Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa
File:                     323830343a6365383a3a2f33322d3332203d3e203532353734.roa (raw, json)
Hash identifier:          cTjoTRIKu0s9HBZbx6fD6wzQ9I8GbhrM41FG3MBeh3Y=
Subject key identifier:   1C:F6:06:6C:89:6E:FB:10:90:8E:E2:01:74:1C:FD:95:51:A1:A3:18
Certificate issuer:       /CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
Certificate serial:       6BEFE3B53F3C32D13E50B53F91E75C2B8FB88654
Authority key identifier: E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa
Signing time:             Tue 06 Oct 2026 13:06:27 +0000
ROA not before:           Tue 06 Oct 2026 13:01:27 +0000
ROA not after:            Tue 05 Oct 2027 13:06:27 +0000
asID:                     52574
IP address blocks:        2804:ce8::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ef:e3:b5:3f:3c:32:d1:3e:50:b5:3f:91:e7:5c:2b:8f:b8:86:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73C2DFA70BA16CE385523BA900DFC740E6E79D2
        Validity
            Not Before: Oct  6 13:01:27 2026 GMT
            Not After : Oct  5 13:06:27 2027 GMT
        Subject: CN=1CF6066C896EFB10908EE201741CFD9551A1A318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:3b:7f:09:62:90:15:97:8b:6a:57:ef:88:
                    23:35:c3:31:8d:c1:30:b2:99:1d:55:8c:6d:09:ac:
                    76:88:9b:19:18:97:ff:77:b1:e9:63:f2:07:a2:14:
                    21:2f:fd:06:56:68:91:15:2d:45:36:1c:1a:8d:a7:
                    38:94:50:70:33:8e:3f:be:85:ec:1a:46:7a:00:b8:
                    80:31:46:de:e8:af:21:29:d2:2b:fa:af:bb:98:bd:
                    94:0c:04:e9:39:66:18:f9:b5:5e:8a:47:f7:51:ac:
                    56:47:57:1a:0e:7a:5d:5a:56:ef:b3:48:d7:71:15:
                    14:81:d5:3a:9a:d7:eb:76:ad:87:bf:ea:42:c9:4a:
                    3c:82:61:d8:a2:48:b3:a1:b6:b9:8f:d2:9f:b2:86:
                    57:7d:78:30:99:7e:4e:f5:f9:2b:ed:f9:30:2e:2e:
                    ed:a6:88:8d:5c:76:78:66:eb:5c:c6:ee:e8:44:9b:
                    c8:9f:d8:d1:ba:34:89:af:ec:9f:02:2e:76:bb:17:
                    c7:45:b8:87:51:bd:be:de:3e:9f:c7:09:04:46:09:
                    19:cc:22:fd:cf:42:21:5c:1c:84:c0:cc:88:e3:32:
                    25:aa:70:36:84:7d:bb:e2:29:db:3b:7e:b3:8a:eb:
                    f5:51:4a:3a:cc:9f:3b:c9:d3:65:97:19:35:8a:60:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F6:06:6C:89:6E:FB:10:90:8E:E2:01:74:1C:FD:95:51:A1:A3:18
            X509v3 Authority Key Identifier:
                keyid:E7:3C:2D:FA:70:BA:16:CE:38:55:23:BA:90:0D:FC:74:0E:6E:79:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73C2DFA70BA16CE385523BA900DFC740E6E79D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3oxFaTYGfTARJsi18ZHZXx1wt5vb8GjDSss7Z1G9sm2/0/323830343a6365383a3a2f33322d3332203d3e203532353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:dc:eb:34:45:ce:15:a7:c5:4e:fa:f9:c3:de:c9:16:5d:
         83:4f:19:47:96:1a:0d:1c:c8:53:bc:01:80:7e:76:7a:e7:88:
         60:d7:72:61:9d:ca:d5:5e:33:29:f3:4d:a2:9e:31:3b:8c:29:
         34:c2:f2:49:0d:18:06:fb:82:69:2e:5d:b7:e0:1c:d4:df:44:
         11:a7:45:e6:68:b8:81:b8:c0:e8:87:3b:48:8c:61:12:7f:8b:
         6e:a8:9f:ad:17:a5:0d:d5:0e:74:84:88:b2:0a:9d:13:ca:be:
         be:82:67:f5:65:8f:42:fe:bf:33:b1:56:ab:03:62:e3:0b:78:
         71:15:17:28:96:cc:5c:c8:eb:ff:40:c5:c6:43:79:b4:85:59:
         9c:9a:5c:fc:0d:29:c4:a7:af:cc:a7:02:a7:6d:4a:43:2f:11:
         9f:a7:88:33:70:d4:a4:f3:f7:4e:95:70:3f:c2:54:51:be:46:
         f4:a7:da:1f:d6:12:7e:2a:1d:34:bb:a6:a2:46:67:ff:22:87:
         7f:af:a8:7e:aa:4a:63:7c:e4:53:47:a9:14:31:d7:44:b5:ab:
         d0:c8:85:1b:17:a5:21:0d:3a:d7:57:48:a9:79:c8:ca:8a:ff:
         93:6e:ba:cf:97:3e:eb:d8:bb:db:6c:65:17:dd:2a:ce:7a:54:
         cd:b0:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:28:57 2026 by rpki-client