Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138623a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356138623a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          5gjkrX7CJUSVRdLIAiYaQBe2i1HqClGvnzjHEJvG7fM=
Subject key identifier:   A8:58:9A:1E:50:E7:1E:9D:FA:46:57:E2:17:5B:98:89:7D:AC:44:6C
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       23AD1994B0443AA09E78375CBAC7319A81AA2994
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138623a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:38 +0000
ROA not before:           Tue 24 Sep 2024 19:42:38 +0000
ROA not after:            Tue 23 Sep 2025 19:47:38 +0000
asID:                     264485
IP address blocks:        2804:2050:5a8b::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:19:94:b0:44:3a:a0:9e:78:37:5c:ba:c7:31:9a:81:aa:29:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:38 2024 GMT
            Not After : Sep 23 19:47:38 2025 GMT
        Subject: CN=A8589A1E50E71E9DFA4657E2175B98897DAC446C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:6b:9a:23:56:51:5b:5c:16:cc:1a:23:d8:
                    c9:f5:81:dd:8d:ae:be:76:3f:9f:99:43:bf:f4:e9:
                    09:f2:f2:bd:c7:3b:b8:cd:16:e2:28:ad:25:cb:18:
                    e1:c3:90:84:38:e0:a2:97:90:ef:f8:4d:9f:17:63:
                    11:f7:d7:4b:b4:3c:9d:f4:67:a8:35:75:d6:98:73:
                    24:c4:36:b6:7a:e9:3c:ce:7f:af:6a:61:34:5b:20:
                    ee:cc:a7:62:26:b5:69:09:f9:95:1f:c0:38:e1:bb:
                    e5:1c:9f:96:da:a2:2b:78:40:8e:05:05:e7:cf:2f:
                    67:ab:e2:62:68:97:d6:0a:71:6a:19:d5:77:f5:82:
                    e4:d0:9e:e8:9c:f5:0b:b4:37:d7:32:48:00:05:9c:
                    17:13:21:10:02:b3:72:34:74:68:ee:7a:ba:14:be:
                    6f:3c:27:ef:22:f7:e6:76:0a:61:c1:3c:47:c2:ce:
                    61:fc:b7:54:2e:3b:4b:8c:a9:f4:69:07:b0:40:68:
                    dd:58:bf:84:75:03:09:38:c5:9c:87:d0:be:49:89:
                    83:4a:37:2f:54:41:79:fd:96:46:61:7b:46:92:0f:
                    20:ca:a6:76:a1:b4:ab:c6:8c:e6:89:62:d5:38:6c:
                    06:69:a5:95:ac:26:81:63:b6:3c:24:91:84:68:7e:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:9A:1E:50:E7:1E:9D:FA:46:57:E2:17:5B:98:89:7D:AC:44:6C
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138623a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5a8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:23:56:c2:dd:ab:30:88:c1:f7:ca:6c:51:c6:1b:e0:08:
         83:90:0c:69:ac:39:90:8d:14:fb:2c:94:6a:eb:d6:18:3e:6b:
         92:e9:75:51:91:37:02:d2:90:40:6d:fe:0d:7c:b6:fb:90:10:
         70:82:7c:95:0f:23:1a:83:f8:31:74:cf:45:e6:30:a4:8a:63:
         e5:38:da:31:80:14:16:a2:95:bb:6b:a2:8f:3d:54:1e:a6:11:
         8d:00:57:5c:f1:00:6b:92:ef:96:77:fa:3c:bf:cf:45:e5:a8:
         ab:dc:b7:ec:55:f8:2f:fc:22:8a:1f:4e:fb:50:2c:f0:f1:ac:
         81:a3:af:3d:8e:9d:9f:06:7f:6c:5d:0a:0b:0d:ad:43:b4:cb:
         5d:fc:68:19:5c:19:43:ae:0c:2c:cd:f3:89:88:7f:55:e4:eb:
         f8:bf:89:4d:b9:8d:4a:16:ab:e0:ac:e2:c8:0e:cd:83:47:58:
         2f:f8:19:08:97:7c:81:7a:23:02:ff:f2:49:f7:9a:cf:6a:3d:
         d3:f9:f8:e1:60:67:63:f2:0b:4f:25:9c:0c:e3:35:2c:0b:69:
         1f:3d:bf:3c:9c:3b:19:de:ee:54:8d:5a:4c:90:b3:c7:25:63:
         5a:ea:db:56:c8:e5:10:2c:55:66:cd:90:12:e6:64:1d:dd:4e:
         31:2a:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:53 2025 by rpki-client