Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3334203d3e20323731303639.roa
File:                     323830343a373563383a3a2f33322d3334203d3e20323731303639.roa (raw, json)
Hash identifier:          i0hqtywucaKp9cyxHRWcPgwFR+O3w4ymmE7MKJtvpZs=
Subject key identifier:   9E:0F:3F:B0:47:B4:EE:44:F2:24:70:76:2D:0C:42:5B:DA:08:77:E5
Certificate issuer:       /CN=7430789932EED6F0BF7D0DF90E4D2FCD5ABD47DC
Certificate serial:       09350846191B71EBAD8A3CAC93A8AA0B3F1BC9B8
Authority key identifier: 74:30:78:99:32:EE:D6:F0:BF:7D:0D:F9:0E:4D:2F:CD:5A:BD:47:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7430789932EED6F0BF7D0DF90E4D2FCD5ABD47DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3334203d3e20323731303639.roa
Signing time:             Tue 30 Jul 2024 13:05:59 +0000
ROA not before:           Tue 30 Jul 2024 13:00:59 +0000
ROA not after:            Tue 29 Jul 2025 13:05:59 +0000
asID:                     271069
IP address blocks:        2804:75c8::/32 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:08:46:19:1b:71:eb:ad:8a:3c:ac:93:a8:aa:0b:3f:1b:c9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7430789932EED6F0BF7D0DF90E4D2FCD5ABD47DC
        Validity
            Not Before: Jul 30 13:00:59 2024 GMT
            Not After : Jul 29 13:05:59 2025 GMT
        Subject: CN=9E0F3FB047B4EE44F22470762D0C425BDA0877E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:e9:f8:d8:66:38:64:f3:98:3f:0f:5a:24:
                    53:0c:a5:6b:ba:c2:a7:90:03:c1:32:b2:26:01:eb:
                    dd:54:2d:2b:e2:ef:8e:cf:f4:9d:c0:92:43:88:b7:
                    ed:1f:2b:1c:7d:fc:7b:93:d3:a3:b3:7b:a3:c8:9d:
                    1e:41:da:80:97:97:9e:2a:38:4e:2f:7f:ac:1c:db:
                    64:30:e9:33:54:91:19:a1:6b:22:b4:9e:b3:39:6f:
                    ca:85:d6:89:cf:d9:2f:0f:cc:86:d8:34:0b:35:84:
                    f6:ba:4c:8b:0c:f0:63:2c:08:d4:a9:a3:9b:d5:1a:
                    28:b5:d0:da:fa:66:e9:dc:0e:70:c9:3c:68:ac:c2:
                    be:74:45:f7:38:b0:21:30:ce:53:d7:c0:72:af:18:
                    ef:9e:d4:80:97:29:36:94:3f:da:ec:68:f7:8a:44:
                    39:a3:f3:76:89:dc:65:d7:8b:1b:a0:41:13:99:b2:
                    f3:ab:b6:25:71:05:67:17:4d:94:c9:8e:c6:d1:ad:
                    f3:2f:f2:f8:96:71:20:1a:94:e1:cd:13:0e:d1:fe:
                    21:3c:04:05:61:42:ed:00:ab:a4:ac:19:f2:5b:6e:
                    e0:a4:d9:87:ec:d5:72:0a:2d:2f:d9:9c:c5:ac:c2:
                    fe:0c:5c:3e:f2:b8:e2:d2:3f:30:7b:9e:27:c7:20:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0F:3F:B0:47:B4:EE:44:F2:24:70:76:2D:0C:42:5B:DA:08:77:E5
            X509v3 Authority Key Identifier:
                keyid:74:30:78:99:32:EE:D6:F0:BF:7D:0D:F9:0E:4D:2F:CD:5A:BD:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/7430789932EED6F0BF7D0DF90E4D2FCD5ABD47DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7430789932EED6F0BF7D0DF90E4D2FCD5ABD47DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3334203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:6a:ab:fa:6a:08:86:12:df:08:1e:6a:c3:61:0f:74:f9:d3:
         54:11:f7:ce:c1:cb:f6:a2:2c:41:cf:0e:95:b5:e2:e0:58:d0:
         a7:2c:7b:70:bf:75:5f:09:e5:07:89:28:e3:52:e3:ec:dc:ae:
         f2:1d:9b:31:d0:5b:a8:ab:55:d7:87:f9:9c:86:1c:f7:52:bd:
         c5:fd:3b:d9:bf:2f:03:ab:d5:f0:98:6b:04:0d:1e:40:8c:c8:
         f4:01:37:60:ca:56:7b:8a:31:c6:53:4e:74:e7:bc:6f:86:12:
         75:c9:cd:9b:9c:4a:f0:e3:d7:f1:64:bb:3c:1a:6c:de:c4:07:
         aa:2c:a4:d9:4c:8d:d7:59:13:f7:98:05:ed:04:48:ed:82:c5:
         d7:8f:cf:e3:6e:f6:69:a2:3e:52:3b:a0:df:60:68:ee:9b:5e:
         e7:56:67:3f:28:68:2b:7b:2d:7f:9f:ee:fe:7d:2a:6d:ee:35:
         98:c7:16:2b:9b:b5:cd:93:a6:6f:d6:9d:ef:af:da:ab:98:31:
         14:39:0f:53:08:37:1a:0c:e4:07:e7:7e:eb:b9:e2:51:af:26:
         18:16:4d:b1:e7:0f:1a:cd:cf:10:17:b4:98:28:c3:b3:9d:89:
         22:6e:ec:31:ef:12:8a:76:ba:84:7e:50:20:c5:3c:2c:88:e0:
         d6:64:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:42 2025 by rpki-client