Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa
File:                     323830343a386638633a3a2f33322d3332203d3e20323733343937.roa (raw, json)
Hash identifier:          OegsrHrbQQpY2g9es0uffad5DwFhwzfyH/eaWRtZxHk=
Subject key identifier:   37:8C:D4:5F:B2:3E:98:38:65:A9:97:AD:60:2F:D3:3F:96:90:AB:58
Certificate issuer:       /CN=EBA12609A41810B238CACDE900F107B8CA74828D
Certificate serial:       3BDC5996AB1ACC6E4D5E8A5001812E8312F07725
Authority key identifier: EB:A1:26:09:A4:18:10:B2:38:CA:CD:E9:00:F1:07:B8:CA:74:82:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA12609A41810B238CACDE900F107B8CA74828D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa
Signing time:             Mon 22 Jun 2026 14:23:32 +0000
ROA not before:           Mon 22 Jun 2026 14:18:32 +0000
ROA not after:            Mon 21 Jun 2027 14:23:32 +0000
asID:                     273497
IP address blocks:        2804:8f8c::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dc:59:96:ab:1a:cc:6e:4d:5e:8a:50:01:81:2e:83:12:f0:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA12609A41810B238CACDE900F107B8CA74828D
        Validity
            Not Before: Jun 22 14:18:32 2026 GMT
            Not After : Jun 21 14:23:32 2027 GMT
        Subject: CN=378CD45FB23E983865A997AD602FD33F9690AB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:27:d1:b6:69:e4:94:1f:f9:58:4d:22:ad:
                    50:49:f9:da:a8:da:12:87:32:f6:e5:85:1d:bc:c4:
                    c9:82:78:4f:73:37:98:a1:e0:c4:cb:7e:4f:c1:0d:
                    29:29:0a:73:82:8a:66:52:37:17:4c:54:a4:a6:fa:
                    d1:c7:e6:90:36:46:4f:c8:d5:cd:6e:27:c6:f2:7d:
                    3b:c1:94:38:ac:cf:fd:af:c8:40:0c:2f:57:9c:70:
                    98:40:d9:8a:63:81:72:a0:1f:4f:5e:8e:6b:13:f8:
                    21:bc:4a:76:df:72:a0:e0:e4:e4:5a:8a:52:4c:fd:
                    be:f5:e5:19:a2:b9:80:b5:fa:25:ff:c5:58:f0:c4:
                    c6:97:91:0d:7d:8a:bb:07:72:6b:21:12:b6:b4:20:
                    a5:06:3f:9c:02:cd:d4:e8:4c:2b:71:5a:1c:86:93:
                    21:c9:23:bd:98:c7:dc:ba:3e:de:39:e4:b9:19:c2:
                    e4:91:2d:78:e3:95:c9:8a:b6:53:38:84:71:fe:19:
                    9e:e3:3d:50:68:46:a2:57:e9:1f:5b:f7:e7:76:5b:
                    90:29:fa:a6:f1:50:f8:18:7e:cc:f5:5e:00:f9:f7:
                    f6:9a:ff:5b:b4:46:78:c5:a8:b8:14:25:07:f9:c5:
                    1a:8c:cb:ad:8d:26:cb:2f:9d:96:b7:2e:c9:87:06:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:D4:5F:B2:3E:98:38:65:A9:97:AD:60:2F:D3:3F:96:90:AB:58
            X509v3 Authority Key Identifier:
                keyid:EB:A1:26:09:A4:18:10:B2:38:CA:CD:E9:00:F1:07:B8:CA:74:82:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/EBA12609A41810B238CACDE900F107B8CA74828D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBA12609A41810B238CACDE900F107B8CA74828D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a3a2f33322d3332203d3e20323733343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:a7:cf:2b:60:12:1d:6f:b6:24:2c:96:7e:52:83:c6:59:
         34:8f:b3:17:2b:da:1f:cf:db:36:52:97:b1:ff:0a:6c:6e:b6:
         b8:3a:ac:6c:ab:bb:27:77:d3:9a:36:67:21:5a:1c:36:11:34:
         4a:2d:12:6c:aa:d1:f8:70:57:1f:94:ab:10:9c:51:09:a8:ee:
         3d:34:0c:2b:ae:fa:bb:ca:bd:9e:9d:e2:42:63:45:56:72:e0:
         59:84:09:6f:68:33:6b:67:a4:c2:c2:66:c1:36:96:da:34:1c:
         83:fe:18:f7:bc:dd:ff:2c:82:d3:3a:59:29:5d:96:d1:f7:ff:
         8d:9f:70:bf:a6:1d:58:94:ab:7b:8f:de:c0:8c:19:74:1e:d2:
         d9:67:79:a3:7a:82:7a:7b:04:74:5e:01:11:7c:1c:ce:d3:83:
         da:c7:57:16:85:8f:ef:66:43:7a:11:8c:11:cc:c4:2a:8e:d1:
         fe:a7:46:e5:18:e6:f3:73:17:4d:84:19:e1:81:08:53:14:e8:
         27:72:02:f3:13:e2:6c:7d:b3:72:36:f2:40:b4:79:55:c1:42:
         9c:6b:d0:af:43:66:dc:fe:a0:ac:46:de:83:2a:38:8a:58:c5:
         bc:49:2e:9f:2e:a6:e2:06:9b:00:88:5f:da:e7:01:f4:58:59:
         56:86:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:15:51 2026 by rpki-client