Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa
File:                     323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa (raw, json)
Hash identifier:          ZywBqZp1td2VQqdSXRF7q65UU6Q7U45nWTb7P05PrMU=
Subject key identifier:   E9:DF:1E:6C:18:E5:47:68:77:4C:5F:79:0D:30:82:4C:C6:1E:25:66
Certificate issuer:       /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial:       2512EBF033FAA94AB581B6E1143F28847EFCEEDD
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa
Signing time:             Wed 18 Mar 2026 16:45:39 +0000
ROA not before:           Wed 18 Mar 2026 16:40:39 +0000
ROA not after:            Wed 17 Mar 2027 16:45:39 +0000
asID:                     263866
IP address blocks:        2804:26f4:300::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:12:eb:f0:33:fa:a9:4a:b5:81:b6:e1:14:3f:28:84:7e:fc:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
        Validity
            Not Before: Mar 18 16:40:39 2026 GMT
            Not After : Mar 17 16:45:39 2027 GMT
        Subject: CN=E9DF1E6C18E54768774C5F790D30824CC61E2566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:e9:70:3a:2d:e2:87:0f:3f:fd:f2:d9:5f:
                    51:ea:b8:35:99:b9:0b:af:b8:b6:c0:9f:25:fe:dd:
                    f4:a9:6e:c2:1c:4d:bf:e6:56:a9:c3:08:02:16:74:
                    25:38:83:d1:df:9c:55:92:ec:de:97:97:08:07:5e:
                    91:48:3d:a5:ce:7a:a9:b0:02:3d:0c:e9:6c:02:00:
                    f0:dc:a0:60:f5:51:bc:02:bd:ba:f5:df:df:a7:0e:
                    e3:a4:a1:e4:78:a1:76:ec:6c:90:c1:58:90:61:16:
                    5b:49:c8:b4:1d:af:ef:58:6d:68:f6:9b:ca:8b:ec:
                    e7:11:3a:f6:3c:47:39:8b:6e:c4:2b:18:40:d2:65:
                    51:46:26:27:0e:dd:c5:e3:17:cd:1d:cd:3e:e3:3d:
                    a9:aa:f8:2d:9f:00:f2:c3:46:8f:f7:02:63:d0:ce:
                    dd:71:e8:bc:99:f5:2d:09:2a:2a:29:b9:5e:35:c7:
                    ca:8a:ad:1b:d9:8b:71:eb:dc:c5:2d:ad:9e:41:ca:
                    09:11:4c:e5:d7:48:3f:bc:45:79:8e:27:94:5f:a0:
                    13:0f:c9:7a:6a:4b:20:c4:2b:ec:27:e4:0a:fc:bb:
                    ba:dd:e9:f1:67:5a:38:bd:63:75:79:d0:57:64:0c:
                    47:a6:56:f6:df:26:81:44:65:0b:64:c4:b6:f7:c5:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:1E:6C:18:E5:47:68:77:4C:5F:79:0D:30:82:4C:C6:1E:25:66
            X509v3 Authority Key Identifier:
                keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:5e:a5:64:a5:4d:bd:3b:de:7b:66:b9:57:32:aa:ee:02:
         d8:50:09:5d:9c:0a:02:7f:33:38:12:1a:a7:ba:a7:06:9a:71:
         e9:a9:e4:13:75:37:6d:52:9f:89:69:87:8f:9d:df:c9:76:7d:
         51:93:bb:12:e4:e5:ee:e3:b8:be:fc:3d:c2:d3:eb:e1:2b:66:
         b6:9b:f4:ef:ab:ae:70:5d:32:af:0c:16:c5:ad:cc:14:f4:9a:
         e0:b0:66:6f:86:9f:93:05:8c:9b:d2:6d:c1:ce:5f:7c:5d:2a:
         bc:ba:b4:7b:a9:6e:a0:aa:05:14:33:bb:5c:74:ee:01:07:ab:
         10:8a:ba:5f:54:be:de:ab:fa:5e:01:f9:53:c5:8c:ea:3f:b9:
         ef:35:f0:4e:41:7f:12:68:bf:39:b8:4b:b7:ae:a9:a5:3a:b7:
         9b:b1:d1:16:9d:25:4a:9a:17:30:3a:91:9e:2a:05:73:bf:9c:
         3d:bc:e8:81:ce:a3:14:b6:48:ad:bd:b6:fc:a8:2d:1b:4b:b2:
         56:f4:1b:d7:74:4b:5e:69:57:74:c4:7d:41:1c:7a:1e:87:8b:
         51:3d:5c:29:85:f9:4b:33:ed:b3:2f:97:f9:a7:c1:b3:22:d1:
         7c:ad:36:c7:f1:00:28:7e:08:c0:f0:5e:a4:5f:25:89:88:b5:
         c1:ee:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:24 2026 by rpki-client