Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/323830343a346438343a3a2f33322d3438203d3e20323638323031.roa
File:                     323830343a346438343a3a2f33322d3438203d3e20323638323031.roa (raw, json)
Hash identifier:          uC4J7wk9IQtnvxFa5gQoUQ85tSxlSRDmSLnR378ak9o=
Subject key identifier:   2C:01:FB:1B:69:9A:59:04:50:92:57:9F:E4:CE:31:BE:C7:D2:2D:34
Certificate issuer:       /CN=4F99615A0908E41E72A698BE51C999A6D53191C5
Certificate serial:       498A334BE6441107C0461FD1247E4CCC2971F962
Authority key identifier: 4F:99:61:5A:09:08:E4:1E:72:A6:98:BE:51:C9:99:A6:D5:31:91:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F99615A0908E41E72A698BE51C999A6D53191C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/323830343a346438343a3a2f33322d3438203d3e20323638323031.roa
Signing time:             Wed 03 Jun 2026 13:40:30 +0000
ROA not before:           Wed 03 Jun 2026 13:35:30 +0000
ROA not after:            Wed 02 Jun 2027 13:40:30 +0000
asID:                     268201
IP address blocks:        2804:4d84::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8a:33:4b:e6:44:11:07:c0:46:1f:d1:24:7e:4c:cc:29:71:f9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99615A0908E41E72A698BE51C999A6D53191C5
        Validity
            Not Before: Jun  3 13:35:30 2026 GMT
            Not After : Jun  2 13:40:30 2027 GMT
        Subject: CN=2C01FB1B699A59045092579FE4CE31BEC7D22D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:66:41:ed:ce:54:4c:7e:da:51:e3:e7:05:
                    3d:c8:ef:eb:89:66:d3:83:52:13:a5:3f:e1:2e:e5:
                    e3:07:c8:06:c4:03:03:79:f3:35:6c:e7:57:d3:a7:
                    af:7a:02:64:34:54:0d:5e:ad:ec:e2:cf:b6:5a:80:
                    c7:ce:8b:ea:e5:47:96:4a:9c:6c:9f:be:76:09:8b:
                    2b:e8:ab:c6:90:e7:07:b1:8b:61:fe:cd:17:6d:4e:
                    c9:78:0e:f8:32:77:29:fa:43:f7:44:eb:f8:a6:55:
                    2d:c5:41:97:5b:e5:8e:3a:7f:6f:a4:66:67:a6:11:
                    14:31:4d:9c:16:d8:fb:fd:27:bf:ee:c6:24:2c:a2:
                    06:fb:a6:18:e6:39:4c:c9:49:89:f2:3e:75:ed:aa:
                    23:93:1b:46:79:7f:f2:1c:56:81:47:75:e0:98:62:
                    7e:f5:46:c2:b7:2b:07:a5:fc:86:62:6e:cc:73:0d:
                    6e:25:b1:48:4b:0f:de:46:75:77:ba:84:d7:06:e9:
                    8d:24:cc:f0:48:8c:5a:1a:c9:cd:51:5f:2d:b8:68:
                    89:a3:e7:d7:80:8c:1a:05:8c:8b:e3:e4:fb:92:f4:
                    03:68:3e:74:8d:93:03:f7:69:2c:2a:41:62:57:17:
                    f4:33:40:62:7a:f9:72:42:02:77:7c:f1:21:0c:ee:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:01:FB:1B:69:9A:59:04:50:92:57:9F:E4:CE:31:BE:C7:D2:2D:34
            X509v3 Authority Key Identifier:
                keyid:4F:99:61:5A:09:08:E4:1E:72:A6:98:BE:51:C9:99:A6:D5:31:91:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/4F99615A0908E41E72A698BE51C999A6D53191C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F99615A0908E41E72A698BE51C999A6D53191C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/627HuAT9BthvsxYj9fMMzW6cG56h1QMfjUPg6PZJLYmW/1/323830343a346438343a3a2f33322d3438203d3e20323638323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:19:95:00:7e:9f:ac:cc:fe:e8:66:f0:8d:16:ee:39:fb:
         80:c2:9e:a1:75:bd:83:26:73:ed:ea:8c:d3:14:c8:9a:b2:ec:
         e2:0c:9d:18:e9:f3:2e:45:9b:3f:b2:9f:f0:8b:23:a0:22:3c:
         7e:c6:15:bb:1a:e8:38:5c:c9:83:bf:00:ba:0f:4a:89:5a:07:
         d8:1d:52:39:8e:9d:1f:72:85:be:5b:34:75:03:19:71:7b:0a:
         38:6e:af:b6:5b:3a:ec:0e:a8:d3:47:d4:d9:a7:11:2b:d3:bb:
         24:e1:41:7f:0a:4c:2a:b1:1f:47:aa:97:7e:35:56:40:1c:09:
         d7:75:b0:37:10:33:ba:b5:ac:48:a9:03:04:b5:2c:e0:1a:24:
         ae:f9:a2:41:1d:e5:0c:32:f5:6d:ac:88:7f:fb:28:20:16:5a:
         f3:ad:4b:1f:a4:d0:f8:2c:bc:1f:bb:44:77:ac:67:70:f6:c3:
         90:81:a0:44:9c:06:f4:98:b9:c9:b5:d8:13:d9:d7:36:33:b5:
         40:59:c4:0c:bf:c7:32:9c:72:89:75:a9:8b:1f:41:b6:f7:dd:
         cd:2d:ed:54:e6:53:56:35:26:b1:8b:51:eb:bd:d2:e9:1a:87:
         3d:7f:ea:17:a9:cf:7f:8c:87:b3:20:90:85:e6:2d:b9:47:c2:
         f2:e7:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:05 2026 by rpki-client