Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e2033333536.roa
File:                     323830343a373762303a3a2f33322d3634203d3e2033333536.roa (raw, json)
Hash identifier:          7Re3qdG6dAWlz6mGwKDbXAkaPCKgXMw0aU0aNT86r4U=
Subject key identifier:   12:5C:7B:E8:D8:A6:C7:A8:22:EF:E4:6B:3F:92:10:1B:36:90:A3:A0
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       7641C1E8D62FA8658AD7A0B77C12BADE84131F5A
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e2033333536.roa
Signing time:             Wed 05 Mar 2025 23:58:50 +0000
ROA not before:           Wed 05 Mar 2025 23:53:50 +0000
ROA not after:            Wed 04 Mar 2026 23:58:50 +0000
asID:                     3356
IP address blocks:        2804:77b0::/32 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:c1:e8:d6:2f:a8:65:8a:d7:a0:b7:7c:12:ba:de:84:13:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Mar  5 23:53:50 2025 GMT
            Not After : Mar  4 23:58:50 2026 GMT
        Subject: CN=125C7BE8D8A6C7A822EFE46B3F92101B3690A3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:23:7f:99:85:da:cd:21:29:ef:0a:2b:b3:
                    69:cc:96:2b:56:50:7e:e2:5c:a0:fe:8d:bb:7b:65:
                    d8:e0:3c:78:46:09:9e:c2:b6:7f:e1:51:f9:da:e5:
                    8b:a3:46:eb:db:32:5c:7e:64:28:d9:c3:d8:c3:09:
                    05:15:d6:b9:f1:1f:76:c7:a5:b6:df:d0:bf:86:84:
                    bc:93:5c:1d:71:61:3b:77:77:42:24:fb:14:e4:5a:
                    02:f2:e4:81:ac:0f:8e:1f:22:1a:69:c2:71:51:86:
                    89:32:9b:0e:81:ce:7b:ad:59:59:d1:ef:e2:1d:0a:
                    79:85:57:ee:43:29:81:06:a2:cd:34:f5:ce:06:b1:
                    34:e1:93:49:3b:8a:ff:ee:b6:3d:65:fc:d9:c9:c4:
                    d4:54:7f:98:9d:7e:9e:a3:5f:92:cb:08:05:0c:c8:
                    d8:0f:12:a5:25:ad:98:2e:d8:f7:72:44:a6:6b:2a:
                    c6:c6:ba:2c:7d:7e:05:a5:03:96:d0:c0:16:c7:ae:
                    a9:04:fd:b6:e9:c8:eb:af:01:73:8c:d0:b8:6d:f5:
                    83:a1:7d:39:52:d3:a4:84:e6:7e:d7:21:66:a6:95:
                    0a:85:4a:92:2d:1a:18:dd:67:03:fc:76:c8:b2:16:
                    9e:3a:15:f2:b2:d2:4a:c9:16:b4:c3:eb:0c:33:6e:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:7B:E8:D8:A6:C7:A8:22:EF:E4:6B:3F:92:10:1B:36:90:A3:A0
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:04:39:2f:ad:a3:99:97:f0:0b:6e:e6:57:30:b0:e4:5d:
         61:9c:1a:6b:2e:5a:94:bb:c1:8a:fc:10:b3:6c:a8:53:9c:f4:
         ce:dd:51:81:d0:2b:9f:77:bf:4c:4d:39:94:b8:fe:64:79:bb:
         c2:84:41:45:22:fa:a0:a2:d9:01:99:20:28:42:66:d6:20:b6:
         24:b0:23:ec:59:d8:b8:9d:2e:df:bb:6d:b2:7d:58:42:c0:35:
         7e:f7:1f:51:2e:f3:37:8a:c0:24:6a:64:43:2d:58:23:b3:60:
         f0:5e:e6:d6:23:7a:27:cc:6b:71:6c:5c:6c:30:1d:f5:d8:bf:
         4c:68:18:7d:c8:61:05:5e:2b:76:b8:60:e8:8e:3a:d9:5a:f1:
         ac:03:71:b6:1f:41:e4:ef:51:30:7f:86:40:2e:30:14:5b:19:
         6d:23:eb:47:0c:7b:5b:f1:35:7b:4b:90:ee:c7:e2:ae:b2:f8:
         e9:08:de:e9:b9:3d:38:1b:98:c3:a1:87:81:8f:d7:e1:fe:c2:
         62:bf:8c:5c:dc:01:9a:86:4c:8f:ba:b8:c4:4f:93:e5:e7:39:
         01:4f:6a:d3:b6:30:8d:62:20:b0:1a:4b:ee:5a:47:05:ee:fb:
         71:ee:41:f8:21:50:2c:ed:7b:90:0f:df:0e:60:80:09:1a:32:
         9e:1f:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:54:03 2025 by rpki-client