Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          LvfEo2pkkxMFylt9CDY0HgrUudW8IhRhbj18R61lAkY=
Subject key identifier:   10:88:58:B1:A7:E0:31:AA:D0:64:A0:3E:BE:66:96:FB:19:C7:25:59
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       2B4D3DFDE7BFE79C66435659F545DFAE2D56BFDC
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:20 +0000
ROA not before:           Tue 24 Sep 2024 19:42:20 +0000
ROA not after:            Tue 23 Sep 2025 19:47:20 +0000
asID:                     264485
IP address blocks:        2804:2050:2abc::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4d:3d:fd:e7:bf:e7:9c:66:43:56:59:f5:45:df:ae:2d:56:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:20 2024 GMT
            Not After : Sep 23 19:47:20 2025 GMT
        Subject: CN=108858B1A7E031AAD064A03EBE6696FB19C72559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:77:4e:5e:80:d7:bb:bc:4b:b6:3f:df:dd:
                    7c:17:69:be:dc:dc:b0:05:4c:f0:c1:4b:36:e2:82:
                    94:52:d1:44:1b:d8:df:29:78:ed:f9:c4:31:60:e2:
                    bf:36:3d:be:ad:ff:0b:34:50:0d:ef:ec:5e:a9:22:
                    e4:6a:0a:3f:40:d1:07:16:eb:69:e7:55:0a:62:0b:
                    34:f0:db:87:52:7c:dc:24:25:74:27:01:25:76:96:
                    79:9e:22:70:6b:9f:4b:15:8e:b3:49:03:c4:9f:f2:
                    cf:90:09:d9:c2:c9:4a:e5:62:57:9e:28:b6:56:e9:
                    81:a0:2d:bb:f5:fe:3c:26:85:79:7a:03:3d:39:86:
                    45:52:f5:25:77:9b:87:b2:b9:eb:da:44:f1:d5:f7:
                    68:1e:26:3d:0c:15:7d:0d:e7:54:22:f9:25:42:8d:
                    60:30:77:49:94:8a:f0:c4:e4:76:d8:27:74:2f:b1:
                    96:f0:fe:5e:99:fa:f0:1a:9f:de:34:00:b8:f8:38:
                    c3:43:a7:26:06:ae:f6:64:5c:b1:ed:af:49:c2:d2:
                    2d:19:02:58:91:f9:b1:55:75:5e:8c:e6:21:b2:f4:
                    cf:8b:f9:87:7e:92:e2:33:9c:05:b6:06:7d:30:08:
                    32:fe:78:02:c8:ab:d1:db:38:64:44:4b:82:d7:b1:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:88:58:B1:A7:E0:31:AA:D0:64:A0:3E:BE:66:96:FB:19:C7:25:59
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a326162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:2abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:a0:02:c1:91:4b:86:09:e2:51:47:00:fe:12:9c:d9:44:
         32:dc:69:2d:17:aa:5d:7d:fc:eb:57:8b:82:35:4f:4d:78:ea:
         51:a2:21:f3:4a:84:4b:2d:6a:8d:63:b1:16:71:a3:c6:d7:17:
         17:17:a3:4d:06:23:1c:c9:49:ff:59:1c:91:2b:0f:d4:b8:23:
         7c:1c:e3:b7:2d:73:55:3b:a0:f9:2d:68:93:19:18:38:c0:a6:
         3b:c9:c7:84:20:24:98:e7:e6:4d:a8:dd:11:da:98:a1:bd:d9:
         7c:e5:7c:7b:d3:a9:5f:aa:f6:99:3b:65:51:61:33:0a:41:e7:
         52:85:47:6f:25:b7:0e:79:9f:a9:68:03:43:dc:a1:4f:c2:25:
         3c:f9:79:c9:0d:e4:ca:96:6d:09:d7:e6:12:f7:80:bb:8c:0a:
         f2:f6:43:d3:3f:7f:56:47:20:05:fc:6b:6f:0f:44:15:a1:40:
         3c:03:a2:d0:da:eb:84:84:36:5d:96:9b:23:6c:77:e9:74:13:
         b0:d2:f5:74:86:a0:8a:fd:75:4e:65:ca:fb:68:79:e1:11:ae:
         86:1f:39:a2:36:02:e7:ba:02:89:a2:57:0a:13:05:c9:f9:91:
         34:e4:59:1a:fa:c3:7d:16:42:4e:60:23:62:5e:df:a5:c4:bf:
         cb:75:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:09 2025 by rpki-client