Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa
File:                     323830343a356639383a3a2f33322d3332203d3e20323639313131.roa (raw, json)
Hash identifier:          wdb8Uxd+umGF9OLjwd04FJpH/0pX+TbbOy86CtLYCoc=
Subject key identifier:   54:8C:67:F2:C1:E1:17:61:E9:7B:97:34:B8:0B:63:80:1B:B4:88:C2
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       6D853C8513688DE9194FAAA1D33CADA042C896B3
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa
Signing time:             Wed 05 Mar 2025 23:49:31 +0000
ROA not before:           Wed 05 Mar 2025 23:44:31 +0000
ROA not after:            Wed 04 Mar 2026 23:49:31 +0000
asID:                     269111
IP address blocks:        2804:5f98::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:85:3c:85:13:68:8d:e9:19:4f:aa:a1:d3:3c:ad:a0:42:c8:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Mar  5 23:44:31 2025 GMT
            Not After : Mar  4 23:49:31 2026 GMT
        Subject: CN=548C67F2C1E11761E97B9734B80B63801BB488C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:99:26:91:7f:7a:ae:8a:7f:a4:35:e3:ed:
                    57:6e:dd:3e:fb:c3:53:58:df:d8:c1:3d:9c:78:21:
                    f2:9a:c9:da:0b:b3:62:2a:83:f2:e0:4d:19:87:30:
                    e7:b7:d1:28:9a:67:eb:2d:9f:44:af:5d:c9:02:11:
                    02:27:5a:26:ae:34:2a:c9:b1:f5:9e:73:86:df:40:
                    61:d0:30:ab:04:b9:09:bb:a7:58:bb:b6:da:63:96:
                    34:51:e1:60:89:75:80:e6:70:07:88:18:e3:dc:3d:
                    23:57:76:57:45:32:7a:4e:fc:13:4e:b3:af:08:05:
                    b0:87:42:28:6f:e6:bd:f0:e3:cf:49:18:3e:c4:1a:
                    07:61:f0:db:93:63:4c:15:e9:22:f8:58:db:9d:3a:
                    98:7a:ae:f0:01:4d:ec:d9:ce:12:7f:3c:52:01:38:
                    fc:ed:c7:ea:4c:55:43:6f:6d:67:e1:03:9f:d0:2a:
                    9d:d7:a5:80:d7:42:0c:b6:52:30:27:dd:f7:26:ec:
                    59:b1:94:bd:a1:cb:c8:72:42:26:46:67:fd:a4:9e:
                    e2:59:ce:83:79:6f:86:b8:7f:f6:ad:d1:ab:73:a9:
                    01:fd:a4:54:09:e8:8b:7d:1f:c9:b9:0c:02:10:8b:
                    84:f7:c3:f1:73:d4:6c:d9:5a:ec:0a:2f:8a:df:0e:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8C:67:F2:C1:E1:17:61:E9:7B:97:34:B8:0B:63:80:1B:B4:88:C2
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33322d3332203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:82:5a:d7:95:b2:7e:9b:18:87:6b:39:b3:2a:50:d8:fc:
         05:a1:fd:d5:08:36:a4:21:37:8d:b0:d1:85:a2:31:ae:5d:cc:
         81:b5:d7:3d:45:37:52:6a:6f:3a:31:ef:48:99:87:e9:00:f6:
         9b:69:5b:c5:ed:39:4a:67:d5:a3:55:1f:0f:e6:1a:5e:ae:f2:
         43:6a:b5:06:75:67:89:50:45:a9:28:38:f3:74:f4:11:67:91:
         53:6b:2f:52:92:0f:11:80:d6:6e:3a:fe:63:fa:b5:4f:59:a7:
         32:95:59:5c:47:2a:e8:d0:5c:72:5c:74:5f:98:15:d1:65:f1:
         1d:ad:23:70:fc:a7:53:19:5d:61:5c:0f:28:3a:93:5d:99:79:
         48:3b:62:fb:a7:fb:8b:8d:46:ec:0a:eb:82:b8:4e:e8:9f:8e:
         17:e1:e2:17:d3:64:89:ad:c9:a9:4b:07:b4:35:e7:df:14:6c:
         ed:e3:e1:b9:3f:f4:99:76:44:cd:f1:55:b3:77:12:09:93:01:
         63:43:08:1a:65:ed:7c:06:da:d0:94:db:71:5a:74:74:39:e3:
         c9:b4:b4:7f:7d:2d:0c:e3:3b:38:fc:b6:ea:a0:61:cc:ac:83:
         ca:76:85:7d:60:00:be:ea:68:5a:22:91:60:d7:63:b8:f4:03:
         fc:56:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:11 2025 by rpki-client