Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa
File:                     323830343a393066383a3a2f33322d3634203d3e20323734363130.roa (raw, json)
Hash identifier:          o6ylYHoQOnjCUsay2wLJP/UdK5Xyso13eIPS3s1KpSs=
Subject key identifier:   88:04:A6:15:3F:CF:E2:1D:CB:FA:68:FB:5E:4C:0C:F7:36:2A:8E:C7
Certificate issuer:       /CN=03A75ABE419E41EF1FB0F5967AD399FB724EF863
Certificate serial:       329F884FB51EFA65CC5357DFD05AC818396D5332
Authority key identifier: 03:A7:5A:BE:41:9E:41:EF:1F:B0:F5:96:7A:D3:99:FB:72:4E:F8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A75ABE419E41EF1FB0F5967AD399FB724EF863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa
Signing time:             Thu 18 Jun 2026 21:25:31 +0000
ROA not before:           Thu 18 Jun 2026 21:20:31 +0000
ROA not after:            Thu 17 Jun 2027 21:25:31 +0000
asID:                     274610
IP address blocks:        2804:90f8::/32 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9f:88:4f:b5:1e:fa:65:cc:53:57:df:d0:5a:c8:18:39:6d:53:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A75ABE419E41EF1FB0F5967AD399FB724EF863
        Validity
            Not Before: Jun 18 21:20:31 2026 GMT
            Not After : Jun 17 21:25:31 2027 GMT
        Subject: CN=8804A6153FCFE21DCBFA68FB5E4C0CF7362A8EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:58:30:c6:82:5d:ad:59:59:74:ef:26:66:
                    d9:e7:b2:58:a6:fe:90:55:23:8e:b9:de:cf:13:55:
                    35:e5:e4:e3:d6:68:dc:4d:55:ea:3e:76:c4:e6:60:
                    de:3c:49:65:e4:f0:be:e7:f4:f1:50:90:48:59:fe:
                    f4:0d:3a:a7:7c:28:86:85:ad:0f:e3:be:68:af:9a:
                    c5:f1:77:21:d6:43:44:33:86:77:e8:60:11:49:09:
                    82:a9:97:ae:2b:72:92:a8:c6:db:72:ed:22:8a:b6:
                    d4:8a:77:2e:21:7c:7c:86:33:85:e5:3b:ca:d5:57:
                    c9:d6:a7:a3:5e:20:af:ec:98:22:65:31:45:18:fc:
                    4c:47:1a:56:17:16:49:2a:8b:0a:5b:3b:e1:7d:b4:
                    ec:56:a6:10:31:e1:f0:93:81:e7:3b:a1:fc:71:fc:
                    91:8a:d8:11:79:7a:06:68:0a:de:be:91:ef:92:0a:
                    77:62:4f:74:6f:6b:d1:7a:d3:41:51:11:1e:9b:3e:
                    67:f0:85:b1:9f:f6:08:9b:92:5f:c8:06:90:4b:c3:
                    99:9b:f8:77:ea:c7:0a:fd:77:b9:46:1c:c4:7e:02:
                    f2:f9:a6:0d:33:ba:6c:62:c6:5c:2e:eb:94:2f:f7:
                    94:1b:f6:52:37:17:fc:86:e9:b7:1b:10:cd:86:d0:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:04:A6:15:3F:CF:E2:1D:CB:FA:68:FB:5E:4C:0C:F7:36:2A:8E:C7
            X509v3 Authority Key Identifier:
                keyid:03:A7:5A:BE:41:9E:41:EF:1F:B0:F5:96:7A:D3:99:FB:72:4E:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/03A75ABE419E41EF1FB0F5967AD399FB724EF863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A75ABE419E41EF1FB0F5967AD399FB724EF863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xZCkddoSb3sQAmuGqUxZjW9d9hKaRYnoKqXvN5WR77/0/323830343a393066383a3a2f33322d3634203d3e20323734363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:45:06:f0:1c:42:00:d8:05:23:57:62:30:a7:ff:3c:75:47:
         8e:1c:13:e2:fe:3c:49:72:75:30:b8:05:55:10:29:96:96:14:
         fa:33:f7:cc:79:05:87:56:e0:5c:c6:4f:d8:67:10:26:8f:34:
         82:b8:dd:f2:1f:98:b6:fc:53:82:bc:9a:40:64:75:2d:a0:e0:
         77:d0:90:b5:13:de:24:a0:ca:a4:8b:70:21:63:1a:52:d7:fd:
         e0:de:58:be:ce:cb:75:78:05:75:0d:10:f4:01:c5:19:2b:92:
         e8:c8:c6:45:a1:58:f0:1e:2d:92:c0:89:8c:e4:78:94:8d:67:
         bb:5c:d6:18:7d:48:51:74:e2:5f:da:dc:a4:47:a0:bc:96:0a:
         01:fe:c0:c8:9d:9a:d5:02:39:fc:b8:22:2c:43:4e:68:c6:fe:
         aa:1a:da:0e:c4:df:d3:4a:51:89:2f:8f:21:90:e1:b4:c9:cf:
         02:a9:17:31:fb:6d:d6:26:12:c3:ae:ee:a7:69:e3:72:81:82:
         f8:af:f9:37:0d:f1:c0:5a:0e:03:d6:e6:f5:9c:ca:cc:a2:1f:
         03:91:ad:56:0a:49:af:7b:d9:2a:d5:61:56:d6:eb:71:df:16:
         ee:83:3f:79:6f:ec:b3:e0:4b:8b:a3:aa:1e:cf:88:36:c7:b1:
         d4:c3:02:ef
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMp+IT7Ue+mXMU1ff0FrIGDltUzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBNzVBQkU0MTlFNDFFRjFGQjBGNTk2N0FEMzk5RkI3
MjRFRjg2MzAeFw0yNjA2MTgyMTIwMzFaFw0yNzA2MTcyMTI1MzFaMDMxMTAvBgNV
BAMTKDg4MDRBNjE1M0ZDRkUyMURDQkZBNjhGQjVFNEMwQ0Y3MzYyQThFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC71gwxoJdrVlZdO8mZtnnslim
/pBVI4653s8TVTXl5OPWaNxNVeo+dsTmYN48SWXk8L7n9PFQkEhZ/vQNOqd8KIaF
rQ/jvmivmsXxdyHWQ0QzhnfoYBFJCYKpl64rcpKoxtty7SKKttSKdy4hfHyGM4Xl
O8rVV8nWp6NeIK/smCJlMUUY/ExHGlYXFkkqiwpbO+F9tOxWphAx4fCTgec7ofxx
/JGK2BF5egZoCt6+ke+SCndiT3Rva9F600FRER6bPmfwhbGf9gibkl/IBpBLw5mb
+Hfqxwr9d7lGHMR+AvL5pg0zumxixlwu65Qv95Qb9lI3F/yG6bcbEM2G0EBnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiASmFT/P4h3L+mj7XkwM9zYqjscwHwYDVR0j
BBgwFoAUA6davkGeQe8fsPWWetOZ+3JO+GMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3
LzAvMDNBNzVBQkU0MTlFNDFFRjFGQjBGNTk2N0FEMzk5RkI3MjRFRjg2My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wM0E3NUFCRTQxOUU0MUVGMUZC
MEY1OTY3QUQzOTlGQjcyNEVGODYzLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
eFpDa2Rkb1NiM3NRQW11R3FVeFpqVzlkOWhLYVJZbm9LcVh2TjVXUjc3LzAvMzIz
ODMwMzQzYTM5MzA2NjM4M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNzM0MzYz
MTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASQ+DANBgkqhkiG9w0BAQsFAAOCAQEACUUG8BxCANgF
I1diMKf/PHVHjhwT4v48SXJ1MLgFVRAplpYU+jP3zHkFh1bgXMZP2GcQJo80grjd
8h+YtvxTgryaQGR1LaDgd9CQtRPeJKDKpItwIWMaUtf94N5Yvs7LdXgFdQ0Q9AHF
GSuS6MjGRaFY8B4tksCJjOR4lI1nu1zWGH1IUXTiX9rcpEegvJYKAf7AyJ2a1QI5
/LgiLENOaMb+qhraDsTf00pRiS+PIZDhtMnPAqkXMftt1iYSw67up2njcoGC+K/5
Nw3xwFoOA9bm9ZzKzKIfA5GtVgpJr3vZKtVhVtbrcd8W7oM/eW/ss+BLi6OqHs+I
Nsex1MMC7w==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:17 2026 by rpki-client