Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (raw, json)
Hash identifier:          XPpEbopqHsQSqbwCfdW8TmiJxnOeyrwLhpofYIav3Lo=
Subject key identifier:   C4:96:00:7A:A7:0A:21:10:AC:E8:2B:6B:14:AB:9C:B9:50:CF:B2:1E
Certificate issuer:       /CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8
Certificate serial:       613576CC30F36130A7F30341C6F3B88E5885FA80
Authority key identifier: D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
Signing time:             Thu 30 Jul 2026 20:18:07 +0000
ROA not before:           Thu 30 Jul 2026 20:13:07 +0000
ROA not after:            Thu 29 Jul 2027 20:18:07 +0000
asID:                     273713
IP address blocks:        2804:8b20::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:35:76:cc:30:f3:61:30:a7:f3:03:41:c6:f3:b8:8e:58:85:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8
        Validity
            Not Before: Jul 30 20:13:07 2026 GMT
            Not After : Jul 29 20:18:07 2027 GMT
        Subject: CN=C496007AA70A2110ACE82B6B14AB9CB950CFB21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:51:ee:c4:dd:29:7d:d7:83:bb:ec:6a:6a:
                    be:9e:63:8e:2d:ca:0f:55:0f:91:c0:f0:4e:2b:07:
                    7f:bd:4c:13:73:26:0d:e6:e2:8f:80:31:86:71:be:
                    58:c6:84:e7:07:bd:4a:d1:12:b3:16:e6:d4:2a:b2:
                    b2:e3:80:8c:de:07:01:1d:a7:2c:bf:4b:f5:d7:8c:
                    af:af:bf:e4:be:af:f8:9e:ef:0f:47:af:d7:1e:da:
                    07:3a:94:60:90:13:9b:11:57:5f:dd:05:f8:a5:52:
                    72:c2:ba:ba:31:6f:14:a2:3f:bd:c8:f9:4d:d5:cc:
                    d2:05:0f:42:5b:70:5c:3b:4f:47:5f:f3:8a:e4:7f:
                    56:08:ee:fe:9c:9a:8d:05:0d:8a:ff:c3:f1:5a:ec:
                    65:12:40:86:10:27:0c:e5:84:94:83:a1:56:6a:c4:
                    da:63:98:8f:a8:06:0b:38:f8:ec:f6:31:43:fa:d2:
                    a8:a8:3a:59:28:1e:77:c6:ab:c0:a3:da:a2:88:2f:
                    e2:48:bd:a7:4d:8d:99:f6:8d:de:ad:72:5e:ac:fb:
                    1f:cd:fd:cf:5b:ee:5d:8b:6b:2b:d7:cd:77:37:ce:
                    69:63:ec:c6:9f:bd:1f:07:20:13:ce:2a:5a:a9:2f:
                    3f:09:92:48:ac:96:70:c5:66:1f:cb:e0:71:dc:53:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:00:7A:A7:0A:21:10:AC:E8:2B:6B:14:AB:9C:B9:50:CF:B2:1E
            X509v3 Authority Key Identifier:
                keyid:D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/33

    Signature Algorithm: sha256WithRSAEncryption
         bb:38:51:f5:7a:06:74:fb:25:7e:68:90:e7:b3:75:6b:fc:57:
         39:47:07:48:10:d1:dc:c0:0b:77:f0:18:b4:93:11:c9:dd:ce:
         6b:ac:e3:6b:02:95:d5:75:54:33:f8:bd:41:9b:b5:b5:3e:13:
         0d:95:d6:3f:a0:ca:03:a1:b1:5d:32:e9:e6:86:96:37:7e:d6:
         d0:86:b6:11:db:17:45:65:a1:87:17:77:d8:4b:d0:d9:2d:fa:
         d6:e5:5b:fb:28:c0:40:9e:ce:f4:c9:b9:fc:07:48:3a:41:27:
         d4:0c:0d:3c:97:3d:00:56:f5:3f:6b:e3:68:a3:7a:a3:a6:5d:
         54:20:02:3f:94:f7:5d:15:f6:1d:6e:cf:f9:88:69:ec:56:b1:
         ee:6c:ee:ff:0d:c5:97:72:be:d0:71:27:ca:b2:cb:0c:35:c8:
         a6:63:f3:b1:45:dd:7c:5c:a4:c6:d0:c0:ea:67:87:c1:5a:63:
         72:58:0b:47:62:cd:98:9f:8b:a2:fd:b9:9d:1b:0f:7d:cf:be:
         48:d7:49:55:9f:8d:25:f8:0a:93:8f:af:70:69:1d:67:9c:d4:
         ac:03:af:96:76:b0:f0:ac:c5:1b:d1:32:4b:97:d1:ca:da:6b:
         1e:8f:04:1a:e2:7d:41:63:12:36:15:c8:e3:82:72:63:cf:b5:
         60:75:b5:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYTV2zDDzYTCn8wNBxvO4jliF+oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ2QzJCRTMyQzZFRTM1RDI1NTM1NURBNUFERjI1Nzk4
MkU0ODZGODAeFw0yNjA3MzAyMDEzMDdaFw0yNzA3MjkyMDE4MDdaMDMxMTAvBgNV
BAMTKEM0OTYwMDdBQTcwQTIxMTBBQ0U4MkI2QjE0QUI5Q0I5NTBDRkIyMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU1HuxN0pfdeDu+xqar6eY44t
yg9VD5HA8E4rB3+9TBNzJg3m4o+AMYZxvljGhOcHvUrRErMW5tQqsrLjgIzeBwEd
pyy/S/XXjK+vv+S+r/ie7w9Hr9ce2gc6lGCQE5sRV1/dBfilUnLCuroxbxSiP73I
+U3VzNIFD0JbcFw7T0df84rkf1YI7v6cmo0FDYr/w/Fa7GUSQIYQJwzlhJSDoVZq
xNpjmI+oBgs4+Oz2MUP60qioOlkoHnfGq8Cj2qKIL+JIvadNjZn2jd6tcl6s+x/N
/c9b7l2LayvXzXc3zmlj7MafvR8HIBPOKlqpLz8JkkislnDFZh/L4HHcU3SXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxJYAeqcKIRCs6CtrFKucuVDPsh4wHwYDVR0j
BBgwFoAU1Gwr4yxu410lU1XaWt8leYLkhvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1
NlovMC9ENDZDMkJFMzJDNkVFMzVEMjU1MzU1REE1QURGMjU3OTgyRTQ4NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NkMyQkUzMkM2RUUzNUQy
NTUzNTVEQTVBREYyNTc5ODJFNDg2RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRjbVRTMUhjdVlSQmNkdmlKYng3WWFEckRxREE4VUFQRmp3UEs1RnVVdTZaLzAv
MzIzODMwMzQzYTM4NjIzMjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASLIAAwDQYJKoZIhvcNAQELBQADggEBALs4UfV6
BnT7JX5okOezdWv8VzlHB0gQ0dzAC3fwGLSTEcndzmus42sCldV1VDP4vUGbtbU+
Ew2V1j+gygOhsV0y6eaGljd+1tCGthHbF0VloYcXd9hL0Nkt+tblW/sowECezvTJ
ufwHSDpBJ9QMDTyXPQBW9T9r42ijeqOmXVQgAj+U910V9h1uz/mIaexWse5s7v8N
xZdyvtBxJ8qyyww1yKZj87FF3XxcpMbQwOpnh8FaY3JYC0dizZifi6L9uZ0bD33P
vkjXSVWfjSX4CpOPr3BpHWec1KwDr5Z2sPCsxRvRMkuX0craax6PBBrifUFjEjYV
yOOCcmPPtWB1td4=
-----END CERTIFICATE-----
Generated at Sun Aug 23 15:06:15 2026 by rpki-client