Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa
File:                     323830343a336636343a3a2f33322d3333203d3e20323635383930.roa (raw, json)
Hash identifier:          kh5VSqEHe/v81QUADNPxZUfD/qbgHGa+vpc5kjoHDwA=
Subject key identifier:   45:31:30:55:2E:FC:E2:98:3C:D1:A2:33:91:A3:1D:20:64:8F:05:E5
Certificate issuer:       /CN=48371D8A71F513D0BC9AFE363CE1375BE738A71D
Certificate serial:       7AC9C7A7E6330302FF94D70E763BA2EED70D1E3E
Authority key identifier: 48:37:1D:8A:71:F5:13:D0:BC:9A:FE:36:3C:E1:37:5B:E7:38:A7:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48371D8A71F513D0BC9AFE363CE1375BE738A71D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa
Signing time:             Tue 15 Sep 2026 11:30:27 +0000
ROA not before:           Tue 15 Sep 2026 11:25:27 +0000
ROA not after:            Tue 14 Sep 2027 11:30:27 +0000
asID:                     265890
IP address blocks:        2804:3f64::/32 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c9:c7:a7:e6:33:03:02:ff:94:d7:0e:76:3b:a2:ee:d7:0d:1e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48371D8A71F513D0BC9AFE363CE1375BE738A71D
        Validity
            Not Before: Sep 15 11:25:27 2026 GMT
            Not After : Sep 14 11:30:27 2027 GMT
        Subject: CN=453130552EFCE2983CD1A23391A31D20648F05E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:43:67:e0:dd:0d:3a:89:42:05:39:6a:81:
                    17:91:f2:44:a2:5a:00:b7:a7:5e:38:13:86:8c:78:
                    c3:8b:f4:b2:b0:4e:19:d1:f9:5a:dc:61:ff:6f:27:
                    cf:84:6d:fa:d1:10:38:55:f8:cd:ef:25:cd:61:3f:
                    54:e5:57:ea:ff:cb:df:c0:70:c9:7d:12:d3:97:59:
                    24:f7:8a:b5:30:e2:8b:4b:78:51:15:27:04:c9:f0:
                    87:5f:91:bd:99:d9:f5:78:4d:64:b3:81:30:6a:64:
                    6c:21:d4:e5:a6:13:e9:0f:10:cf:1d:5b:e2:33:8c:
                    ee:53:6c:83:63:05:fb:af:16:7a:62:8b:1e:f4:57:
                    9b:e4:ab:40:e8:c8:78:21:ce:76:52:f0:1e:ec:90:
                    2f:0a:34:47:3c:37:c4:72:c4:0c:4e:6d:8d:35:ba:
                    42:ec:36:80:0b:ba:ac:46:c0:1b:57:6a:3e:a9:b7:
                    f7:ef:37:2f:ad:c5:2c:5e:3b:ef:0b:1a:8a:cc:10:
                    35:32:a7:cb:ed:1f:da:dd:c4:3e:e3:8c:5b:65:be:
                    30:a1:d9:8f:ae:89:27:44:83:7b:a7:db:58:91:97:
                    f0:30:6a:fb:05:5c:9f:02:58:6e:cb:be:0b:33:32:
                    d4:fd:8f:3d:52:34:b6:23:7c:06:6d:bb:77:ac:ae:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:30:55:2E:FC:E2:98:3C:D1:A2:33:91:A3:1D:20:64:8F:05:E5
            X509v3 Authority Key Identifier:
                keyid:48:37:1D:8A:71:F5:13:D0:BC:9A:FE:36:3C:E1:37:5B:E7:38:A7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/48371D8A71F513D0BC9AFE363CE1375BE738A71D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48371D8A71F513D0BC9AFE363CE1375BE738A71D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d3333203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:e0:a2:4f:9a:14:9f:bc:0a:c3:9e:3a:4d:e5:3e:71:09:32:
         ea:d7:a5:1a:c9:c4:00:10:75:cf:98:dc:d9:1c:92:9f:85:cc:
         dc:b5:42:3f:65:60:db:a0:23:f7:b5:79:2d:a9:7c:3f:e3:2a:
         60:9e:81:88:2e:f7:d6:8b:54:a8:b8:67:49:da:ed:ec:fe:3f:
         dd:a2:d6:0f:48:9c:6d:a6:02:ab:7f:cf:ef:4d:95:73:59:10:
         1c:e6:03:04:46:2f:c2:42:ac:86:79:04:56:0a:a3:4d:56:7c:
         51:be:8d:af:44:ff:29:0d:04:6e:f9:56:42:25:6e:dd:31:19:
         b1:a0:40:5e:b1:68:67:e3:7a:bc:3e:60:75:b1:59:fc:b6:74:
         b2:12:e0:39:ef:22:49:9e:5e:f5:02:18:8c:3d:cd:e5:aa:8c:
         08:6b:34:d4:9d:d2:2f:53:6a:5b:6f:24:fb:cf:a7:59:27:e1:
         ce:e7:11:ab:9d:73:67:63:8a:ef:83:48:36:f8:56:4f:10:cf:
         af:ef:db:8f:8f:c4:7a:7f:71:01:7a:3f:94:7a:f1:cb:67:c6:
         ed:e8:01:00:28:62:bf:68:cf:12:0d:cf:ed:79:eb:12:5f:51:
         cf:64:87:32:02:26:83:4e:b0:27:71:91:b8:eb:d1:75:f4:3d:
         86:e8:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:41:05 2026 by rpki-client