Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          R1qc40T/8nG3ZpIWK9VXiY0+t0a80IWJCNrNLQ7EckY=
Subject key identifier:   9E:1B:5C:5C:5A:7C:46:F1:12:72:0D:04:B1:7B:F7:E7:DD:44:44:64
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       49F15168951712DBDE755B62D71A1E876F5DE729
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:800::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:51:68:95:17:12:db:de:75:5b:62:d7:1a:1e:87:6f:5d:e7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=9E1B5C5C5A7C46F112720D04B17BF7E7DD444464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:f7:69:d5:be:fe:81:0c:c6:85:9c:3e:2d:
                    17:7c:94:5d:13:38:cd:c9:f8:d6:1d:d1:9f:dd:df:
                    6c:f0:18:7c:a9:6d:3a:9c:bf:ed:9b:b5:6b:fc:73:
                    f9:2c:34:a6:7b:0d:51:86:ad:69:40:b6:2c:f7:70:
                    61:f9:1b:fd:11:ea:f0:5d:69:f3:10:3c:18:ab:bc:
                    a7:01:af:10:25:e8:f4:0f:cd:eb:2d:d8:61:0d:62:
                    93:79:b6:5f:ef:83:ed:17:71:90:84:b2:1b:14:8e:
                    b1:a4:05:b7:8f:7b:73:93:51:6b:84:61:4b:57:b0:
                    25:82:d3:49:57:bd:c0:64:3e:43:7f:b9:eb:68:7f:
                    ce:7b:2f:df:ec:b7:bf:c4:30:62:9c:87:09:ef:69:
                    6a:86:04:ec:17:8b:8a:bb:dd:6b:8e:d2:e3:ce:35:
                    d5:9f:31:e0:2a:88:a7:b5:62:ee:7e:0f:32:5b:e3:
                    17:b3:08:64:b4:96:6d:af:9e:20:50:d3:31:94:ca:
                    82:f9:13:0b:81:cb:19:8b:70:09:f3:13:96:0e:44:
                    4a:2a:d3:69:04:c1:8c:3e:9e:ae:86:6e:77:d3:fe:
                    4d:18:18:11:e4:ab:9f:41:7e:49:ad:6f:e7:08:95:
                    4d:11:43:fe:68:20:ec:9e:52:62:fe:45:6c:68:d5:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:5C:5C:5A:7C:46:F1:12:72:0D:04:B1:7B:F7:E7:DD:44:44:64
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3830303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:d2:f5:82:82:59:bc:84:b6:28:d2:7f:26:cf:e8:33:b1:
         c8:0b:28:9d:88:e7:c5:06:5a:f4:f6:4d:9e:a2:70:32:f0:a0:
         81:f5:d1:e6:b2:d3:7b:5d:b2:d4:94:03:91:6c:0e:ab:fa:d0:
         6b:ec:67:d5:9e:0d:a8:65:bb:a7:59:1a:ad:fe:86:cd:93:38:
         f8:e8:9c:d8:eb:69:e2:fc:17:bd:1f:45:a3:e3:7a:72:db:9e:
         88:09:6a:c2:91:1d:3f:6c:a5:8a:a5:4e:73:78:67:5b:c4:80:
         5c:69:ba:ae:33:1b:3e:40:e3:93:bd:d7:23:19:4d:81:f9:c6:
         81:6b:3c:2c:33:8c:85:20:87:c0:08:4b:78:03:be:fe:87:ec:
         95:ca:e4:4d:f1:7c:dc:75:9e:2b:b6:29:33:7e:7b:19:28:56:
         22:ea:f7:94:b7:33:03:a4:5f:4a:63:19:20:3a:8c:ee:da:2e:
         a7:ab:d4:28:c6:2e:93:a7:ba:0f:c6:ee:df:c3:7f:66:24:8e:
         bf:20:28:2d:d6:51:1c:99:6c:81:96:f2:66:fa:92:62:9c:26:
         c9:95:68:0a:9c:6a:81:a0:ab:77:99:83:9e:29:1f:0c:a8:16:
         37:a3:27:7a:17:cd:27:5c:93:05:f3:a4:af:dd:ab:d7:20:14:
         e1:31:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:34 2025 by rpki-client