Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33322d3438203d3e20323638383438.roa (raw, json)
Hash identifier:          9zNVz+lUlpbm7Wd74jPePi5xqnGJf4EJEjSEvZE8y/Y=
Subject key identifier:   D0:4B:41:AF:C4:14:D6:C8:0A:AA:CC:DF:97:75:38:08:CE:0E:FC:77
Certificate issuer:       /CN=75A5078D41E4C1C7E37424F8948507D935297BBD
Certificate serial:       2A0DFFF9C537DE7D65530BDF76424EEAA4CE8430
Authority key identifier: 75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
Signing time:             Mon 28 Oct 2024 16:14:08 +0000
ROA not before:           Mon 28 Oct 2024 16:09:08 +0000
ROA not after:            Mon 27 Oct 2025 16:14:08 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:ff:f9:c5:37:de:7d:65:53:0b:df:76:42:4e:ea:a4:ce:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A5078D41E4C1C7E37424F8948507D935297BBD
        Validity
            Not Before: Oct 28 16:09:08 2024 GMT
            Not After : Oct 27 16:14:08 2025 GMT
        Subject: CN=D04B41AFC414D6C80AAACCDF97753808CE0EFC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:cc:ca:06:ef:af:92:39:a9:d6:20:ba:5f:
                    4d:b0:ca:3f:90:0a:90:ef:3d:11:6f:ca:97:dc:40:
                    eb:50:cc:64:0c:45:46:f0:78:02:0f:63:27:5e:9f:
                    d6:3c:ca:7c:fe:88:0a:8f:1f:d3:6a:49:cc:8c:a1:
                    51:94:52:c4:89:b0:77:cb:a7:40:31:94:97:7f:8a:
                    6e:bb:2b:98:0f:a1:dc:9d:21:5a:2a:5e:e9:74:a0:
                    66:5f:4d:dc:6d:40:c5:8d:97:3b:8c:f7:bc:9e:b4:
                    0c:74:09:7f:f6:a4:2b:2d:d7:99:ee:24:49:49:6e:
                    7f:63:e2:e1:34:60:12:b6:69:82:a9:5b:23:8b:3c:
                    22:82:ce:12:80:b9:13:3b:0a:05:da:2c:f5:9d:e8:
                    d6:59:59:21:ae:7f:25:ae:e4:7f:74:06:e5:bf:0f:
                    a8:61:7a:6e:f0:7d:e3:fb:8b:cd:be:a9:7a:7e:3f:
                    ca:b6:00:c1:de:e5:ee:dd:6d:d5:33:e2:f0:e5:92:
                    4b:04:cb:d8:15:af:48:aa:76:88:e0:99:52:d9:06:
                    70:e6:c1:cc:a6:8d:8c:e9:db:52:f5:8d:79:93:74:
                    d4:86:1f:74:10:77:67:24:85:47:65:2c:c6:23:7d:
                    dd:1f:b9:8f:02:0f:6c:61:d6:71:2b:c1:92:09:81:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4B:41:AF:C4:14:D6:C8:0A:AA:CC:DF:97:75:38:08:CE:0E:FC:77
            X509v3 Authority Key Identifier:
                keyid:75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:e4:27:3d:1f:7f:dc:57:00:00:3f:b2:4d:48:db:bc:b6:
         59:12:3b:d9:1d:54:7d:92:a5:0e:11:df:41:79:a1:2b:26:21:
         1b:1b:12:cd:02:80:48:f3:97:61:c3:51:71:a4:ed:51:50:91:
         5c:3e:71:1e:61:5f:7d:0b:e0:d9:e7:4e:aa:fa:41:70:2c:22:
         0d:64:36:56:b5:7d:8b:68:aa:d8:40:18:4c:b6:d0:ae:01:ed:
         a5:96:d1:ce:f7:9f:f3:89:22:8c:42:2b:65:77:c4:95:b4:10:
         c6:e7:e7:27:a5:e3:25:ee:03:71:fa:f8:41:ab:aa:26:2c:0d:
         83:e3:27:59:ae:9e:28:d0:81:0e:bc:02:b8:62:52:4d:e3:9f:
         bf:53:73:2f:30:a0:9f:87:1b:dc:a6:0f:fe:02:a9:64:d8:a8:
         00:84:ee:66:68:11:17:7b:18:d9:72:4e:1d:8d:98:76:08:24:
         47:5b:a8:5e:22:ec:f1:e3:ca:be:1a:52:07:94:1d:da:7c:9d:
         1c:07:20:8b:f5:e0:19:52:c6:a1:61:8b:ee:d0:da:ac:41:7d:
         ff:33:23:9d:c6:ae:cd:d1:e5:51:66:52:a3:cf:96:02:8c:d3:
         14:e1:05:f7:7c:7c:75:e7:47:7c:d2:a7:2b:31:56:26:c5:24:
         6f:48:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:45 2025 by rpki-client