Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/6/323830343a313635383a313031313a3a2f34382d3438203d3e20323633323833.roa
File:                     323830343a313635383a313031313a3a2f34382d3438203d3e20323633323833.roa (raw, json)
Hash identifier:          mJUw+sKBSQsiRuY8LHSXOw7rfKu9h/NTV2rFYJwIA8E=
Subject key identifier:   21:33:82:17:D0:3C:67:EB:61:E3:E2:AA:5C:F6:E5:19:51:FA:BE:18
Certificate issuer:       /CN=68CDC22EA6F8672B5C14EF442F57E4FE8EF81744
Certificate serial:       5B0F6B9B1C48D3F00F8120B91D1C72217E4E99BC
Authority key identifier: 68:CD:C2:2E:A6:F8:67:2B:5C:14:EF:44:2F:57:E4:FE:8E:F8:17:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CDC22EA6F8672B5C14EF442F57E4FE8EF81744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/6/323830343a313635383a313031313a3a2f34382d3438203d3e20323633323833.roa
Signing time:             Thu 16 Jul 2026 03:02:53 +0000
ROA not before:           Thu 16 Jul 2026 02:57:53 +0000
ROA not after:            Thu 15 Jul 2027 03:02:53 +0000
asID:                     263283
IP address blocks:        2804:1658:1011::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0f:6b:9b:1c:48:d3:f0:0f:81:20:b9:1d:1c:72:21:7e:4e:99:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CDC22EA6F8672B5C14EF442F57E4FE8EF81744
        Validity
            Not Before: Jul 16 02:57:53 2026 GMT
            Not After : Jul 15 03:02:53 2027 GMT
        Subject: CN=21338217D03C67EB61E3E2AA5CF6E51951FABE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:47:a7:70:a0:b2:f4:7a:8f:2b:b4:4a:95:
                    00:23:9f:36:2b:75:83:69:63:5d:02:9b:3f:6f:0b:
                    6a:28:32:41:94:41:66:fe:6b:66:19:63:0c:34:ac:
                    41:51:e1:ec:28:d2:1e:53:94:6e:0a:6d:8c:d7:1d:
                    17:fb:f0:a6:3c:76:62:12:08:86:5d:6b:5e:d7:c2:
                    00:fb:c9:bd:94:8a:ac:08:11:79:5b:82:12:a8:89:
                    f1:36:37:9f:84:9f:f6:59:83:03:da:d5:0b:a0:0f:
                    d5:c7:25:1b:e1:77:57:44:a5:f7:e1:64:ee:d2:8e:
                    f7:75:e7:b3:35:34:b9:d2:81:27:57:c2:d3:e9:92:
                    dc:e4:29:f1:9d:67:2d:2a:bd:07:40:c6:90:a8:52:
                    3e:36:9a:89:72:e0:74:e0:fe:82:4f:52:d6:b0:b2:
                    45:e4:07:9a:85:3a:3a:e6:df:3b:c8:cf:b6:cf:f2:
                    ae:b9:53:94:e5:a0:2e:82:14:37:bf:0d:d4:88:aa:
                    82:1c:79:4f:4d:54:d1:9c:9b:70:79:e4:83:21:b5:
                    81:07:ca:11:b3:c0:42:fc:c8:99:2d:60:d0:4c:c3:
                    a1:bf:de:0a:71:07:66:1c:e2:67:b7:f8:50:94:5c:
                    50:a8:cd:1e:f6:c1:dc:e2:b2:a6:e1:09:ba:70:11:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:82:17:D0:3C:67:EB:61:E3:E2:AA:5C:F6:E5:19:51:FA:BE:18
            X509v3 Authority Key Identifier:
                keyid:68:CD:C2:2E:A6:F8:67:2B:5C:14:EF:44:2F:57:E4:FE:8E:F8:17:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/6/68CDC22EA6F8672B5C14EF442F57E4FE8EF81744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CDC22EA6F8672B5C14EF442F57E4FE8EF81744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoLAuCeB8qPAPzT2CHguWybU4TZAxjdgQAiX5rUj4Hha/6/323830343a313635383a313031313a3a2f34382d3438203d3e20323633323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1658:1011::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:3c:25:7b:82:cf:04:23:62:79:31:15:80:87:64:6b:cd:80:
         45:0c:ef:9d:c5:50:ff:95:11:1e:b6:2f:9a:20:e7:92:f4:7f:
         1f:39:19:5f:8f:2d:47:5d:97:eb:6a:da:59:c5:54:83:5a:c8:
         e6:a0:f2:21:34:7a:71:d2:34:4f:eb:f1:22:98:b9:4c:f3:e0:
         96:5e:95:b7:2a:bd:87:da:3a:fb:ba:83:77:59:22:dc:57:49:
         55:15:7e:f2:a6:73:a8:31:71:0c:36:dd:0c:9b:5c:3b:7d:4d:
         b1:3b:6b:fd:ff:b4:6b:62:e8:a1:4e:94:7c:a5:7f:ab:3b:41:
         2a:fc:cf:9f:83:70:cc:75:5a:4e:16:79:39:e6:33:1b:a6:e5:
         29:e5:72:57:7e:a5:4b:ee:ee:f9:a8:0a:b4:c4:77:a2:8c:c4:
         8d:90:28:9d:32:e7:ce:c2:c3:8e:ca:b0:9d:7b:07:11:13:7e:
         0f:c9:7c:06:9a:b2:5f:c0:1d:a5:b6:d7:8b:21:2e:2b:78:33:
         d3:64:91:8d:77:d7:5b:c1:2c:45:41:6b:1b:a6:8b:c7:b4:ad:
         54:f7:14:d3:6c:31:a7:25:dd:9d:40:c8:f6:5c:54:76:be:77:
         e5:50:64:aa:ab:a9:49:61:ef:af:e3:f8:9c:28:64:c9:df:9b:
         18:1b:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:55:30 2026 by rpki-client