Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3238383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          yK043cqQCoRbt+NwEhKNh4NEM74yotwmGWsC7J1Y5O8=
Subject key identifier:   A6:8C:1D:15:48:6B:E4:51:77:D1:A4:AE:1A:7A:2C:CD:92:4C:79:FB
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7AB0D02BECC1A121614EF957D5226931AB6788B4
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:288::/45 maxlen: 45
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:d0:2b:ec:c1:a1:21:61:4e:f9:57:d5:22:69:31:ab:67:88:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=A68C1D15486BE45177D1A4AE1A7A2CCD924C79FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:93:cf:72:b6:4d:72:06:23:1d:74:33:1f:
                    a7:e6:40:09:0f:76:bf:bc:19:5e:65:be:7e:b9:00:
                    40:e1:a5:c4:f2:5c:52:81:dd:2b:a1:59:34:f6:fb:
                    64:2a:b6:cc:fc:b1:0f:13:19:18:0d:c8:58:3d:1e:
                    7f:2a:2a:1d:9c:d1:8d:17:43:40:87:14:bf:99:62:
                    3b:e9:b3:2d:b4:71:5d:ea:7e:a9:5a:bf:e6:83:7a:
                    e6:c5:a8:4e:a8:2d:c6:35:cf:74:cf:b7:d5:28:ff:
                    07:71:42:48:77:e3:fd:b9:6f:2e:f0:44:86:f0:be:
                    76:ad:cc:e2:e0:27:d7:41:3f:d7:ea:6f:2d:76:0f:
                    ed:9c:56:5b:d0:96:36:9e:9f:00:8f:e3:d8:19:d0:
                    2a:25:03:3d:6d:18:5f:98:08:be:d1:ba:92:de:a1:
                    57:9b:20:73:d6:1c:be:45:2e:8d:96:f0:c5:dd:d8:
                    64:f4:e1:0f:08:dc:c4:d2:f3:00:ec:d5:5e:02:2c:
                    5f:91:7d:b1:03:5a:aa:99:c9:e2:0a:da:ce:6b:e5:
                    60:9f:9b:ec:4b:de:60:ce:0d:f9:a0:86:63:49:ac:
                    11:e3:d9:69:13:6e:44:46:11:af:c3:8d:2f:8b:13:
                    c4:26:b7:15:33:5a:e4:ba:65:bc:d8:f4:1c:1b:f5:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:1D:15:48:6B:E4:51:77:D1:A4:AE:1A:7A:2C:CD:92:4C:79:FB
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3238383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:288::/45

    Signature Algorithm: sha256WithRSAEncryption
         77:23:9c:5c:75:30:77:9c:53:e8:62:cc:30:ab:40:69:bc:56:
         be:68:bf:1f:ff:6f:25:c9:79:74:ee:45:0b:d9:79:3e:89:55:
         21:aa:61:cb:cc:ea:f6:36:47:4b:24:81:1b:31:d6:a7:81:5c:
         77:82:59:bf:8e:f7:10:34:75:77:6c:bd:d6:34:5e:24:b4:13:
         ca:48:7d:9f:99:0c:97:38:cb:18:22:d3:67:ef:cd:64:c7:2c:
         ca:8b:c1:1f:2e:4a:40:bc:e6:9c:9c:b4:da:6f:66:53:59:ab:
         9a:7e:00:a7:23:7b:00:14:ee:79:56:27:16:66:d2:21:05:6c:
         a0:bb:92:ec:7f:b1:7d:36:0a:5a:13:4c:69:b9:3f:1b:3a:7a:
         40:3e:d2:ce:04:32:d7:58:ed:ae:2c:74:8c:e5:53:3c:12:1f:
         38:57:ae:cd:42:ff:56:97:99:d3:5d:1a:94:d1:1e:16:c1:24:
         02:98:99:7e:b9:1c:f4:b7:db:0b:6e:d2:01:cd:76:44:42:34:
         69:af:9d:53:09:a8:62:1d:8b:83:d9:a8:b3:90:5c:ed:fa:18:
         10:e0:b7:73:97:7a:61:40:a8:02:eb:14:88:89:af:26:a5:7c:
         21:dd:33:67:05:eb:e0:e1:da:c8:ea:6c:d0:c1:9b:84:c2:f9:
         fa:00:ef:14
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUerDQK+zBoSFhTvlX1SJpMatniLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDIxMzZaFw0yNTA4MjkxNDI2MzZaMDMxMTAvBgNV
BAMTKEE2OEMxRDE1NDg2QkU0NTE3N0QxQTRBRTFBN0EyQ0NEOTI0Qzc5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChlZPPcrZNcgYjHXQzH6fmQAkP
dr+8GV5lvn65AEDhpcTyXFKB3SuhWTT2+2Qqtsz8sQ8TGRgNyFg9Hn8qKh2c0Y0X
Q0CHFL+ZYjvpsy20cV3qfqlav+aDeubFqE6oLcY1z3TPt9Uo/wdxQkh34/25by7w
RIbwvnatzOLgJ9dBP9fqby12D+2cVlvQljaenwCP49gZ0ColAz1tGF+YCL7RupLe
oVebIHPWHL5FLo2W8MXd2GT04Q8I3MTS8wDs1V4CLF+RfbEDWqqZyeIK2s5r5WCf
m+xL3mDODfmghmNJrBHj2WkTbkRGEa/DjS+LE8QmtxUzWuS6ZbzY9Bwb9ba/AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUpowdFUhr5FF30aSuGnoszZJMefswHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzODMwMzQzYTM4MzczNzM0M2EzMjM4MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM3MzIzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBId0AogwDQYJKoZIhvcNAQELBQAD
ggEBAHcjnFx1MHecU+hizDCrQGm8Vr5ovx//byXJeXTuRQvZeT6JVSGqYcvM6vY2
R0skgRsx1qeBXHeCWb+O9xA0dXdsvdY0XiS0E8pIfZ+ZDJc4yxgi02fvzWTHLMqL
wR8uSkC85pyctNpvZlNZq5p+AKcjewAU7nlWJxZm0iEFbKC7kux/sX02CloTTGm5
Pxs6ekA+0s4EMtdY7a4sdIzlUzwSHzhXrs1C/1aXmdNdGpTRHhbBJAKYmX65HPS3
2wtu0gHNdkRCNGmvnVMJqGIdi4PZqLOQXO36GBDgt3OXemFAqALrFIiJryalfCHd
M2cF6+Dh2sjqbNDBm4TC+foA7xQ=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:24 2025 by rpki-client