Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa
File:                     323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa (raw, json)
Hash identifier:          DydHr5CFZcMEgwhufpXfHewBV+R5wJhkd4VFk0/iq60=
Subject key identifier:   76:55:7A:79:84:4F:40:18:D3:D0:1B:33:89:1C:26:7D:30:D3:48:BF
Certificate issuer:       /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial:       2FCDF4F5588A3377D645926A3417FAEB24AF66ED
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa
Signing time:             Fri 19 Sep 2025 01:54:10 +0000
ROA not before:           Fri 19 Sep 2025 01:49:10 +0000
ROA not after:            Fri 18 Sep 2026 01:54:10 +0000
asID:                     267469
IP address blocks:        2804:41f8:f303::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:f4:f5:58:8a:33:77:d6:45:92:6a:34:17:fa:eb:24:af:66:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
        Validity
            Not Before: Sep 19 01:49:10 2025 GMT
            Not After : Sep 18 01:54:10 2026 GMT
        Subject: CN=76557A79844F4018D3D01B33891C267D30D348BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:a8:9c:d1:4e:11:71:19:54:6e:1d:34:72:
                    c8:64:b6:ea:9e:7d:ee:82:1a:f6:f0:b4:71:41:c6:
                    8f:42:ab:a2:b2:4d:3c:86:cf:eb:49:22:a8:e6:68:
                    b1:0a:57:a3:0e:d7:1d:17:1d:f2:bd:46:7a:d8:7f:
                    4f:3b:8a:ed:16:b7:f9:c0:c0:e7:3a:ce:53:f0:d5:
                    2d:00:d8:41:e1:38:7d:09:d7:c0:68:9e:b1:db:44:
                    67:16:fa:50:6c:26:2e:99:18:be:82:77:db:92:66:
                    50:34:77:42:6b:9a:51:32:8e:bd:34:b8:17:0b:80:
                    9a:2f:f6:a9:84:b9:06:ac:71:d1:46:0c:70:1e:ac:
                    6f:94:fb:80:7a:5c:59:5f:43:55:35:4a:f4:63:6b:
                    6a:38:d5:9d:bc:b9:41:6c:d5:d9:5c:42:3c:3e:46:
                    0a:e2:e3:bf:0e:e3:87:f4:17:cc:22:55:5b:eb:b8:
                    e9:3e:1c:a5:f6:d7:46:21:3b:57:dc:e1:e8:f5:64:
                    78:3f:3e:0e:c0:3d:dc:b2:da:e2:24:53:aa:7b:9b:
                    30:2c:ea:e9:28:10:be:98:c1:40:ec:c9:e3:30:59:
                    2a:fc:33:1f:45:95:75:cb:fa:46:00:fc:10:31:56:
                    5f:8c:38:7a:87:d7:9a:1f:a5:22:5b:64:5e:32:8f:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:55:7A:79:84:4F:40:18:D3:D0:1B:33:89:1C:26:7D:30:D3:48:BF
            X509v3 Authority Key Identifier:
                keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330333a3a2f34382d3438203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f303::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:42:b1:e5:b8:41:81:ff:89:93:80:3c:31:23:a4:31:ef:
         7e:59:c3:95:44:de:6b:d6:d6:50:80:43:41:a2:b1:bb:a6:cd:
         bc:04:6e:c1:6b:44:c9:c4:b3:26:24:e8:f5:35:45:33:7e:da:
         4c:c7:94:a8:a6:2c:4f:a1:e0:23:09:40:fd:1d:a8:d2:e8:f9:
         66:2c:f2:07:99:19:6c:e4:66:7b:87:08:61:63:6f:31:4c:c6:
         1e:bc:df:3b:6d:fc:f9:7c:00:d9:9d:03:dd:4d:81:b5:9a:af:
         e2:de:da:c9:0c:c3:1a:f8:49:1c:1c:3a:e8:a6:23:6e:d5:b7:
         97:8e:10:5e:eb:76:f2:5c:79:cf:ca:89:f0:be:38:29:b4:3f:
         6c:38:f6:cc:d9:0c:c4:95:04:d7:5e:ba:3a:d8:da:6a:4e:d9:
         39:5b:09:94:54:00:c8:ee:05:93:83:c4:1e:00:2d:f3:06:e8:
         1f:4a:f5:1b:96:48:bb:5e:39:e2:67:07:f1:95:cc:e1:ae:75:
         e1:51:6d:fd:9d:aa:c6:56:b2:6a:ac:d1:11:fc:ee:17:f0:d5:
         a5:ea:db:f4:00:a9:d0:4e:42:5a:78:94:c0:06:9a:8d:d1:be:
         8c:e7:27:cb:cc:ee:1a:b9:2e:e7:6a:a9:0a:e0:84:44:64:73:
         b9:70:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:27 2025 by rpki-client