Oct 2026 13:45:11 +0000
asID:                     271335
IP address blocks:        2804:79e8::/32 maxlen: 35
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9f:ea:d1:61:ec:86:74:c1:d6:74:5e:5f:c1:a8:bf:99:94:eb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDF9B344093A732ACA13F9626B1A7EE142D0CFF1
        Validity
            Not Before: Oct 14 13:40:11 2025 GMT
            Not After : Oct 13 13:45:11 2026 GMT
        Subject: CN=4BB77C2A16AE07E694BC0C5059918012FC81CA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:ab:bc:d6:e2:26:87:0e:da:8b:7c:e3:53:
                    6d:0b:eb:82:da:a4:7f:96:88:d1:1f:3b:29:c1:e2:
                    d7:bf:07:df:e3:21:1b:b2:63:2c:5c:75:36:f0:03:
                    bf:c8:d4:fc:a7:46:97:be:10:d1:51:6a:8f:9d:e7:
                    fe:3d:f8:20:6e:15:5b:cb:23:d6:7f:c4:7e:b1:ca:
                    1f:ed:78:00:71:6e:7d:4e:46:c4:ec:ed:80:a2:9f:
                    6f:dd:df:d8:65:66:39:ef:6b:3e:f5:54:dd:d1:75:
                    2a:f9:6a:7d:46:e7:5b:27:88:38:8c:14:1a:68:3c:
                    ea:af:43:2b:fb:c6:d0:5a:30:1d:16:86:d5:88:e0:
                    10:2a:b9:35:24:25:75:3c:c5:0e:a1:6f:b4:0d:5c:
                    21:a5:07:96:25:6e:74:e6:a8:dd:eb:a1:09:bc:5b:
                    84:32:d2:b4:e0:b7:c8:49:13:e6:6c:5c:45:02:72:
                    e7:55:29:53:6e:d0:64:68:32:98:64:98:f0:9c:46:
                    85:55:f7:6f:ec:57:55:7b:d7:9e:e0:2c:ce:b0:c9:
                    ca:ec:e7:aa:1d:6c:39:56:9b:db:f2:3e:07:4a:50:
                    c5:05:ed:38:53:45:ce:5b:08:10:54:ed:8b:e8:52:
                    f7:55:c9:0a:7f:93:ac:51:cc:7d:cb:31:4a:ba:92:
                    15:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:7C:2A:16:AE:07:E6:94:BC:0C:50:59:91:80:12:FC:81:CA:59
            X509v3 Authority Key Identifier:
                keyid:CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3335203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:93:78:5d:c9:ac:56:07:0a:55:2e:8a:b4:86:43:06:41:
         db:eb:6e:04:dc:ad:01:05:27:c4:6e:d3:f3:0b:14:68:96:52:
         e0:94:be:0a:39:06:c5:55:96:0b:61:cb:25:30:af:e3:0b:16:
         ac:4e:8e:0c:1a:74:f8:3e:f3:70:0c:9b:23:e4:ea:a2:9f:29:
         9b:30:76:66:db:22:34:0a:e4:28:ee:75:87:39:93:8a:c1:6b:
         28:00:d4:38:d0:84:5a:28:70:a8:3d:95:c4:96:d8:0f:da:5d:
         34:da:79:60:9b:e0:bb:59:5d:b7:d9:b3:df:c3:49:8b:6e:df:
         3a:8e:5a:74:b6:98:9a:c9:68:22:16:d0:60:35:8d:bf:6e:75:
         31:6a:1d:b2:b4:46:2d:a8:17:41:70:5c:ad:a2:91:4f:ae:96:
         65:68:a8:8d:93:e3:9f:64:1f:5b:aa:aa:c8:a2:f8:89:38:0a:
         59:74:31:dc:cf:f5:17:51:26:53:58:3d:7c:9a:c5:6d:4f:bc:
         7b:62:09:ab:8f:a1:1a:92:a7:e6:8b:cb:be:15:18:8f:59:e6:
         4a:8c:60:9b:83:30:20:0c:ca:59:6d:e5:2f:91:54:8a:e3:77:
         44:f1:da:94:7c:f8:89:b4:e8:98:37:6c:ac:d0:38:24:e4:a6:
         87:7f:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:29:37 2025 by rpki-client