Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa
File:                     323830343a3665343a3a2f33322d313238203d3e20323632363132.roa (raw, json)
Hash identifier:          9GXYmgqq8Nu7UI/jwf23nWMx7eqGC8SLEEjEv2tUesE=
Subject key identifier:   BF:07:21:86:D6:38:51:E8:3B:03:B7:74:FF:88:6E:33:D5:A8:FF:88
Certificate issuer:       /CN=F5169FC8B63F4CF854DC6074714395B0E7B87D37
Certificate serial:       6504400566CC80CEE659565B9E015886AB2568E0
Authority key identifier: F5:16:9F:C8:B6:3F:4C:F8:54:DC:60:74:71:43:95:B0:E7:B8:7D:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa
Signing time:             Thu 04 Jun 2026 02:22:46 +0000
ROA not before:           Thu 04 Jun 2026 02:17:46 +0000
ROA not after:            Thu 03 Jun 2027 02:22:46 +0000
asID:                     262612
IP address blocks:        2804:6e4::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:04:40:05:66:cc:80:ce:e6:59:56:5b:9e:01:58:86:ab:25:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5169FC8B63F4CF854DC6074714395B0E7B87D37
        Validity
            Not Before: Jun  4 02:17:46 2026 GMT
            Not After : Jun  3 02:22:46 2027 GMT
        Subject: CN=BF072186D63851E83B03B774FF886E33D5A8FF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:82:9f:f7:c8:94:ff:22:6d:1a:b4:1d:bb:
                    d9:b3:fb:19:51:35:e5:53:64:b5:02:7f:5d:e3:23:
                    e0:d5:49:30:a6:2a:e8:69:0f:be:2a:c5:69:ca:5b:
                    d3:7c:eb:04:9b:0e:2a:ce:0b:27:a4:bc:13:a1:99:
                    75:5f:df:a9:ea:74:24:af:8b:e3:cf:de:3e:08:01:
                    a9:a5:6f:a6:34:fa:cc:68:c8:d9:cf:92:b6:b5:52:
                    c7:06:51:61:dd:94:bb:af:2c:22:0f:d7:fc:9e:f5:
                    24:92:0b:cc:8f:f4:f4:2d:d9:c8:4c:80:ce:7c:39:
                    1d:61:4d:7f:1d:c6:5f:47:9d:7d:70:66:38:53:dc:
                    39:fa:88:3c:b7:3f:fa:4e:17:d5:e7:39:bf:26:00:
                    26:35:55:c9:89:50:36:71:6e:00:f3:20:a4:78:a4:
                    54:88:a3:e4:1c:30:e0:f5:07:65:28:01:c2:36:24:
                    f8:12:7b:e2:cd:7d:55:04:10:b6:31:35:94:08:f0:
                    7b:47:ee:bc:4f:ab:49:68:88:e9:63:32:92:3c:db:
                    9c:65:ba:b1:a5:8e:69:8a:83:1e:86:69:6d:4c:f0:
                    4d:4f:a1:34:37:51:8d:a4:67:1c:42:cb:01:1b:ad:
                    73:d5:18:c5:ea:b2:65:16:67:d0:6e:97:1e:fe:26:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:21:86:D6:38:51:E8:3B:03:B7:74:FF:88:6E:33:D5:A8:FF:88
            X509v3 Authority Key Identifier:
                keyid:F5:16:9F:C8:B6:3F:4C:F8:54:DC:60:74:71:43:95:B0:E7:B8:7D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5169FC8B63F4CF854DC6074714395B0E7B87D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pkJd12NzyxnZPvRo7G4D3SJr7NB7TaxiQZWdgD9CN9T/1/323830343a3665343a3a2f33322d313238203d3e20323632363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:17:4b:9e:04:c1:40:a3:cd:b0:61:de:22:c2:f3:ad:76:
         46:a1:08:da:ce:4d:e8:1d:89:df:1b:e8:f1:a3:44:54:17:91:
         b2:7c:92:ee:89:fb:ea:08:bc:da:7e:7c:e0:b3:a7:ec:23:29:
         50:b4:ec:20:63:ca:f9:a7:0e:0f:4e:b3:f3:71:07:f3:d4:59:
         2d:45:39:e8:d0:78:f7:48:4b:04:c8:27:da:1d:1f:85:ca:b2:
         67:17:a4:88:9b:91:ae:b0:6a:8e:da:b5:eb:0b:69:00:28:c2:
         37:7f:6a:61:c4:98:2a:3c:f6:de:32:56:e6:e9:38:20:a6:65:
         df:a9:aa:e1:18:8b:5f:b4:22:81:4b:af:ab:57:02:0f:08:ce:
         19:85:8f:a4:9c:f1:34:4d:29:3c:16:bb:0c:97:1a:85:10:00:
         9c:f7:c4:65:e2:c8:26:c0:8a:3d:c1:02:8a:ee:bf:2c:ba:bc:
         a8:3a:88:32:f5:cd:b3:38:1c:9b:51:83:8c:da:70:ea:85:ab:
         96:cc:52:05:8a:22:2c:78:6d:65:89:1d:6f:f7:8e:07:64:11:
         bb:86:2b:ac:be:b6:38:ed:79:b3:51:c3:e1:d2:e2:3f:be:2f:
         64:4b:f9:8b:4c:9f:20:f9:65:06:57:96:df:52:82:83:c9:01:
         96:8f:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:34:11 2026 by rpki-client