Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a3a2f33322d3333203d3e203532353536.roa
File:                     323830343a323934633a3a2f33322d3333203d3e203532353536.roa (raw, json)
Hash identifier:          9F/GjbCK47h/jcqqQRdI/ifRq6skXHUzm/YEfMIL7kE=
Subject key identifier:   80:B7:0E:A7:98:7C:3A:C3:BC:37:56:76:42:21:F9:C0:D0:F7:61:81
Certificate issuer:       /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial:       1743544BC9B8568E1BF1B4C59EEDA58C93E41A69
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a3a2f33322d3333203d3e203532353536.roa
Signing time:             Thu 14 May 2026 21:03:01 +0000
ROA not before:           Thu 14 May 2026 20:58:01 +0000
ROA not after:            Thu 13 May 2027 21:03:01 +0000
asID:                     52556
IP address blocks:        2804:294c::/32 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:43:54:4b:c9:b8:56:8e:1b:f1:b4:c5:9e:ed:a5:8c:93:e4:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
        Validity
            Not Before: May 14 20:58:01 2026 GMT
            Not After : May 13 21:03:01 2027 GMT
        Subject: CN=80B70EA7987C3AC3BC3756764221F9C0D0F76181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:d5:ad:22:1f:db:be:68:8e:02:d0:0b:4b:
                    65:a2:a9:aa:76:9c:ce:61:c9:f9:d3:6f:67:e4:96:
                    58:d3:df:c8:c3:e0:c3:ef:83:ec:1d:4d:03:cd:e5:
                    11:38:dd:2a:cc:73:99:9c:43:11:17:6c:c3:60:94:
                    19:b9:f5:bd:1a:77:6a:97:34:a6:bd:f7:ca:de:f3:
                    8e:62:78:bd:3d:6a:2a:f3:96:ce:76:6c:ce:20:eb:
                    80:dc:2f:9f:f8:17:0d:66:8c:55:50:be:d7:5f:62:
                    f5:1c:61:44:78:40:73:42:b2:3f:84:57:60:d1:3c:
                    16:9e:62:bc:db:37:4b:0d:14:59:b3:f1:d0:eb:cb:
                    43:aa:8a:3d:96:82:4b:df:e6:c4:10:7b:b7:f5:60:
                    98:d0:41:89:e1:d4:82:bf:c5:7c:8c:7b:66:4b:1e:
                    ff:21:7a:ac:f7:56:85:c2:ad:a7:eb:68:ac:48:54:
                    dc:f2:16:11:9e:72:22:e2:f2:e2:54:9f:b0:f1:2e:
                    9f:16:88:9b:19:56:d2:24:46:a3:31:93:1d:eb:fd:
                    36:91:fd:56:9e:1f:fc:28:28:7c:27:97:c8:2c:79:
                    79:36:61:b1:a0:5b:e1:8c:f7:6a:3e:83:df:da:3d:
                    f2:ac:7b:ad:4d:34:2d:34:4d:45:c2:ad:26:ac:4a:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B7:0E:A7:98:7C:3A:C3:BC:37:56:76:42:21:F9:C0:D0:F7:61:81
            X509v3 Authority Key Identifier:
                keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/323830343a323934633a3a2f33322d3333203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:294c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:80:5a:7e:63:ea:e6:24:ca:b2:d0:cd:20:ca:18:60:b2:
         38:51:05:3a:64:6f:43:89:11:d1:53:7b:43:41:4f:17:8d:20:
         4f:48:43:9e:50:12:9d:d8:94:0c:bd:fe:a4:fa:99:69:1e:e8:
         6b:8a:de:39:a6:93:ef:48:cb:f6:dc:25:4f:87:d0:25:fe:26:
         8e:65:2b:77:61:1d:b9:0c:61:42:77:91:25:49:95:b8:d8:cc:
         af:e8:38:85:19:3b:7b:18:b1:99:ee:87:a8:ff:60:ad:0b:4c:
         86:f6:f6:6e:c7:e6:8a:cb:a9:f7:00:5f:1c:bf:35:4c:62:cc:
         83:d1:e0:d3:c2:55:6d:5b:01:3a:a9:2f:38:24:01:12:14:18:
         3a:29:05:43:11:31:03:8a:3d:62:f0:c4:3f:2f:b8:64:c6:46:
         67:0c:ac:c8:bc:25:fd:af:35:c9:d3:03:56:08:ff:c2:76:c6:
         de:20:df:a9:a2:a0:c2:db:1e:39:2a:76:f6:a2:23:2c:aa:1d:
         2e:96:96:c9:7b:65:3c:a0:69:d5:a6:23:86:f7:e5:62:99:4c:
         cd:88:d2:1d:e6:81:e5:77:f0:c9:07:a9:e7:aa:6a:b1:d3:0a:
         3f:79:60:2b:9f:6e:bf:7b:71:7f:b7:20:4e:3e:61:d6:05:30:
         9a:5d:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:21:59 2026 by rpki-client