Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
File:                     323830343a386331383a3a2f33322d3438203d3e20323733373739.roa (raw, json)
Hash identifier:          KMMkb5/dhVs00TPmDd1D0JqAPzOX/QzW4P3dRh6Delc=
Subject key identifier:   8E:75:19:7D:C8:E5:ED:6C:93:7F:56:3F:8E:BA:11:2D:F3:62:46:A6
Certificate issuer:       /CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
Certificate serial:       2567103DE6460A8AA849D08401BFF8357A84AE15
Authority key identifier: AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa
Signing time:             Wed 18 Jun 2025 14:48:15 +0000
ROA not before:           Wed 18 Jun 2025 14:43:15 +0000
ROA not after:            Wed 17 Jun 2026 14:48:15 +0000
asID:                     273779
IP address blocks:        2804:8c18::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:67:10:3d:e6:46:0a:8a:a8:49:d0:84:01:bf:f8:35:7a:84:ae:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848
        Validity
            Not Before: Jun 18 14:43:15 2025 GMT
            Not After : Jun 17 14:48:15 2026 GMT
        Subject: CN=8E75197DC8E5ED6C937F563F8EBA112DF36246A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:c9:56:e3:d0:59:9f:90:b1:14:48:9f:be:
                    e6:73:26:af:fc:72:52:e3:fe:33:ef:66:12:40:73:
                    f8:3e:ad:52:d6:1f:3f:bb:ad:e1:48:da:84:fb:91:
                    85:eb:17:ce:d3:e5:c6:ab:3e:b0:b6:89:3b:b5:23:
                    3d:d5:e9:77:bb:ba:c4:bf:62:83:52:e2:ef:a2:ae:
                    db:73:08:81:73:e5:30:75:11:6d:3d:af:58:a1:a4:
                    76:41:98:e5:0b:6f:3f:bb:1c:99:80:c5:be:65:51:
                    42:cf:24:b1:21:e6:2b:1e:d5:60:69:5d:51:b3:94:
                    1e:1c:a0:3a:0f:63:be:65:ce:c7:5e:e5:c0:68:64:
                    e0:62:e0:dd:fb:41:78:e9:66:d8:2e:09:e0:24:10:
                    13:c3:62:8f:52:74:c7:2b:e8:32:1b:a4:72:7e:41:
                    cf:a7:41:f0:53:0e:79:5f:b1:f8:ba:8b:c5:60:b9:
                    93:a9:c2:ae:26:51:a9:d7:f9:68:49:39:12:20:21:
                    66:57:b6:d4:a3:2f:88:8a:a7:0a:97:e4:c0:1b:31:
                    7e:47:24:c9:9b:a4:98:92:3b:9f:30:5e:a3:34:7c:
                    48:a5:5b:28:de:d7:79:00:0c:d5:ea:2a:26:5f:39:
                    a1:42:62:59:a2:dc:20:b3:f1:b8:a0:aa:4c:f1:44:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:75:19:7D:C8:E5:ED:6C:93:7F:56:3F:8E:BA:11:2D:F3:62:46:A6
            X509v3 Authority Key Identifier:
                keyid:AF:59:D8:90:38:DB:B2:7D:9E:A9:A7:E6:CA:49:9D:1C:B3:5F:08:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF59D89038DBB27D9EA9A7E6CA499D1CB35F0848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/323830343a386331383a3a2f33322d3438203d3e20323733373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:58:b9:f7:48:34:bb:4c:ad:4b:13:9d:06:31:7f:a2:6f:
         31:e2:74:6d:df:d1:6f:e2:3a:80:a7:e3:43:5b:8c:6e:00:a6:
         70:8e:70:46:46:60:ab:25:4e:95:8c:dd:de:16:bd:98:b4:1e:
         f0:d8:31:59:99:d7:52:67:f0:d0:6b:4f:3c:71:87:cd:78:0b:
         62:99:ce:e6:4d:b1:be:6a:5a:c8:e7:82:f7:ff:eb:17:e4:34:
         2b:d7:b5:cf:60:5e:cd:eb:73:2f:45:cb:cb:24:75:53:46:54:
         96:df:62:04:2f:24:f7:1d:62:0e:16:2f:cc:7a:2a:52:b1:f9:
         0d:fa:3a:29:4e:2b:98:cb:3a:2c:37:fa:62:a7:b2:77:2c:29:
         b5:18:03:f2:57:18:32:f7:31:80:ed:0b:e0:9a:80:52:de:38:
         93:24:a3:70:49:03:83:bd:9c:d4:c2:b8:70:c0:c9:f0:31:e1:
         6f:7f:33:9c:77:c4:9c:cf:e9:de:3e:b9:7b:27:cf:5d:bf:9f:
         5f:50:a3:20:f5:a6:3e:80:b4:1d:91:7d:0e:ec:da:38:34:01:
         ce:3b:44:89:9a:69:55:fc:fc:e5:f5:0b:b8:01:83:88:58:be:
         9a:1d:e3:a8:89:22:c1:6d:b9:86:53:17:4d:8e:80:d1:1f:6e:
         2d:ea:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:57:06 2025 by rpki-client