Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3430203d3e20323731333236.roa
File:                     323830343a373963343a3a2f33322d3430203d3e20323731333236.roa (raw, json)
Hash identifier:          sN7/6C/74OComnFq7aXeJXw6iqlintnTUDwndBpPemM=
Subject key identifier:   30:6B:5B:49:E8:0C:95:0C:63:CE:49:20:BC:5D:8A:54:CF:CF:61:43
Certificate issuer:       /CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
Certificate serial:       34ACEBCD3FF3B2C10AFD830B7FF157A793A5DBB1
Authority key identifier: E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3430203d3e20323731333236.roa
Signing time:             Sat 30 May 2026 02:22:01 +0000
ROA not before:           Sat 30 May 2026 02:17:01 +0000
ROA not after:            Sat 29 May 2027 02:22:01 +0000
asID:                     271326
IP address blocks:        2804:79c4::/32 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:eb:cd:3f:f3:b2:c1:0a:fd:83:0b:7f:f1:57:a7:93:a5:db:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
        Validity
            Not Before: May 30 02:17:01 2026 GMT
            Not After : May 29 02:22:01 2027 GMT
        Subject: CN=306B5B49E80C950C63CE4920BC5D8A54CFCF6143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:9c:0d:b2:ed:21:20:5a:86:61:66:89:8e:
                    46:0c:13:40:22:c1:ec:90:38:02:0e:54:28:df:aa:
                    f3:59:16:9d:c5:6c:01:20:9e:cb:8d:68:be:0f:1b:
                    d0:32:9a:3c:91:55:94:d2:b0:d9:cc:50:d2:f5:02:
                    7d:48:22:d0:07:7a:8a:25:85:45:54:7c:21:86:ea:
                    6c:86:ad:20:25:8f:58:4e:ca:ce:5d:6f:97:3c:58:
                    ef:ff:64:09:30:9c:30:d2:f9:a2:34:a7:c6:60:e4:
                    8f:17:1a:13:6f:35:58:fc:1e:e6:ad:04:4d:6a:6f:
                    0b:8a:07:fa:fe:21:dd:c7:db:30:e8:e4:1b:91:a8:
                    c6:ed:15:e3:3d:f9:8b:ca:4f:6b:35:67:b5:d2:11:
                    f6:df:6e:f9:f5:ef:ef:61:39:d4:b9:aa:72:a4:f4:
                    d6:15:43:e8:f1:bb:7a:53:ba:6e:ce:a5:ee:11:19:
                    6a:fa:b8:a9:ea:14:16:80:41:bf:e8:e1:8e:c1:86:
                    6d:c2:85:bf:5b:f6:e4:50:1d:54:34:89:85:d1:ab:
                    d4:cc:16:2b:c6:0b:7d:73:c1:7e:c9:71:85:bf:f3:
                    08:9b:a6:53:8e:ee:b9:7d:18:42:10:81:11:31:a9:
                    c5:50:c5:14:e9:09:e9:fe:00:00:88:93:cb:33:86:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6B:5B:49:E8:0C:95:0C:63:CE:49:20:BC:5D:8A:54:CF:CF:61:43
            X509v3 Authority Key Identifier:
                keyid:E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3430203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:4e:a8:de:4a:61:ad:fa:b0:a5:a1:28:fd:d7:0d:7a:ba:
         eb:9d:b0:8f:dd:83:b6:b2:3c:7e:d2:19:71:64:d5:04:a9:dd:
         27:97:98:0e:75:34:0a:e2:4c:90:02:ad:42:93:3e:70:f9:9a:
         16:cb:7f:7f:c4:f4:ea:a0:35:95:8e:cc:9c:78:e0:08:ce:ee:
         d9:10:a7:b8:28:aa:a9:90:a4:e0:83:8c:5a:41:d2:35:e2:f4:
         5b:cc:f6:dd:fd:5c:c5:65:2b:01:4b:03:a5:a3:65:cc:3d:db:
         2a:5f:d3:a6:95:4c:89:da:da:92:38:f6:70:2a:64:bb:d7:87:
         73:6a:da:a7:fa:61:bc:f4:e9:56:b2:8f:d1:23:e3:a8:1a:af:
         57:97:e8:da:88:c3:ce:73:8b:40:e9:95:9b:ad:c7:89:98:0e:
         c2:d2:d3:f1:90:32:1f:17:8a:43:ed:9c:2c:0e:2c:e9:02:e2:
         f3:f6:02:bb:dc:80:d4:dc:c7:be:38:cf:a5:00:44:99:77:d7:
         4d:da:fe:f3:bb:1d:26:8f:e5:3b:e5:ee:34:fc:6f:40:ab:08:
         a3:a7:df:b1:2f:d5:e4:1b:a8:68:91:6d:24:94:b0:d9:03:1a:
         2a:e5:a7:e6:4f:db:4c:25:c6:ee:9d:ca:5e:09:05:8e:51:9a:
         97:cd:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:20:57 2026 by rpki-client