Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d3438203d3e20323734373239.roa
File:                     323830343a393262633a3a2f33322d3438203d3e20323734373239.roa (raw, json)
Hash identifier:          JP1lEoGmb3wNazXrPGFPqxfb7qlHLtX1/3NjDt20RBQ=
Subject key identifier:   26:2E:46:E9:39:CB:25:D9:5A:0C:FE:A8:DE:64:AD:25:54:AE:6E:AC
Certificate issuer:       /CN=4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC
Certificate serial:       4DBAB6F0B8E8A19F58E5AE25F27FE8057AFFE8F3
Authority key identifier: 4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d3438203d3e20323734373239.roa
Signing time:             Mon 13 Apr 2026 16:42:29 +0000
ROA not before:           Mon 13 Apr 2026 16:37:29 +0000
ROA not after:            Mon 12 Apr 2027 16:42:29 +0000
asID:                     274729
IP address blocks:        2804:92bc::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ba:b6:f0:b8:e8:a1:9f:58:e5:ae:25:f2:7f:e8:05:7a:ff:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC
        Validity
            Not Before: Apr 13 16:37:29 2026 GMT
            Not After : Apr 12 16:42:29 2027 GMT
        Subject: CN=262E46E939CB25D95A0CFEA8DE64AD2554AE6EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:82:b4:1f:31:98:30:79:99:97:11:01:de:
                    cf:ca:2f:06:55:55:0e:c2:db:e1:f4:15:16:c3:ad:
                    91:91:f2:99:cf:43:67:29:81:25:b6:88:1b:ad:31:
                    2e:e2:b0:a8:60:0a:6a:33:9b:7a:33:e8:bb:a0:e8:
                    1e:b4:68:3b:45:78:96:28:a8:ce:73:73:af:05:53:
                    1b:13:b9:c6:98:8d:53:5c:fc:5f:08:28:f9:47:27:
                    2f:01:05:12:c1:00:68:e0:78:88:36:73:a1:02:11:
                    19:04:c4:4a:b3:b8:7c:f2:86:2d:ea:c7:26:a6:41:
                    e8:a3:51:db:89:a8:a3:c4:a4:12:e6:36:d7:00:87:
                    9d:7c:81:af:de:c2:19:d6:77:79:b4:b6:8a:04:a3:
                    b7:5b:00:5d:53:76:a1:c5:e1:7c:51:94:77:26:e5:
                    cf:d3:1e:30:87:7c:50:76:56:60:98:60:6a:3c:6b:
                    85:40:c7:e8:f0:48:20:4f:6c:5e:b4:a2:bc:98:28:
                    75:e5:91:af:71:cc:37:16:82:9d:cb:32:5f:f6:3a:
                    d3:b4:d6:a3:97:1c:d6:97:3e:f6:80:ae:74:26:98:
                    15:e7:9a:12:53:78:20:26:b4:88:ac:97:cd:e1:b2:
                    3b:6b:98:93:77:30:c1:9b:49:83:2b:36:e8:60:b0:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:46:E9:39:CB:25:D9:5A:0C:FE:A8:DE:64:AD:25:54:AE:6E:AC
            X509v3 Authority Key Identifier:
                keyid:4D:33:C3:C8:64:AE:90:DA:C4:6E:AE:76:AC:D6:DE:9D:EB:EA:61:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D33C3C864AE90DAC46EAE76ACD6DE9DEBEA61FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/323830343a393262633a3a2f33322d3438203d3e20323734373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:c5:f8:0d:6d:d3:b8:00:39:f6:2d:51:6e:96:a2:22:83:
         69:e8:5c:f9:76:98:6e:b5:e1:ca:84:2a:37:37:a8:9d:4c:ce:
         d0:6c:18:5b:c2:5e:60:3d:71:f5:ab:63:b1:57:3e:4d:a4:fe:
         ff:2e:b0:38:2e:0f:74:b6:44:1d:4e:50:fd:c8:b5:ea:92:45:
         c4:8e:20:dc:ae:dd:b0:32:db:bb:98:0e:aa:94:3e:6d:9d:aa:
         74:8f:c7:18:96:07:ed:f5:2e:19:c8:b8:93:06:52:bd:e9:51:
         64:5a:2b:90:b3:04:68:7e:7b:8a:9f:05:4f:e2:d3:ce:f8:df:
         3a:5f:de:3b:e1:fb:f6:cd:a7:67:07:27:88:6e:fd:5e:d4:1d:
         67:53:cb:19:ce:de:8e:4a:f5:33:2e:33:8e:70:b1:13:3c:79:
         77:df:b9:90:e7:d9:05:5b:a4:3e:54:db:62:74:33:61:f2:56:
         89:73:22:63:b5:f9:d4:70:ac:af:23:5f:25:38:0e:55:f7:c7:
         4a:3f:7e:33:54:39:98:83:2c:bd:d6:ab:91:e7:93:8c:cf:ae:
         5f:d2:28:ca:04:8e:f5:e1:6b:38:98:f5:a0:05:62:d5:bf:0c:
         fd:02:de:6e:d7:ee:03:3f:c5:44:00:6e:7f:dd:84:52:27:2c:
         6a:8a:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:16 2026 by rpki-client