Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d3430203d3e20323639313530.roa
File:                     323830343a363032633a3a2f33322d3430203d3e20323639313530.roa (raw, json)
Hash identifier:          O17pr58WWqOm+ft4YCWke8juZk5NwPZFxysEOqvuccI=
Subject key identifier:   AD:57:65:1C:98:2F:FE:D0:D0:1E:F2:B5:E3:52:67:4F:BB:B4:4F:35
Certificate issuer:       /CN=BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2
Certificate serial:       30E8DF55923CC573BDA89AD89347AEA9FE8C594C
Authority key identifier: BC:4C:7A:AB:61:69:4F:67:13:F5:EE:7C:9F:81:E1:4C:7A:24:C7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d3430203d3e20323639313530.roa
Signing time:             Tue 02 Jun 2026 00:57:10 +0000
ROA not before:           Tue 02 Jun 2026 00:52:10 +0000
ROA not after:            Tue 01 Jun 2027 00:57:10 +0000
asID:                     269150
IP address blocks:        2804:602c::/32 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e8:df:55:92:3c:c5:73:bd:a8:9a:d8:93:47:ae:a9:fe:8c:59:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2
        Validity
            Not Before: Jun  2 00:52:10 2026 GMT
            Not After : Jun  1 00:57:10 2027 GMT
        Subject: CN=AD57651C982FFED0D01EF2B5E352674FBBB44F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:f8:b6:7d:fb:88:aa:14:e1:b6:01:00:1d:
                    a4:bc:38:8b:c6:3e:c1:dc:a9:5b:3f:0c:07:6e:84:
                    43:f4:be:07:00:19:70:48:c3:41:8f:41:8d:7b:02:
                    72:58:b9:3a:74:1e:a6:3c:03:ce:ed:0c:0c:12:d2:
                    8f:86:9e:ec:22:3b:fc:93:bc:5e:84:24:38:e6:b9:
                    e2:7d:47:48:e6:a4:58:f0:dc:7e:fc:4b:9d:b9:ea:
                    c5:b8:a9:b1:d2:4b:82:7f:eb:51:c8:d2:0f:1f:f2:
                    a2:05:1a:26:1d:e5:58:b7:38:28:49:cc:2d:53:a4:
                    3b:32:72:84:f4:5b:d5:17:d6:ad:6e:94:90:ad:e2:
                    5c:2d:3c:c0:5f:00:26:fd:15:f7:85:a1:19:25:57:
                    36:58:0d:23:5c:dd:5d:47:cf:16:9c:9f:f2:2a:e0:
                    b7:88:7d:9f:f9:e9:4b:9e:47:8c:25:fc:31:6a:a3:
                    31:fe:20:c1:b3:fe:a8:bf:c5:7e:dc:d0:bb:63:a3:
                    4e:09:da:23:90:23:39:57:62:ba:18:f1:d6:63:d2:
                    f8:3c:08:7c:04:15:b0:07:83:3d:09:d5:36:c4:d0:
                    e0:d2:67:b0:5d:29:b2:60:1d:ce:c4:48:36:1d:72:
                    21:31:05:eb:e8:7e:2e:09:fd:c0:0d:72:23:b5:af:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:57:65:1C:98:2F:FE:D0:D0:1E:F2:B5:E3:52:67:4F:BB:B4:4F:35
            X509v3 Authority Key Identifier:
                keyid:BC:4C:7A:AB:61:69:4F:67:13:F5:EE:7C:9F:81:E1:4C:7A:24:C7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC4C7AAB61694F6713F5EE7C9F81E14C7A24C7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/0/323830343a363032633a3a2f33322d3430203d3e20323639313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:602c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:d3:07:be:61:17:1b:28:01:33:e0:c7:d1:1f:60:81:20:
         9c:29:d1:0e:61:a8:ea:71:4a:35:35:37:fd:59:9e:ad:16:d7:
         eb:a9:d7:f6:ba:1e:1d:28:ef:59:fc:65:2e:e2:fa:58:99:12:
         31:79:0d:a6:a5:39:76:d0:bb:a0:01:59:8a:b1:62:26:4e:08:
         a0:f9:9f:00:04:de:6a:2f:77:47:38:94:6d:cf:6d:02:a9:60:
         46:d3:9e:7c:23:ff:be:4e:0a:9d:b6:68:13:ba:81:d8:aa:c4:
         95:02:87:40:65:a9:90:44:b7:12:a9:78:44:54:81:37:d5:71:
         ca:bc:45:ea:14:f5:27:39:45:fc:06:fd:f9:9f:21:e4:44:cb:
         ff:9b:51:37:10:ca:0a:e6:0a:11:d6:69:a3:a4:75:5b:a5:d7:
         f1:57:21:6b:19:4f:eb:04:7b:0f:32:9c:27:f0:0a:5b:e3:f8:
         17:2e:72:a1:38:ec:4c:d8:22:65:de:13:57:d0:17:35:5e:9c:
         e0:8c:8a:a5:6f:0c:6b:ff:cc:f6:8d:02:5e:03:d9:ef:40:6f:
         12:d9:a4:f9:23:9b:46:8c:31:b4:8b:1d:11:c5:3b:46:e7:06:
         bd:5d:2a:2b:c3:69:c4:5d:47:df:07:74:b7:0f:50:b0:e9:3e:
         97:d2:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:16 2026 by rpki-client