Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa
File:                     323830343a336562343a3a2f33322d313238203d3e20323636363136.roa (raw, json)
Hash identifier:          MmDGbzyqeJshefOgtpCBHx/rylCfLake22YXSkX2dvE=
Subject key identifier:   A8:7D:A6:1D:4C:58:15:89:83:0C:32:3B:B6:64:8E:CA:61:70:DA:5A
Certificate issuer:       /CN=09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5
Certificate serial:       0DA958ED9F4AC7A2EC29C67039DC47676779C5E1
Authority key identifier: 09:DA:E0:2A:BB:15:EA:82:CD:5E:3E:F2:C7:8D:20:AC:12:F3:B9:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa
Signing time:             Sun 19 Jul 2026 04:35:49 +0000
ROA not before:           Sun 19 Jul 2026 04:30:49 +0000
ROA not after:            Sun 18 Jul 2027 04:35:49 +0000
asID:                     266616
IP address blocks:        2804:3eb4::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a9:58:ed:9f:4a:c7:a2:ec:29:c6:70:39:dc:47:67:67:79:c5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5
        Validity
            Not Before: Jul 19 04:30:49 2026 GMT
            Not After : Jul 18 04:35:49 2027 GMT
        Subject: CN=A87DA61D4C581589830C323BB6648ECA6170DA5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:6c:3d:3d:67:40:02:c8:3c:f7:5d:99:19:
                    a6:ca:34:aa:05:b8:07:05:9d:8c:c6:4b:2e:f0:97:
                    a0:40:98:bb:ad:60:90:c2:4b:05:61:ec:ae:76:9e:
                    b1:5d:bf:aa:9b:a4:42:8a:09:74:c6:e0:36:f8:d3:
                    ce:c4:63:d0:15:8f:86:31:57:f5:fb:5f:45:c9:90:
                    28:a5:80:0b:53:44:6f:bc:60:a2:78:7c:19:3a:28:
                    6f:63:7d:7c:9e:c7:cf:0e:e1:6f:ed:29:26:7b:94:
                    78:8b:10:71:bc:20:50:f4:d7:66:34:06:96:57:de:
                    f3:b0:ab:65:89:27:c7:57:65:b0:28:8d:50:24:ed:
                    e9:05:80:80:2c:51:57:5c:72:17:18:98:e8:84:c5:
                    d5:82:e4:18:a1:54:00:54:f9:ec:34:f9:e8:58:df:
                    98:c9:9f:97:63:68:91:2e:7d:dc:af:db:2b:71:5e:
                    82:b0:84:bf:86:4e:ed:95:5b:92:fa:a0:e9:6c:2f:
                    54:bc:ba:00:1a:bc:68:2e:7d:51:29:93:48:73:10:
                    a3:77:5f:0c:da:eb:7d:b3:e7:8d:0f:1c:7d:c8:51:
                    2a:6e:55:d4:e0:8a:c9:57:d8:b7:34:04:9c:8f:00:
                    b2:a0:f5:61:2a:5c:3f:88:65:8e:f3:4c:a4:00:97:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:A6:1D:4C:58:15:89:83:0C:32:3B:B6:64:8E:CA:61:70:DA:5A
            X509v3 Authority Key Identifier:
                keyid:09:DA:E0:2A:BB:15:EA:82:CD:5E:3E:F2:C7:8D:20:AC:12:F3:B9:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09DAE02ABB15EA82CD5E3EF2C78D20AC12F3B9C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/323830343a336562343a3a2f33322d313238203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3eb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:99:4a:66:f9:c1:f2:03:05:8e:5e:d9:0e:75:43:8f:0e:
         78:9a:43:b1:79:6a:29:d5:76:f2:29:bf:8d:86:90:39:d6:2e:
         d5:85:e4:a5:f9:c1:75:60:47:63:17:52:cb:88:4c:22:4f:61:
         89:d4:0a:4b:70:1f:89:6e:67:06:57:ce:fc:77:86:fd:b4:31:
         d9:6e:f4:9f:41:44:33:fa:71:cd:01:7e:cf:6e:1f:36:e8:2c:
         26:c3:42:32:9c:9b:dc:0d:19:6d:e0:5b:5a:e4:92:f0:62:f8:
         7d:10:d3:d3:f3:4f:39:30:2b:a8:83:2b:e9:d4:9d:e2:3f:00:
         94:06:76:40:71:cb:81:15:7b:1c:f5:52:ae:5b:95:e0:d1:cf:
         d1:f0:24:69:3f:8e:4c:eb:9a:66:52:e8:a7:47:ba:97:26:04:
         4f:11:e0:12:de:27:ea:9d:49:91:a5:ef:d7:09:3b:38:69:29:
         93:ba:d1:ec:58:2d:21:8f:d0:c2:5b:b1:06:dc:e2:0d:1e:06:
         ef:f1:a0:fc:59:4c:05:60:98:76:0f:b5:3f:c2:58:f4:d1:ed:
         13:f7:03:1b:57:d4:7d:8e:ce:ce:fc:00:ac:a0:21:96:ba:6f:
         09:fa:77:54:5c:95:f2:4f:97:66:8d:9b:dc:08:b5:79:5c:23:
         79:3a:eb:58
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUDalY7Z9Kx6LsKcZwOdxHZ2d5xeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlEQUUwMkFCQjE1RUE4MkNENUUzRUYyQzc4RDIwQUMx
MkYzQjlDNTAeFw0yNjA3MTkwNDMwNDlaFw0yNzA3MTgwNDM1NDlaMDMxMTAvBgNV
BAMTKEE4N0RBNjFENEM1ODE1ODk4MzBDMzIzQkI2NjQ4RUNBNjE3MERBNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEWw9PWdAAsg8912ZGabKNKoF
uAcFnYzGSy7wl6BAmLutYJDCSwVh7K52nrFdv6qbpEKKCXTG4Db4087EY9AVj4Yx
V/X7X0XJkCilgAtTRG+8YKJ4fBk6KG9jfXyex88O4W/tKSZ7lHiLEHG8IFD012Y0
BpZX3vOwq2WJJ8dXZbAojVAk7ekFgIAsUVdcchcYmOiExdWC5BihVABU+ew0+ehY
35jJn5djaJEufdyv2ytxXoKwhL+GTu2VW5L6oOlsL1S8ugAavGgufVEpk0hzEKN3
Xwza632z540PHH3IUSpuVdTgislX2Lc0BJyPALKg9WEqXD+IZY7zTKQAl7SVAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUqH2mHUxYFYmDDDI7tmSOymFw2lowHwYDVR0j
BBgwFoAUCdrgKrsV6oLNXj7yx40grBLzucUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR015S200aWRwZHVKRUxiWXFIdTZxZ1l1dmJHSG5WV1VvVWhWbzFiQmZR
TDQvMC8wOURBRTAyQUJCMTVFQTgyQ0Q1RTNFRjJDNzhEMjBBQzEyRjNCOUM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5REFFMDJBQkIxNUVBODJD
RDVFM0VGMkM3OEQyMEFDMTJGM0I5QzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNeUttNGlkcGR1SkVMYllxSHU2cWdZdXZiR0huVldVb1VoVm8xYkJmUUw0LzAv
MzIzODMwMzQzYTMzNjU2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBD60MA0GCSqGSIb3DQEBCwUAA4IBAQBJnJlK
ZvnB8gMFjl7ZDnVDjw54mkOxeWop1XbyKb+NhpA51i7VheSl+cF1YEdjF1LLiEwi
T2GJ1ApLcB+JbmcGV878d4b9tDHZbvSfQUQz+nHNAX7Pbh826Cwmw0IynJvcDRlt
4Fta5JLwYvh9ENPT8085MCuogyvp1J3iPwCUBnZAccuBFXsc9VKuW5Xg0c/R8CRp
P45M65pmUuinR7qXJgRPEeAS3ifqnUmRpe/XCTs4aSmTutHsWC0hj9DCW7EG3OIN
Hgbv8aD8WUwFYJh2D7U/wlj00e0T9wMbV9R9js7O/ACsoCGWum8J+ndUXJXyT5dm
jZvcCLV5XCN5OutY
-----END CERTIFICATE-----