Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
File:                     323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (raw, json)
Hash identifier:          OO3rdQ3t08oiaDYkiHCU5npWf2ewudW07if2ukXgOoY=
Subject key identifier:   E6:78:18:10:1B:2B:24:8B:95:FC:AD:D9:C5:FF:D1:79:02:36:1D:33
Certificate issuer:       /CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
Certificate serial:       519DB0819189B0B3C83FD5893E35DDC8BD23F70E
Authority key identifier: 87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa
Signing time:             Tue 24 Mar 2026 20:22:42 +0000
ROA not before:           Tue 24 Mar 2026 20:17:42 +0000
ROA not after:            Tue 23 Mar 2027 20:22:42 +0000
asID:                     270588
IP address blocks:        2804:6e50::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:b0:81:91:89:b0:b3:c8:3f:d5:89:3e:35:dd:c8:bd:23:f7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D07CAAFE73106D66C0E11F789B0243A67141F9
        Validity
            Not Before: Mar 24 20:17:42 2026 GMT
            Not After : Mar 23 20:22:42 2027 GMT
        Subject: CN=E67818101B2B248B95FCADD9C5FFD17902361D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:99:9c:4a:08:f3:94:02:f0:5b:d5:f1:83:
                    fe:71:81:c8:95:f1:22:20:45:36:42:1f:52:27:04:
                    01:0b:95:cf:37:5c:e4:05:2e:2c:09:78:39:de:d3:
                    61:ce:93:4c:e7:7a:82:cd:53:3b:95:6d:92:41:a6:
                    4e:38:57:f9:8e:7a:68:d1:7e:58:09:7c:c3:47:34:
                    6b:9f:0a:75:0b:10:80:0a:49:fc:7b:b8:9a:6a:56:
                    d0:6a:10:b5:33:47:57:5e:62:ea:fb:df:e2:1f:18:
                    f7:f0:ac:75:b2:c9:86:19:13:43:4f:06:0d:f6:dc:
                    e7:a2:db:79:c2:05:e9:86:a7:8f:4d:aa:60:9e:33:
                    d1:b4:51:dc:05:c0:83:69:37:db:af:6c:e3:17:b0:
                    d1:2c:c8:6d:28:89:09:d8:20:98:46:54:14:5e:14:
                    89:69:47:f8:15:50:e2:7a:7f:a2:cb:94:27:40:07:
                    ef:9a:be:f9:4d:65:c4:e7:45:35:85:78:e5:ec:7e:
                    8b:f9:3c:be:52:17:72:a3:3c:19:fb:d8:7d:7a:4d:
                    12:b5:18:18:42:32:f1:92:bc:60:1b:22:d9:54:e6:
                    20:ca:48:ac:b2:84:c0:4d:4e:4e:c1:fb:6a:80:3d:
                    1d:34:61:5d:0b:e0:b1:0b:c6:dd:d3:57:5d:e7:15:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:78:18:10:1B:2B:24:8B:95:FC:AD:D9:C5:FF:D1:79:02:36:1D:33
            X509v3 Authority Key Identifier:
                keyid:87:D0:7C:AA:FE:73:10:6D:66:C0:E1:1F:78:9B:02:43:A6:71:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/87D07CAAFE73106D66C0E11F789B0243A67141F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87D07CAAFE73106D66C0E11F789B0243A67141F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/0/323830343a366535303a3a2f33322d313238203d3e20323730353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:70:da:aa:78:85:28:04:dd:9f:52:ab:3d:3d:02:d9:cd:74:
         27:e8:7e:2f:73:83:6e:96:3c:71:9a:b8:b1:94:43:4d:45:d5:
         69:10:fa:39:c5:32:39:28:5d:1c:bb:75:b6:d5:7a:ba:ed:ea:
         98:bc:40:e6:68:05:c3:bc:2a:54:a7:d0:4f:34:c4:48:42:d7:
         31:f1:4b:d3:7d:d5:34:25:6e:ab:2a:27:87:28:e5:df:05:0f:
         62:7a:fc:9a:c4:8c:1d:50:9c:8d:6a:c7:07:2f:46:fa:2d:9c:
         17:e9:07:65:27:d5:86:36:35:36:69:57:68:39:6e:86:6c:6b:
         17:16:7d:69:99:60:e1:31:f0:eb:f3:12:69:64:71:55:69:63:
         39:69:b6:85:56:05:e5:5a:5c:47:1f:47:fa:76:82:7e:bf:4c:
         cc:4e:67:0b:0c:ad:db:0c:d0:48:d7:ac:0a:a5:09:90:9a:83:
         d3:21:b6:04:7c:af:55:6e:41:23:6a:a0:24:43:67:00:0b:62:
         ab:2d:89:85:89:33:3d:54:11:53:94:db:fb:64:a2:40:25:e9:
         d9:3a:54:86:87:f9:46:ca:73:ca:26:f3:bf:88:ee:9c:29:d8:
         78:97:0f:dc:82:b3:da:b4:d8:49:f5:5d:fd:11:22:13:5b:61:
         c5:bc:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:54:48 2026 by rpki-client