Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
File:                     323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (raw, json)
Hash identifier:          Nw++EEXKgE1lxIwFJGKG+kk8EAg3u5dzM127xWF9880=
Subject key identifier:   3C:2A:CB:31:7F:46:6C:B6:97:73:2A:A7:8B:13:3E:7B:9C:D0:B0:7A
Certificate issuer:       /CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
Certificate serial:       656B0A3A6D700A4906332AFB614926C7DB3C08DF
Authority key identifier: A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
Signing time:             Fri 27 Feb 2026 14:32:03 +0000
ROA not before:           Fri 27 Feb 2026 14:27:03 +0000
ROA not after:            Fri 26 Feb 2027 14:32:03 +0000
asID:                     273311
IP address blocks:        2804:8c88::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:0a:3a:6d:70:0a:49:06:33:2a:fb:61:49:26:c7:db:3c:08:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35142C9CC2E829537680E680EFBF8C64BFBDF74
        Validity
            Not Before: Feb 27 14:27:03 2026 GMT
            Not After : Feb 26 14:32:03 2027 GMT
        Subject: CN=3C2ACB317F466CB697732AA78B133E7B9CD0B07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:c9:7e:b4:c4:76:1e:7b:70:0d:b0:9d:0b:
                    ec:13:8c:e0:fe:62:c3:0b:4d:54:59:2f:0c:56:f8:
                    61:03:94:16:8f:3b:c2:21:86:3e:da:c3:7e:3e:63:
                    1a:8b:32:72:61:ca:c0:ea:b0:97:5f:06:e5:cb:df:
                    ac:1f:19:98:6b:fc:76:30:7e:0a:95:39:ac:bc:31:
                    9c:f7:3c:d5:da:2c:d8:a7:74:a7:4e:fb:5f:ff:6c:
                    30:d1:ca:57:0b:f1:ba:a9:ac:a3:b0:67:da:78:1f:
                    7a:1e:77:20:8c:aa:ef:30:36:20:db:22:62:03:e7:
                    a4:0a:dc:aa:3f:7a:a6:82:b6:f9:3f:22:4e:98:88:
                    05:3a:0a:30:8a:40:67:8d:4e:72:59:59:71:1b:97:
                    97:ca:79:5b:d9:84:3e:0b:25:4e:c5:30:bf:07:e4:
                    6e:33:4a:a1:83:c8:0f:11:e9:e2:c7:4f:6f:93:bb:
                    a6:53:f2:3f:06:d4:bb:ca:73:18:3e:ac:f9:5c:73:
                    8d:f9:a2:aa:a8:68:0f:a5:8e:ea:94:95:8c:a4:eb:
                    99:56:1b:24:0c:ed:6b:35:db:65:1c:42:fc:f9:34:
                    8f:a0:47:eb:10:cb:13:bc:0e:1d:44:7a:ce:19:57:
                    e1:8f:20:d7:dd:fa:d3:f6:17:d4:32:5f:83:2d:f6:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:CB:31:7F:46:6C:B6:97:73:2A:A7:8B:13:3E:7B:9C:D0:B0:7A
            X509v3 Authority Key Identifier:
                keyid:A3:51:42:C9:CC:2E:82:95:37:68:0E:68:0E:FB:F8:C6:4B:FB:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/A35142C9CC2E829537680E680EFBF8C64BFBDF74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35142C9CC2E829537680E680EFBF8C64BFBDF74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:f1:81:82:99:de:9f:f3:4d:79:46:9a:b0:e5:76:65:e0:ce:
         dc:1b:42:57:72:9a:10:03:73:fc:eb:cf:b3:72:a7:2b:4a:74:
         d9:0b:65:c3:08:88:b7:9b:45:50:d1:d6:02:01:cf:ad:50:4b:
         cb:58:3f:6a:81:aa:3e:b6:e2:87:b5:e5:67:6d:de:c9:a3:84:
         d8:83:64:d5:b1:86:40:b8:d8:5e:9f:00:fd:80:db:f8:65:5a:
         45:d6:69:17:2c:69:56:b4:b5:ce:9e:9e:ba:41:70:8d:91:cc:
         2a:6c:aa:50:b6:c8:51:8e:34:eb:fb:1a:b6:0e:b4:be:e8:0f:
         99:81:e2:64:2c:88:94:44:b9:a2:33:da:90:9f:ed:07:ad:c9:
         e4:d8:97:69:79:b1:bf:3a:a3:44:1d:5d:81:fd:67:ed:cd:1d:
         ca:62:d3:28:78:fe:47:fb:b7:62:b3:8f:53:5c:94:05:09:fe:
         d7:de:c2:23:2d:da:cc:44:40:cc:87:f0:18:8c:52:33:a6:6c:
         ae:1a:7e:a5:cb:35:68:99:ed:f0:04:12:0e:99:d9:2f:3f:ce:
         2b:2a:e8:62:a8:18:ca:f1:00:70:c9:36:21:1e:43:a8:70:82:
         b4:45:22:4a:3d:3a:04:3b:0e:c4:4e:ff:b3:b8:cf:6c:50:f7:
         52:71:cc:df
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZWsKOm1wCkkGMyr7YUkmx9s8CN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1MTQyQzlDQzJFODI5NTM3NjgwRTY4MEVGQkY4QzY0
QkZCREY3NDAeFw0yNjAyMjcxNDI3MDNaFw0yNzAyMjYxNDMyMDNaMDMxMTAvBgNV
BAMTKDNDMkFDQjMxN0Y0NjZDQjY5NzczMkFBNzhCMTMzRTdCOUNEMEIwN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0cl+tMR2HntwDbCdC+wTjOD+
YsMLTVRZLwxW+GEDlBaPO8Ihhj7aw34+YxqLMnJhysDqsJdfBuXL36wfGZhr/HYw
fgqVOay8MZz3PNXaLNindKdO+1//bDDRylcL8bqprKOwZ9p4H3oedyCMqu8wNiDb
ImID56QK3Ko/eqaCtvk/Ik6YiAU6CjCKQGeNTnJZWXEbl5fKeVvZhD4LJU7FML8H
5G4zSqGDyA8R6eLHT2+Tu6ZT8j8G1LvKcxg+rPlcc435oqqoaA+ljuqUlYyk65lW
GyQM7Ws122UcQvz5NI+gR+sQyxO8Dh1Ees4ZV+GPINfd+tP2F9QyX4Mt9kAlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPCrLMX9GbLaXcyqnixM+e5zQsHowHwYDVR0j
BBgwFoAUo1FCycwugpU3aA5oDvv4xkv733QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHozeWlqRDFCQmhpU0ZQN2RXOEZzR2hzTTNGckZ2RW1ETDljQmFtSlJI
VEMvMC9BMzUxNDJDOUNDMkU4Mjk1Mzc2ODBFNjgwRUZCRjhDNjRCRkJERjc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzNTE0MkM5Q0MyRTgyOTUz
NzY4MEU2ODBFRkJGOEM2NEJGQkRGNzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR6M3lpakQxQkJoaVNGUDdkVzhGc0doc00zRnJGdkVtREw5Y0JhbUpSSFRDLzAv
MzIzODMwMzQzYTM4NjMzODM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASMiDANBgkqhkiG9w0BAQsFAAOCAQEAx/GBgpne
n/NNeUaasOV2ZeDO3BtCV3KaEANz/OvPs3KnK0p02QtlwwiIt5tFUNHWAgHPrVBL
y1g/aoGqPrbih7XlZ23eyaOE2INk1bGGQLjYXp8A/YDb+GVaRdZpFyxpVrS1zp6e
ukFwjZHMKmyqULbIUY406/satg60vugPmYHiZCyIlES5ojPakJ/tB63J5NiXaXmx
vzqjRB1dgf1n7c0dymLTKHj+R/u3YrOPU1yUBQn+197CIy3azERAzIfwGIxSM6Zs
rhp+pcs1aJnt8AQSDpnZLz/OKyroYqgYyvEAcMk2IR5DqHCCtEUiSj06BDsOxE7/
s7jPbFD3UnHM3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:45:10 2026 by rpki-client