Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3332203d3e20323731363733.roa
File:                     323830343a376633343a3a2f33322d3332203d3e20323731363733.roa (raw, json)
Hash identifier:          DCmI3uAH6IOctpTW4zhjJ749X9nSMkWEhiAm9WZK2vY=
Subject key identifier:   62:39:8F:44:27:A8:82:7C:C7:7F:FE:B6:A8:B5:A6:F8:B2:17:50:B6
Certificate issuer:       /CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
Certificate serial:       6B9108E081464F41BD7B8455128EEFEF6A3CC4C6
Authority key identifier: DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3332203d3e20323731363733.roa
Signing time:             Fri 17 Jan 2025 18:14:00 +0000
ROA not before:           Fri 17 Jan 2025 18:09:00 +0000
ROA not after:            Fri 16 Jan 2026 18:14:00 +0000
asID:                     271673
IP address blocks:        2804:7f34::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:91:08:e0:81:46:4f:41:bd:7b:84:55:12:8e:ef:ef:6a:3c:c4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9F43AF1C5D6D4190A213B715CCCCD8870B214
        Validity
            Not Before: Jan 17 18:09:00 2025 GMT
            Not After : Jan 16 18:14:00 2026 GMT
        Subject: CN=62398F4427A8827CC77FFEB6A8B5A6F8B21750B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:7e:6d:40:eb:8f:7f:6e:c6:6c:b9:2a:33:
                    1d:b5:9c:40:82:88:ed:86:f1:51:c7:0a:87:54:44:
                    1c:c4:9e:af:23:a7:29:bf:9b:05:b7:73:23:c3:c6:
                    fc:44:9b:f6:2a:e9:76:46:c9:4a:74:e8:5b:40:e3:
                    d0:ca:d4:4e:f5:ec:c0:44:a7:71:5b:59:ec:b3:c3:
                    e7:af:ea:07:bc:86:8e:2b:1b:59:71:c4:eb:82:38:
                    b9:7b:78:75:f7:ef:41:d1:96:8c:ab:ce:79:55:fe:
                    a5:c6:5f:8d:3a:0b:01:0f:22:8c:94:d2:28:e7:f7:
                    a4:36:4e:df:9e:3e:79:69:c2:fe:9c:44:55:bd:55:
                    24:8d:5f:ba:14:7a:9c:62:6f:32:a3:03:92:bf:4b:
                    44:4f:44:ac:60:e8:e3:4d:77:51:ef:2e:1d:fb:20:
                    61:76:39:0a:58:bf:5e:b8:81:d9:45:db:22:d2:cd:
                    4c:86:18:23:18:ee:16:68:b9:73:b7:ad:fd:f7:d5:
                    55:ff:6d:cc:6f:d6:02:0a:93:2c:dc:9b:f0:18:49:
                    fc:2f:e8:35:99:c9:26:63:ed:07:62:0a:5a:e8:19:
                    51:61:9b:14:b4:bf:4d:f6:f0:f5:a5:9c:0b:84:71:
                    f1:e4:08:79:32:f0:ed:7e:5a:2c:96:34:84:ca:5f:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:39:8F:44:27:A8:82:7C:C7:7F:FE:B6:A8:B5:A6:F8:B2:17:50:B6
            X509v3 Authority Key Identifier:
                keyid:DB:A9:F4:3A:F1:C5:D6:D4:19:0A:21:3B:71:5C:CC:CD:88:70:B2:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9F43AF1C5D6D4190A213B715CCCCD8870B214.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/323830343a376633343a3a2f33322d3332203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:5a:27:02:ee:60:ea:ae:e7:bd:60:08:7b:87:5c:73:3e:14:
         c5:b0:41:d4:4c:0e:4c:17:9f:c0:63:20:70:0f:cf:c4:83:9f:
         10:e7:08:49:34:37:e8:43:98:1b:00:ed:1a:ad:a1:47:d4:26:
         0b:4d:87:f6:8b:29:bc:ae:17:75:54:80:04:ba:7b:2b:ca:33:
         a0:8b:07:10:44:6d:98:1e:37:26:01:d4:b5:43:e7:ac:2e:73:
         61:a8:e6:81:09:eb:e7:02:d2:c4:e1:93:b1:94:87:d1:ee:84:
         ef:d7:41:86:99:46:69:c1:e2:c2:0c:48:88:2a:e9:4c:99:ef:
         5b:b7:a1:20:f4:96:a8:64:76:f0:07:fd:a4:a9:b9:b6:4d:9f:
         23:17:02:91:da:75:35:cb:d9:56:4e:60:22:1e:dd:0f:af:29:
         3b:82:26:a2:de:9d:b7:e2:22:96:0c:fe:59:98:fa:2f:eb:e9:
         fb:a3:0a:df:78:8d:25:c6:a3:53:da:25:17:80:22:22:70:4b:
         e0:ff:7b:87:e4:42:8c:e6:13:17:ea:51:23:c0:33:29:3a:5d:
         7c:b0:a3:f7:35:8a:08:bc:a5:3e:a2:f8:c8:85:32:1e:fb:a5:
         bf:ee:f4:41:c7:e3:46:7c:7b:dd:5d:de:db:00:eb:80:c6:44:
         8a:8d:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:26 2025 by rpki-client