Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa
File:                     323830343a323435633a3a2f33322d313238203d3e20323634323137.roa (raw, json)
Hash identifier:          RBITIX1YgJVblWdXTNcxUZ1GKWItMrZbVyhpXQLyohk=
Subject key identifier:   54:D5:95:49:00:38:8C:F8:4F:89:28:1B:CF:04:1F:C0:E6:BB:EA:C3
Certificate issuer:       /CN=69B4168A97A4375285E25E292F105D8C408C8252
Certificate serial:       1242777BCDCE30CEE3F4C2051FB6A31360D20EBB
Authority key identifier: 69:B4:16:8A:97:A4:37:52:85:E2:5E:29:2F:10:5D:8C:40:8C:82:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B4168A97A4375285E25E292F105D8C408C8252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa
Signing time:             Wed 29 Apr 2026 17:09:19 +0000
ROA not before:           Wed 29 Apr 2026 17:04:19 +0000
ROA not after:            Wed 28 Apr 2027 17:09:19 +0000
asID:                     264217
IP address blocks:        2804:245c::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:42:77:7b:cd:ce:30:ce:e3:f4:c2:05:1f:b6:a3:13:60:d2:0e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B4168A97A4375285E25E292F105D8C408C8252
        Validity
            Not Before: Apr 29 17:04:19 2026 GMT
            Not After : Apr 28 17:09:19 2027 GMT
        Subject: CN=54D5954900388CF84F89281BCF041FC0E6BBEAC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:5b:6a:0c:aa:84:0b:25:83:e8:a5:8e:9d:
                    c7:bf:31:41:75:01:f9:35:58:83:c7:98:d1:45:ff:
                    4a:13:8a:37:68:8d:89:7f:7b:bb:64:6d:e6:62:f8:
                    05:28:29:57:66:64:3e:ff:40:02:ee:61:dc:6d:bb:
                    01:57:3f:99:84:92:d1:92:b3:8a:21:42:9d:31:81:
                    58:6c:ff:cc:66:f1:f9:a6:e5:7c:af:29:66:15:f9:
                    93:58:cf:00:e8:3a:6b:e8:40:9a:a5:99:0a:96:70:
                    30:de:e9:0f:53:5b:59:07:6a:22:86:9f:a6:63:3d:
                    14:ca:7c:f9:4b:27:19:13:eb:18:a3:71:bb:55:c5:
                    4c:13:09:0b:0f:a9:56:78:3a:85:25:b8:9c:ce:4c:
                    ee:92:90:33:b5:a6:5e:12:e0:60:3e:a2:82:de:cf:
                    2c:05:04:1c:4e:b4:b0:18:cb:92:05:bc:6b:07:57:
                    25:92:55:f9:93:95:da:c1:d6:36:c4:b3:38:d5:6d:
                    49:ee:d4:d0:89:1b:98:5a:7c:da:ce:c4:9d:f5:62:
                    fa:d1:3e:3e:44:bb:00:d7:d7:99:61:b1:97:ae:fc:
                    52:65:3d:89:51:d4:46:4a:1e:0e:1b:32:24:62:58:
                    a8:aa:6d:22:45:ea:1e:39:bb:7d:34:e0:3c:b6:56:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:95:49:00:38:8C:F8:4F:89:28:1B:CF:04:1F:C0:E6:BB:EA:C3
            X509v3 Authority Key Identifier:
                keyid:69:B4:16:8A:97:A4:37:52:85:E2:5E:29:2F:10:5D:8C:40:8C:82:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/69B4168A97A4375285E25E292F105D8C408C8252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69B4168A97A4375285E25E292F105D8C408C8252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:245c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:4f:8c:e0:e0:06:85:e9:69:06:72:b3:85:53:a8:ca:ac:4a:
         ac:06:b3:e1:9c:f4:bc:ce:44:77:49:0c:dd:d5:04:91:67:31:
         9b:e2:0a:b4:36:c2:39:e9:5c:da:f8:b0:c9:1a:d8:4c:51:c7:
         d2:70:71:6f:bf:63:20:b9:53:7a:df:b9:82:7e:50:5d:e3:44:
         5a:40:0b:51:51:14:02:b7:b3:17:a5:ab:61:41:b3:38:da:37:
         e6:b8:f4:e3:e2:08:f4:82:72:b8:b0:c0:0f:2d:24:95:9b:44:
         77:e3:42:2a:71:01:89:01:5e:41:fc:27:52:db:a4:bd:7b:9b:
         d4:7d:0c:df:42:87:09:9a:79:a8:7a:62:9a:82:eb:0c:c3:55:
         ee:95:76:6f:63:bc:d6:d6:6f:cc:b6:3a:28:f4:55:e5:42:6f:
         02:12:e6:81:ad:e5:30:4a:84:d3:fa:cf:ff:54:d1:27:f8:3e:
         ea:75:ff:92:d0:ff:ed:61:a8:05:98:11:ad:d3:a0:b8:5e:37:
         3e:53:ad:d9:f7:ca:0e:37:61:da:6d:53:d9:c8:39:ef:d3:c0:
         a0:aa:2a:8e:95:0a:a4:fb:23:ac:47:21:f6:d6:1c:8e:e4:46:
         67:b3:aa:8c:5a:f2:c9:52:45:53:d5:be:ca:3a:08:2b:da:39:
         3c:45:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:31:05 2026 by rpki-client