Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
File:                     323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa (raw, json)
Hash identifier:          aFHTbWkB1GjeOyYCrLMDd8hxxj/zE6t3uxiCkb5d7so=
Subject key identifier:   0D:3A:F7:91:E8:4F:DA:AF:88:59:E8:AE:B1:BA:DA:E3:0B:4A:F1:D7
Certificate issuer:       /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial:       027FE804974FE85D8BFD90F4034B480A8BBD5A85
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa
Signing time:             Mon 22 Sep 2025 13:51:24 +0000
ROA not before:           Mon 22 Sep 2025 13:46:24 +0000
ROA not after:            Mon 21 Sep 2026 13:51:24 +0000
asID:                     211087
IP address blocks:        2804:77cc:ffff::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7f:e8:04:97:4f:e8:5d:8b:fd:90:f4:03:4b:48:0a:8b:bd:5a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
        Validity
            Not Before: Sep 22 13:46:24 2025 GMT
            Not After : Sep 21 13:51:24 2026 GMT
        Subject: CN=0D3AF791E84FDAAF8859E8AEB1BADAE30B4AF1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:87:ad:8f:96:2f:c6:13:44:7e:ee:03:92:
                    f0:f5:26:96:b7:7e:3f:b1:a3:21:31:82:04:3a:bf:
                    ca:7a:eb:3a:da:e0:30:c7:5b:79:d8:27:99:4c:a1:
                    08:72:8c:23:ab:a5:ac:de:6b:47:75:18:92:9b:8a:
                    67:81:8c:c6:07:a0:4d:0d:fe:7f:cd:9b:ff:15:e3:
                    7f:8a:b1:e7:65:f0:c4:4e:62:ce:05:f1:ca:e0:6b:
                    c7:12:b6:05:ba:ad:87:ab:0c:b8:14:c4:66:06:9f:
                    64:e0:e3:9c:f7:5a:6e:07:15:ff:98:e5:be:a5:60:
                    eb:ed:a8:c8:4c:df:87:74:29:31:2e:f0:3b:b7:2b:
                    6f:f6:4d:32:39:3b:aa:ed:ec:e3:b8:91:95:98:3d:
                    8a:74:4d:c7:87:ca:25:f7:e6:37:9b:1c:96:80:2f:
                    bd:3a:d1:6e:42:66:f9:dc:6a:85:8d:0f:af:ae:0d:
                    bb:a2:db:b3:f2:43:99:73:bf:b6:aa:13:ce:00:f9:
                    4f:1a:da:3a:3e:18:57:bb:78:c5:d3:bb:78:7c:e1:
                    42:3f:6d:e5:be:f1:49:42:ee:d5:0e:03:dd:71:63:
                    73:17:ff:69:bd:76:74:e8:10:75:06:02:96:9b:13:
                    78:4c:ac:db:e5:4b:92:9c:f4:ae:23:43:00:9f:ad:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:F7:91:E8:4F:DA:AF:88:59:E8:AE:B1:BA:DA:E3:0B:4A:F1:D7
            X509v3 Authority Key Identifier:
                keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a666666663a3a2f34382d3438203d3e20323131303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77cc:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:f5:55:e6:e1:4c:b3:37:d7:8a:01:ff:2b:c5:bb:de:09:
         2e:b9:01:16:b4:84:19:a9:39:65:df:4a:41:65:23:5e:6f:7b:
         4e:b7:30:bc:89:ee:bd:f7:03:8a:b8:94:63:b9:09:91:ad:27:
         be:5f:e5:b5:ee:1b:52:18:1b:47:4d:8f:ae:e9:a2:d4:50:25:
         ae:4c:79:e2:a5:78:45:cd:74:25:ec:d6:fa:77:f0:72:1c:3c:
         50:d5:a1:29:d0:99:c2:09:a6:6c:cc:a7:51:22:5f:1a:71:13:
         db:bd:62:c1:8c:31:16:ba:9a:6f:d4:84:4e:ff:68:ea:17:ed:
         4d:66:87:97:80:d7:b1:01:d9:89:03:14:45:de:aa:e2:19:6d:
         dc:c7:f1:b2:95:91:ec:69:e1:44:86:e0:e6:5a:6b:66:04:5f:
         64:dc:10:a0:6f:d5:3b:12:ab:07:e5:e0:6e:94:64:8a:90:c3:
         d6:40:e0:79:52:b0:99:b7:f3:31:9b:06:e3:dd:49:1f:d8:39:
         52:30:7a:37:4a:df:89:1a:65:8e:1f:14:9b:34:07:e2:eb:2d:
         cb:26:6d:8b:56:c6:fd:7a:79:9a:ce:90:bc:f2:d3:9f:da:26:
         17:b3:56:01:f6:a8:93:d9:06:4c:10:e5:8e:13:09:b2:55:bd:
         9d:f7:ff:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUAn/oBJdP6F2L/ZD0A0tICou9WoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUyRTFGRDNCMzREMkQ5NEM4Mzk4MDUyOEI2MEIxMURG
Qjg1NEI1NzAeFw0yNTA5MjIxMzQ2MjRaFw0yNjA5MjExMzUxMjRaMDMxMTAvBgNV
BAMTKDBEM0FGNzkxRTg0RkRBQUY4ODU5RThBRUIxQkFEQUUzMEI0QUYxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXW4etj5YvxhNEfu4DkvD1Jpa3
fj+xoyExggQ6v8p66zra4DDHW3nYJ5lMoQhyjCOrpazea0d1GJKbimeBjMYHoE0N
/n/Nm/8V43+Ksedl8MROYs4F8crga8cStgW6rYerDLgUxGYGn2Tg45z3Wm4HFf+Y
5b6lYOvtqMhM34d0KTEu8Du3K2/2TTI5O6rt7OO4kZWYPYp0TceHyiX35jebHJaA
L7060W5CZvncaoWND6+uDbui27PyQ5lzv7aqE84A+U8a2jo+GFe7eMXTu3h84UI/
beW+8UlC7tUOA91xY3MX/2m9dnToEHUGApabE3hMrNvlS5Kc9K4jQwCfrQt9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDTr3kehP2q+IWeiusbra4wtK8dcwHwYDVR0j
BBgwFoAUBS4f07NNLZTIOYBSi2CxHfuFS1cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YQXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5V
LzAvMDUyRTFGRDNCMzREMkQ5NEM4Mzk4MDUyOEI2MEIxMURGQjg1NEI1Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wNTJFMUZEM0IzNEQyRDk0Qzgz
OTgwNTI4QjYwQjExREZCODU0QjU3LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
QXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5VLzAvMzIz
ODMwMzQzYTM3Mzc2MzYzM2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMyMzEzMTMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEd8z//zANBgkqhkiG9w0BAQsFAAOC
AQEAe2v1VebhTLM314oB/yvFu94JLrkBFrSEGak5Zd9KQWUjXm97TrcwvInuvfcD
iriUY7kJka0nvl/lte4bUhgbR02Prumi1FAlrkx54qV4Rc10JezW+nfwchw8UNWh
KdCZwgmmbMynUSJfGnET271iwYwxFrqab9SETv9o6hftTWaHl4DXsQHZiQMURd6q
4hlt3MfxspWR7GnhRIbg5lprZgRfZNwQoG/VOxKrB+XgbpRkipDD1kDgeVKwmbfz
MZsG491JH9g5UjB6N0rfiRpljh8UmzQH4ustyyZti1bG/Xp5ms6QvPLTn9omF7NW
Afaok9kGTBDljhMJslW9nff/fw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:01:50 2025 by rpki-client