Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          m0bEpGcy7ORV7VBN892lHn4D/2o1vf9vSnXkIBoRjBI=
Subject key identifier:   62:E9:97:E1:7A:22:D3:5F:89:E1:7A:EC:1C:A7:E6:98:9F:94:1D:F8
Certificate issuer:       /CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
Certificate serial:       0E6FC0134B5FAA090B7E061E79BCF7B3ACF4C82C
Authority key identifier: FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa
Signing time:             Tue 27 May 2025 20:46:10 +0000
ROA not before:           Tue 27 May 2025 20:41:10 +0000
ROA not after:            Tue 26 May 2026 20:46:10 +0000
asID:                     61609
IP address blocks:        2804:87bc:dc04::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6f:c0:13:4b:5f:aa:09:0b:7e:06:1e:79:bc:f7:b3:ac:f4:c8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626
        Validity
            Not Before: May 27 20:41:10 2025 GMT
            Not After : May 26 20:46:10 2026 GMT
        Subject: CN=62E997E17A22D35F89E17AEC1CA7E6989F941DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:0a:77:23:67:04:93:2f:e2:d0:b9:bd:c3:
                    e6:f2:c9:2b:09:d0:7c:5f:6b:0d:98:4d:97:da:2c:
                    06:22:b9:4e:13:7c:a3:90:15:77:53:a3:fb:9a:de:
                    d4:4c:e0:b6:b5:29:9b:6e:2b:3d:f3:2e:fe:93:69:
                    c1:aa:24:34:df:d9:6a:02:69:38:14:f1:4e:16:4b:
                    0a:80:21:14:e9:64:17:7f:29:e3:7d:f5:54:56:d1:
                    07:b3:88:51:01:6a:a8:9f:da:af:bb:ff:b2:60:5e:
                    29:12:41:1b:2d:ea:b7:b8:d5:41:57:ba:73:50:0f:
                    89:e0:2b:a2:99:d6:3b:a0:f8:5e:0d:67:63:da:2c:
                    55:4a:64:1d:9c:15:56:48:f0:47:e8:fa:bc:fe:5c:
                    ed:c8:e5:74:0e:15:58:95:fa:06:2b:27:19:c1:82:
                    43:07:79:5d:09:10:9a:60:52:0c:5a:02:42:46:5c:
                    f8:9c:76:68:31:4b:f8:72:2f:2b:7c:15:13:c7:7d:
                    42:cc:e4:ac:4a:70:7a:20:1c:56:78:c9:0f:58:22:
                    50:f2:89:11:b3:be:38:a4:98:1d:0b:ee:11:de:b9:
                    56:0f:14:29:c3:e1:55:3b:f8:86:58:47:4e:f4:8a:
                    cf:f0:77:21:61:04:d5:ce:17:4a:09:32:a4:84:e2:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E9:97:E1:7A:22:D3:5F:89:E1:7A:EC:1C:A7:E6:98:9F:94:1D:F8
            X509v3 Authority Key Identifier:
                keyid:FC:B7:01:6E:B8:D9:F4:B1:CF:78:80:63:AA:A5:F7:04:BD:3C:96:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB7016EB8D9F4B1CF788063AAA5F704BD3C9626.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330343a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:dc04::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:00:48:9c:50:92:88:b1:61:b4:66:fb:4a:28:d2:22:e2:0c:
         96:9f:3e:c1:9f:a0:19:71:e2:a1:5d:76:c4:44:d9:c2:ac:82:
         96:ea:06:4d:10:e0:3b:05:12:3e:22:5f:a2:67:a2:53:85:21:
         1c:c9:a1:34:c5:c3:02:89:a2:0b:4f:28:95:e4:96:83:17:ec:
         a2:c5:10:9d:b3:3c:e6:b4:30:54:03:11:a9:07:cd:86:77:47:
         cd:0b:96:3a:10:68:8c:af:de:c8:02:77:d5:5d:37:be:c2:50:
         fe:65:01:e4:e9:8b:47:eb:53:52:c3:e7:95:2b:67:34:c6:64:
         1e:06:cc:83:c0:db:0d:80:ed:88:3e:16:83:86:c8:78:5f:49:
         69:2e:ca:bf:8a:c6:d9:2f:49:68:50:b1:55:39:56:f4:22:11:
         2a:35:b3:87:0d:a5:09:d2:b6:87:c8:c6:11:13:6a:75:96:53:
         0e:ec:46:a3:25:d4:32:32:d0:66:9e:90:73:4e:e0:32:14:b7:
         d2:0a:17:20:c5:13:eb:79:4b:38:cc:7b:6d:23:4d:a5:63:32:
         1f:b4:e3:35:5d:95:01:93:ff:47:17:4d:35:a4:57:23:57:ca:
         31:ef:6a:55:d7:7a:aa:ea:ba:5f:bd:5e:37:32:ba:02:91:37:
         3c:81:b6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:17:21 2025 by rpki-client