Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
File:                     323830343a333237383a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier:          vVP3GF0NsUih4gKv5eIi4+/OD2qg4ulBHhpShtg0CsI=
Subject key identifier:   33:D6:67:D8:41:FF:08:9A:30:68:00:29:A4:6A:4F:B6:97:CE:53:D0
Certificate issuer:       /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial:       3275C83289CB79C3DFA8EC4B155B4220A89DB748
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa
Signing time:             Mon 10 Feb 2025 17:25:09 +0000
ROA not before:           Mon 10 Feb 2025 17:20:09 +0000
ROA not after:            Mon 09 Feb 2026 17:25:09 +0000
asID:                     265080
IP address blocks:        2804:3278::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:75:c8:32:89:cb:79:c3:df:a8:ec:4b:15:5b:42:20:a8:9d:b7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
        Validity
            Not Before: Feb 10 17:20:09 2025 GMT
            Not After : Feb  9 17:25:09 2026 GMT
        Subject: CN=33D667D841FF089A30680029A46A4FB697CE53D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:52:d4:8f:b6:36:a6:0f:ce:89:b5:6a:fe:
                    42:ce:78:92:f4:b0:7a:0a:c7:52:ea:34:4c:a8:bf:
                    fc:7c:74:53:0f:83:8e:26:32:c3:80:9a:e0:f8:67:
                    09:65:54:01:2e:d5:7b:7b:63:b5:b4:c3:f4:95:ce:
                    df:58:b9:9f:b2:19:cd:81:f2:bf:ca:25:bf:50:ae:
                    16:63:ad:59:1a:12:c5:93:60:83:77:4e:5a:8c:c8:
                    23:c4:35:67:d1:92:36:ed:10:7a:e6:8f:33:55:cf:
                    90:78:38:e5:d1:53:7b:f9:ae:71:3e:d4:e6:32:c9:
                    be:ea:43:d4:4a:ba:dd:b6:4e:74:ca:92:04:65:bb:
                    a4:08:3d:71:11:83:37:a4:ac:21:d2:69:6f:81:3b:
                    f8:84:b1:79:5a:64:bb:d1:a3:f8:69:16:ff:d2:0a:
                    00:81:1f:1d:21:bc:ad:df:3c:89:03:d1:21:be:56:
                    cb:0a:32:b6:11:4c:da:f6:5f:d0:bf:49:56:cc:5d:
                    ff:62:7f:bf:b0:f6:04:9d:30:23:44:24:cc:e7:56:
                    8f:d0:1b:f6:f7:77:64:48:0c:e5:4e:db:4e:41:93:
                    44:16:1f:f7:35:a6:26:d5:58:d5:3f:c7:95:04:dd:
                    c1:70:f9:8f:c8:da:29:90:7e:07:80:96:a9:fd:40:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:67:D8:41:FF:08:9A:30:68:00:29:A4:6A:4F:B6:97:CE:53:D0
            X509v3 Authority Key Identifier:
                keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33342d3334203d3e20323635303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3278::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:76:12:44:34:ad:84:7c:86:d7:1e:19:d9:08:d2:01:1c:bf:
         a4:bd:4e:f6:25:31:d3:02:a7:b8:ad:e3:da:89:3f:9c:34:89:
         0b:1a:14:d2:66:b6:29:79:7b:60:79:20:46:f3:2f:d3:7a:cc:
         4c:1b:4b:03:a9:5f:90:0a:33:41:ab:5d:8b:40:7a:d2:37:9e:
         20:11:10:cc:0f:fb:25:0d:0d:9f:fa:c5:0d:bc:d8:89:39:fd:
         64:03:52:d4:d2:a7:ab:bf:fe:c2:92:32:1b:ab:fa:ca:1f:f6:
         89:04:8a:19:6b:d1:67:24:5b:da:4a:f4:43:51:6b:e4:f0:39:
         1c:e2:1a:1f:70:db:8a:ad:ce:bd:00:e8:20:d3:f5:a6:aa:ca:
         78:ae:84:38:ad:29:14:55:4f:38:84:fd:72:2a:a3:00:2e:88:
         67:c4:0b:1d:5f:4f:5a:42:2a:46:6a:f5:9c:e9:01:f3:2a:f3:
         a9:d2:7d:02:12:3b:1b:10:dc:c0:f2:12:66:46:1c:62:4f:aa:
         67:f7:f8:2d:95:d2:8d:4c:1f:7f:c6:77:cd:18:97:cb:a9:66:
         2e:4f:7f:c8:87:eb:59:7c:81:4d:6f:f0:38:27:0d:95:c6:99:
         76:33:e8:cd:c0:6c:17:12:0a:8c:3f:99:fb:86:11:07:0f:67:
         71:30:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:15 2025 by rpki-client