Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa
File:                     323830343a373436633a3a2f33322d3332203d3e20323730393830.roa (raw, json)
Hash identifier:          8518wKB8mdz0Mq32SHpabXLxnWKFdy9w8Qa2ORiN9J0=
Subject key identifier:   DE:6E:CD:F1:5E:A3:BE:4C:EE:0B:8F:32:AC:98:9F:3A:B5:C2:50:4B
Certificate issuer:       /CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
Certificate serial:       415F3E6A024B850837F770C0342B8C33C28F325C
Authority key identifier: E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa
Signing time:             Mon 07 Apr 2025 21:00:21 +0000
ROA not before:           Mon 07 Apr 2025 20:55:21 +0000
ROA not after:            Mon 06 Apr 2026 21:00:21 +0000
asID:                     270980
IP address blocks:        2804:746c::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5f:3e:6a:02:4b:85:08:37:f7:70:c0:34:2b:8c:33:c2:8f:32:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C5040EBFAB6D8F720040E80E512CBD965591B2
        Validity
            Not Before: Apr  7 20:55:21 2025 GMT
            Not After : Apr  6 21:00:21 2026 GMT
        Subject: CN=DE6ECDF15EA3BE4CEE0B8F32AC989F3AB5C2504B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:8a:e4:55:b1:fa:42:a6:50:f5:51:94:62:
                    f8:06:f0:12:c4:56:2a:de:74:01:51:02:c8:e3:6c:
                    ce:80:5a:a1:67:47:13:23:ff:eb:3d:f9:ca:4c:6a:
                    d6:78:3c:66:be:bf:e9:21:c9:09:1f:f7:7b:d0:a4:
                    dc:c6:a6:e8:1b:02:53:26:97:06:57:59:64:76:06:
                    b8:69:42:54:05:b5:6e:02:12:82:69:82:7d:13:ce:
                    83:29:b9:6a:ba:82:fc:cd:f3:68:60:8f:4f:25:53:
                    2c:b8:8b:f4:f1:54:e6:af:fe:f5:cd:4f:43:e0:68:
                    f6:79:66:0a:03:c9:19:44:b8:5b:9a:85:9c:6f:e7:
                    c6:bb:ce:72:b4:d6:c6:02:f8:ea:97:17:9f:3d:a3:
                    eb:0b:32:e8:8a:f8:88:f0:71:2a:65:3a:b1:3b:6d:
                    47:2c:bb:f5:fa:eb:c2:1d:9a:8d:59:77:f2:e1:ab:
                    70:97:eb:e4:f9:39:5e:bd:c9:81:30:2b:ee:1b:06:
                    47:ec:62:01:65:5c:fd:fd:06:78:13:b6:f7:1c:bc:
                    69:ac:85:0a:5f:04:1f:c1:15:f6:24:02:8a:72:bf:
                    b5:e4:55:60:97:c3:4e:da:a8:ff:36:0e:e7:cf:5c:
                    1f:cc:49:95:e9:dc:f4:06:38:fa:c1:38:df:14:8d:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:CD:F1:5E:A3:BE:4C:EE:0B:8F:32:AC:98:9F:3A:B5:C2:50:4B
            X509v3 Authority Key Identifier:
                keyid:E8:C5:04:0E:BF:AB:6D:8F:72:00:40:E8:0E:51:2C:BD:96:55:91:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/E8C5040EBFAB6D8F720040E80E512CBD965591B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C5040EBFAB6D8F720040E80E512CBD965591B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:a5:e3:ba:0c:7b:1d:d7:1e:fb:b0:bc:e1:c7:0e:26:15:
         4f:9d:c7:ee:39:7d:e8:4f:aa:84:b6:13:d0:77:04:4e:f6:c3:
         5d:95:55:5f:2c:46:08:90:58:1a:33:e1:04:95:1e:de:fd:f7:
         1b:be:38:57:ff:ae:28:26:80:4b:de:b9:91:39:5b:7f:26:bc:
         27:72:be:67:9d:c4:b3:90:1c:df:f1:16:af:2c:56:94:f1:3b:
         02:f9:3b:23:39:09:1a:c0:c8:06:fd:6f:e6:eb:b6:67:94:2b:
         07:20:4e:b5:57:94:6d:9d:f1:ab:d2:77:eb:5d:2b:4d:da:01:
         69:32:99:7a:f8:4b:14:de:0b:0a:69:8d:ab:ef:cc:65:a9:9c:
         d0:4e:0b:13:a3:9c:a1:fb:74:01:b8:b4:2c:29:22:05:e2:f6:
         94:4f:72:a4:35:21:7a:1a:96:35:d1:07:40:dd:e5:37:19:1e:
         8e:29:fc:6a:e8:4a:24:34:42:ea:48:48:05:6b:9f:9d:db:45:
         c6:c4:68:24:30:4b:e7:32:bd:f4:4a:27:37:73:05:f1:e3:03:
         b9:3e:aa:c2:0f:d2:b2:78:0f:b9:f5:f4:f1:80:b9:10:55:a9:
         7e:53:82:52:0c:aa:aa:a3:23:6c:ca:3d:76:e7:58:67:9d:6e:
         57:5e:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:20 2025 by rpki-client