Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/323830343a356364633a3a2f33322d3334203d3e20323638393335.roa
File:                     323830343a356364633a3a2f33322d3334203d3e20323638393335.roa (raw, json)
Hash identifier:          4Pb9sZkRkGVx4sk1XgA11FxA+slrxC0mF+tAby9uI48=
Subject key identifier:   B6:24:B9:0E:06:55:93:30:5A:81:6E:E6:71:05:80:B5:2B:0B:13:2A
Certificate issuer:       /CN=F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D
Certificate serial:       37CDE549C6A3ADA926EBF43455EB2B19D502C16E
Authority key identifier: F5:CF:AD:59:BC:46:F4:9D:51:44:D2:0A:BE:0E:99:FF:76:A8:AB:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/323830343a356364633a3a2f33322d3334203d3e20323638393335.roa
Signing time:             Tue 26 May 2026 15:18:16 +0000
ROA not before:           Tue 26 May 2026 15:13:16 +0000
ROA not after:            Tue 25 May 2027 15:18:16 +0000
asID:                     268935
IP address blocks:        2804:5cdc::/32 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cd:e5:49:c6:a3:ad:a9:26:eb:f4:34:55:eb:2b:19:d5:02:c1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D
        Validity
            Not Before: May 26 15:13:16 2026 GMT
            Not After : May 25 15:18:16 2027 GMT
        Subject: CN=B624B90E065593305A816EE6710580B52B0B132A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:8a:e5:05:91:18:1a:37:01:34:a0:9b:de:
                    c5:57:ed:fa:13:c4:9c:2c:f9:0c:cd:c3:92:93:b2:
                    30:b2:79:9d:90:15:30:df:8c:2c:e0:d9:f8:45:89:
                    03:4a:e1:b4:2b:df:8c:c1:8a:50:3e:45:ac:03:af:
                    1a:c5:48:42:66:f0:28:ad:c9:6e:04:8e:48:9e:fd:
                    ce:9f:65:db:70:95:55:2a:0c:15:7f:e5:e8:e9:08:
                    b2:7c:55:3c:e4:59:0b:1b:da:3a:67:60:22:de:2b:
                    94:40:39:3b:ee:1a:82:9b:89:cf:38:d0:7d:45:78:
                    0a:a7:54:b4:50:c8:b5:86:60:59:61:45:3b:6a:9b:
                    a4:60:6b:9f:21:4f:14:21:28:b7:b3:2f:a4:21:c8:
                    1d:d1:47:28:83:f4:89:e0:4e:54:5b:5c:0b:ec:62:
                    ff:11:bc:50:6c:e2:06:46:7c:89:64:27:ed:6b:9e:
                    bc:aa:45:be:6c:02:09:29:e1:30:d7:1d:91:72:4f:
                    68:06:92:ac:bd:8e:30:84:37:7a:3c:90:fd:cb:21:
                    25:ec:ac:76:ad:66:da:91:39:11:24:bd:ba:de:bf:
                    46:20:4b:5d:32:0a:18:b3:b8:85:83:74:9f:70:81:
                    a7:cb:bc:d0:61:33:dd:bc:79:5f:30:db:c8:b8:58:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:B9:0E:06:55:93:30:5A:81:6E:E6:71:05:80:B5:2B:0B:13:2A
            X509v3 Authority Key Identifier:
                keyid:F5:CF:AD:59:BC:46:F4:9D:51:44:D2:0A:BE:0E:99:FF:76:A8:AB:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5CFAD59BC46F49D5144D20ABE0E99FF76A8AB0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/323830343a356364633a3a2f33322d3334203d3e20323638393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:1d:79:f2:5d:a8:b5:b7:67:00:e8:76:c9:76:67:53:8a:
         90:3b:31:7e:ce:80:49:d4:64:11:af:51:1a:f4:39:61:6e:a2:
         81:e2:88:7d:73:53:2a:45:fe:59:cc:cb:f4:34:a1:30:95:23:
         d6:f7:83:ad:bc:da:b6:d5:33:40:39:e8:42:e5:03:53:54:b8:
         c9:c7:e9:08:ee:f6:a8:6d:9a:f4:34:29:10:ea:35:c6:db:4c:
         87:c7:35:2c:c7:67:a0:b6:1b:ed:01:3f:56:3a:9d:a2:4b:ac:
         54:24:4c:94:d5:65:d1:78:42:c0:6a:ef:6d:5b:1e:73:eb:27:
         7a:f7:2b:7a:7d:fd:26:7c:e8:fd:52:41:f4:64:c5:9c:2d:11:
         f7:78:8d:fe:5c:f1:67:9c:d4:03:b8:29:3d:e2:d1:83:b4:43:
         7b:8d:74:c0:27:ae:5d:e2:98:fe:7a:01:b3:0e:54:61:fb:6c:
         6a:89:5a:10:33:59:19:fb:14:87:6c:7a:9d:53:82:65:10:34:
         47:8e:0a:56:5e:77:da:a3:42:69:0d:4a:e4:09:db:b5:5d:1a:
         41:e5:f2:ba:fc:8e:c0:49:b9:08:db:10:62:26:4c:9b:d4:5b:
         ae:f6:ae:5b:34:46:37:d2:c5:e1:43:7c:28:c5:fd:67:85:69:
         b7:d9:38:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUN83lScajrakm6/Q0VesrGdUCwW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDRkFENTlCQzQ2RjQ5RDUxNDREMjBBQkUwRTk5RkY3
NkE4QUIwRDAeFw0yNjA1MjYxNTEzMTZaFw0yNzA1MjUxNTE4MTZaMDMxMTAvBgNV
BAMTKEI2MjRCOTBFMDY1NTkzMzA1QTgxNkVFNjcxMDU4MEI1MkIwQjEzMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWRIrlBZEYGjcBNKCb3sVX7foT
xJws+QzNw5KTsjCyeZ2QFTDfjCzg2fhFiQNK4bQr34zBilA+RawDrxrFSEJm8Cit
yW4Ejkie/c6fZdtwlVUqDBV/5ejpCLJ8VTzkWQsb2jpnYCLeK5RAOTvuGoKbic84
0H1FeAqnVLRQyLWGYFlhRTtqm6Rga58hTxQhKLezL6QhyB3RRyiD9IngTlRbXAvs
Yv8RvFBs4gZGfIlkJ+1rnryqRb5sAgkp4TDXHZFyT2gGkqy9jjCEN3o8kP3LISXs
rHatZtqROREkvbrev0YgS10yChizuIWDdJ9wgafLvNBhM928eV8w28i4WFStAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtiS5DgZVkzBagW7mcQWAtSsLEyowHwYDVR0j
BBgwFoAU9c+tWbxG9J1RRNIKvg6Z/3aoqw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRpSG8yQ2lBbjFyYVFiUXRnVHpSanJZMUJBM0RRcnA5a29MaFdEaFRl
V2MvMC9GNUNGQUQ1OUJDNDZGNDlENTE0NEQyMEFCRTBFOTlGRjc2QThBQjBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1Q0ZBRDU5QkM0NkY0OUQ1
MTQ0RDIwQUJFMEU5OUZGNzZBOEFCMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0aUhvMkNpQW4xcmFRYlF0Z1R6UmpyWTFCQTNEUXJwOWtvTGhXRGhUZVdjLzAv
MzIzODMwMzQzYTM1NjM2NDYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARc3DANBgkqhkiG9w0BAQsFAAOCAQEAGdcdefJd
qLW3ZwDodsl2Z1OKkDsxfs6ASdRkEa9RGvQ5YW6igeKIfXNTKkX+WczL9DShMJUj
1veDrbzattUzQDnoQuUDU1S4ycfpCO72qG2a9DQpEOo1xttMh8c1LMdnoLYb7QE/
VjqdokusVCRMlNVl0XhCwGrvbVsec+snevcren39Jnzo/VJB9GTFnC0R93iN/lzx
Z5zUA7gpPeLRg7RDe410wCeuXeKY/noBsw5UYftsaolaEDNZGfsUh2x6nVOCZRA0
R44KVl532qNCaQ1K5AnbtV0aQeXyuvyOwEm5CNsQYiZMm9RbrvauWzRGN9LF4UN8
KMX9Z4Vpt9k4lA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:54:59 2026 by rpki-client