Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3336203d3e20323732343737.roa
File:                     323830343a383163633a3a2f33322d3336203d3e20323732343737.roa (raw, json)
Hash identifier:          KJ9WYNGJSxzMGmz1twkIfDB2iHtTuf1Kq4wV0DHm7zI=
Subject key identifier:   5A:50:74:67:9E:97:57:15:2C:EF:35:FD:9A:DC:89:55:72:D8:7F:2E
Certificate issuer:       /CN=764F0283FDE9EC95323BFF5A76B7D3CA585A6F07
Certificate serial:       66183838D1AD1D1D4C96F6A30087BE6094EBCFDE
Authority key identifier: 76:4F:02:83:FD:E9:EC:95:32:3B:FF:5A:76:B7:D3:CA:58:5A:6F:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764F0283FDE9EC95323BFF5A76B7D3CA585A6F07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3336203d3e20323732343737.roa
Signing time:             Wed 12 Aug 2026 20:55:54 +0000
ROA not before:           Wed 12 Aug 2026 20:50:54 +0000
ROA not after:            Wed 11 Aug 2027 20:55:54 +0000
asID:                     272477
IP address blocks:        2804:81cc::/32 maxlen: 36
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:18:38:38:d1:ad:1d:1d:4c:96:f6:a3:00:87:be:60:94:eb:cf:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764F0283FDE9EC95323BFF5A76B7D3CA585A6F07
        Validity
            Not Before: Aug 12 20:50:54 2026 GMT
            Not After : Aug 11 20:55:54 2027 GMT
        Subject: CN=5A5074679E9757152CEF35FD9ADC895572D87F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:d6:cd:d0:8a:ea:5c:80:c7:49:6d:8c:8e:
                    59:9b:5f:ed:64:6d:ed:64:cb:b5:1a:dc:d4:1d:a4:
                    7b:e3:e0:51:31:cc:6b:97:d1:e2:31:e1:73:32:08:
                    4c:49:5b:36:24:4d:a2:3b:cf:0f:85:6e:25:98:d2:
                    fa:4c:6f:74:02:c2:8a:4a:7c:87:5f:a4:d1:3d:d8:
                    b5:d9:ef:c0:22:55:ee:74:e1:00:41:f1:02:eb:b4:
                    c3:3f:a6:80:1d:a7:61:46:a2:74:aa:b5:c2:68:3c:
                    4e:f7:98:63:a5:db:ee:6a:07:c9:d4:bf:07:8c:bb:
                    44:78:11:e5:1c:ca:a2:e2:1c:a2:c7:f5:43:64:f5:
                    98:72:54:20:f9:eb:b5:2d:eb:4f:34:79:a6:3c:22:
                    ce:d6:27:29:85:3e:a7:35:e9:14:b5:b1:c5:d3:ab:
                    af:0a:45:9c:fd:ec:12:f5:2f:27:6b:ad:3e:de:ff:
                    69:e6:a8:23:b4:15:eb:f3:ae:0f:10:f5:b6:31:9f:
                    37:8c:e1:63:76:08:08:fc:be:fb:0d:8d:83:c6:a4:
                    fd:16:de:06:93:fe:ee:fa:94:1e:62:80:1a:ea:1f:
                    44:5b:26:a5:92:33:14:d6:52:b4:0a:ca:21:da:64:
                    82:20:b7:6b:2b:3d:0b:ad:c2:c8:1f:87:36:fc:e3:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:74:67:9E:97:57:15:2C:EF:35:FD:9A:DC:89:55:72:D8:7F:2E
            X509v3 Authority Key Identifier:
                keyid:76:4F:02:83:FD:E9:EC:95:32:3B:FF:5A:76:B7:D3:CA:58:5A:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/764F0283FDE9EC95323BFF5A76B7D3CA585A6F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764F0283FDE9EC95323BFF5A76B7D3CA585A6F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoPFVyLjCn6KEcLrNWJaS9J91BzNrdLBfNioGr5gS5bF/0/323830343a383163633a3a2f33322d3336203d3e20323732343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:ae:ab:a6:46:31:3d:63:3e:25:4f:11:b7:f1:c1:db:2a:
         72:95:90:9c:45:d2:61:c6:d7:7a:4f:3c:45:82:47:d6:f0:e1:
         b6:1f:57:25:7e:57:5d:7e:30:be:f3:19:e9:32:e3:2f:39:fe:
         3b:46:92:80:ae:da:e0:1c:02:b6:50:06:45:9a:cd:aa:0e:ae:
         b1:70:3d:72:fa:c9:b4:cd:65:7a:5f:1c:e9:44:0e:b3:a7:fb:
         f5:0c:c1:cb:cd:3b:4d:63:4e:52:36:d8:11:75:3c:f6:e0:79:
         c2:25:8f:37:7c:69:0c:cd:19:30:14:13:f2:21:dc:9b:92:9e:
         fa:c4:77:c5:24:59:86:85:b1:de:3a:d7:4c:c5:ad:4d:6e:b8:
         d4:d5:23:6b:6e:13:2a:c4:f7:6d:ea:08:48:89:3b:9a:a4:8f:
         69:84:59:1c:cc:51:2f:30:04:ef:58:e4:2d:6e:ac:3b:c8:e2:
         d2:e0:0b:47:5d:8d:cb:a5:42:dc:e6:6f:67:b4:c4:c5:6b:4b:
         7f:fe:4b:73:cd:86:f8:14:ea:16:32:b8:05:b4:d3:92:0b:e1:
         bf:06:f0:f6:70:0c:e8:55:09:5a:fa:e9:ca:5b:db:4a:ec:24:
         63:b5:0f:ef:94:59:ac:0d:63:bc:ba:f2:84:10:ab:94:c6:96:
         84:ca:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:19:07 2026 by rpki-client