Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d3334203d3e20323632353537.roa
File:                     323830343a3634633a3a2f33322d3334203d3e20323632353537.roa (raw, json)
Hash identifier:          EwgjD+ATlMHSawMQ3GTddTuc1Vhp+nQyFanzCtMmnXU=
Subject key identifier:   51:C6:2A:A1:11:88:E3:94:D4:B5:96:B5:9A:CB:BC:87:D7:CF:A2:E5
Certificate issuer:       /CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
Certificate serial:       7DEB405291282D85C361A8DC42BE3CA56D0B8935
Authority key identifier: C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d3334203d3e20323632353537.roa
Signing time:             Mon 05 Oct 2026 17:05:45 +0000
ROA not before:           Mon 05 Oct 2026 17:00:45 +0000
ROA not after:            Mon 04 Oct 2027 17:05:45 +0000
asID:                     262557
IP address blocks:        2804:64c::/32 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:eb:40:52:91:28:2d:85:c3:61:a8:dc:42:be:3c:a5:6d:0b:89:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
        Validity
            Not Before: Oct  5 17:00:45 2026 GMT
            Not After : Oct  4 17:05:45 2027 GMT
        Subject: CN=51C62AA11188E394D4B596B59ACBBC87D7CFA2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:50:7a:52:b2:22:ab:e1:62:37:f5:de:43:
                    38:37:b1:a1:9e:29:9c:52:d7:f8:e2:8b:ae:77:8c:
                    64:03:93:64:37:26:7f:a0:ea:e1:e3:4c:f8:f9:ac:
                    39:39:4f:9e:99:38:55:d2:b5:96:a6:54:96:80:8c:
                    c9:c1:de:af:a1:f5:d0:57:ba:67:1d:8a:ba:a8:b2:
                    50:dc:20:c2:27:f3:7f:8e:57:d2:c4:83:af:c0:8c:
                    b4:83:d4:10:6c:40:8d:11:99:07:81:f1:40:7e:6f:
                    c0:bf:c3:7a:42:2b:64:c1:fb:59:24:ae:68:0a:2d:
                    44:e7:8a:79:ff:7b:b9:67:9b:3d:a9:1f:c5:d1:93:
                    bd:45:0f:d1:42:e1:1d:e9:30:33:f9:bd:d7:8a:5e:
                    25:78:30:6c:b8:08:d4:22:f6:60:be:80:8e:5e:3f:
                    e9:6d:7c:57:8a:1d:9e:79:e6:90:6a:a8:41:81:d5:
                    fe:ff:ce:60:e4:78:05:d3:84:77:a7:0c:eb:49:34:
                    ff:74:5a:c4:70:97:a5:74:b1:ab:88:40:ca:64:d9:
                    a6:44:af:bc:dc:6d:73:0d:fc:ff:fc:c3:b5:14:ae:
                    28:b6:8b:32:c0:b9:0b:79:67:af:dc:1d:47:c5:0b:
                    b6:7c:78:6e:e0:38:11:a8:22:97:7c:86:ed:6d:54:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C6:2A:A1:11:88:E3:94:D4:B5:96:B5:9A:CB:BC:87:D7:CF:A2:E5
            X509v3 Authority Key Identifier:
                keyid:C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/323830343a3634633a3a2f33322d3334203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:03:b1:88:00:59:06:85:4d:8b:01:0f:6a:d1:f8:cd:2e:29:
         81:cf:52:13:42:f5:a7:e2:fb:f1:16:77:18:3a:55:f7:45:5d:
         2c:bd:31:45:0c:41:3d:6e:0e:d6:3a:ef:76:8b:cd:c9:db:79:
         1a:55:f2:b7:e7:17:7a:9f:15:42:1d:08:e3:3c:27:51:75:b9:
         ea:22:a6:23:af:f6:03:f4:15:d5:6b:c0:8c:05:a9:eb:71:3a:
         ed:6a:2e:d3:2e:93:98:8a:57:f3:a7:f5:79:5e:56:02:34:4b:
         85:2a:a0:2b:7e:7e:8f:4c:54:f1:d8:d5:38:a8:a2:47:0d:04:
         4f:e9:20:e2:c1:1d:ee:ce:a1:97:88:b8:58:ee:e0:41:9d:5a:
         fa:ce:31:e6:3a:da:9a:21:20:42:3d:1e:9e:bd:ec:8a:a7:f9:
         a3:27:40:e7:e8:7a:21:a4:06:27:ce:d4:4e:e9:08:eb:1b:0f:
         c0:58:f2:59:b2:f3:0d:7a:19:e5:df:7a:6e:ba:99:71:13:b8:
         de:d2:c2:31:58:e3:df:52:33:6d:dd:7c:50:b0:d0:0a:35:31:
         fd:97:0c:75:70:19:44:a8:1a:0c:c8:98:a5:c3:1a:ca:70:33:
         e5:3f:f8:03:fe:0f:18:9d:f9:17:d7:b0:be:47:76:32:7f:2a:
         56:a4:8d:a8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfetAUpEoLYXDYajcQr48pW0LiTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU3OTY2QTE2RTM5RDczNUE5QkRGNkY5MDQ0M0YzOUY1
MkJGMUNGMDAeFw0yNjEwMDUxNzAwNDVaFw0yNzEwMDQxNzA1NDVaMDMxMTAvBgNV
BAMTKDUxQzYyQUExMTE4OEUzOTRENEI1OTZCNTlBQ0JCQzg3RDdDRkEyRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nlB6UrIiq+FiN/XeQzg3saGe
KZxS1/jii653jGQDk2Q3Jn+g6uHjTPj5rDk5T56ZOFXStZamVJaAjMnB3q+h9dBX
umcdirqoslDcIMIn83+OV9LEg6/AjLSD1BBsQI0RmQeB8UB+b8C/w3pCK2TB+1kk
rmgKLUTninn/e7lnmz2pH8XRk71FD9FC4R3pMDP5vdeKXiV4MGy4CNQi9mC+gI5e
P+ltfFeKHZ555pBqqEGB1f7/zmDkeAXThHenDOtJNP90WsRwl6V0sauIQMpk2aZE
r7zcbXMN/P/8w7UUrii2izLAuQt5Z6/cHUfFC7Z8eG7gOBGoIpd8hu1tVLi9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUcYqoRGI45TUtZa1msu8h9fPouUwHwYDVR0j
BBgwFoAUxXlmoW451zWpvfb5BEPzn1K/HPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhhdWtVUnFkeDFhN3BNazdmQnFEWFZKQzcyUFJMcm5HSHlHU2JhTTY4
ZzMvMC9DNTc5NjZBMTZFMzlENzM1QTlCREY2RjkwNDQzRjM5RjUyQkYxQ0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1Nzk2NkExNkUzOUQ3MzVB
OUJERjZGOTA0NDNGMzlGNTJCRjFDRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZoYXVrVVJxZHgxYTdwTWs3ZkJxRFhWSkM3MlBSTHJuR0h5R1NiYU02OGczLzAv
MzIzODMwMzQzYTM2MzQ2MzNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMjM1
MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBkwwDQYJKoZIhvcNAQELBQADggEBACkDsYgAWQaF
TYsBD2rR+M0uKYHPUhNC9afi+/EWdxg6VfdFXSy9MUUMQT1uDtY673aLzcnbeRpV
8rfnF3qfFUIdCOM8J1F1ueoipiOv9gP0FdVrwIwFqetxOu1qLtMuk5iKV/On9Xle
VgI0S4UqoCt+fo9MVPHY1TiookcNBE/pIOLBHe7OoZeIuFju4EGdWvrOMeY62poh
IEI9Hp697Iqn+aMnQOfoeiGkBifO1E7pCOsbD8BY8lmy8w16GeXfem66mXETuN7S
wjFY499SM23dfFCw0Ao1Mf2XDHVwGUSoGgzImKXDGspwM+U/+AP+Dxid+RfXsL5H
djJ/Klakjag=
-----END CERTIFICATE-----
Generated at Sat Oct 17 01:19:59 2026 by rpki-client