Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e20313336393037.roa
File:                     323830313a38303a65303a3a2f34382d3634203d3e20313336393037.roa (raw, json)
Hash identifier:          CwmaYgqszXKuM+UXjvlTFcgv9S9NU0FtfzmJ08u4ErY=
Subject key identifier:   2E:7C:2A:5A:D6:57:A1:23:87:2C:3B:BF:48:82:24:98:0C:60:46:B3
Certificate issuer:       /CN=9035FAE529E5A5E055FE491F5D4582556528596C
Certificate serial:       122F31EA13EA9EFB87CC939A6009A5AD295D4997
Authority key identifier: 90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e20313336393037.roa
Signing time:             Mon 01 Jun 2026 14:47:31 +0000
ROA not before:           Mon 01 Jun 2026 14:42:31 +0000
ROA not after:            Mon 31 May 2027 14:47:31 +0000
asID:                     136907
IP address blocks:        2801:80:e0::/48 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2f:31:ea:13:ea:9e:fb:87:cc:93:9a:60:09:a5:ad:29:5d:49:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9035FAE529E5A5E055FE491F5D4582556528596C
        Validity
            Not Before: Jun  1 14:42:31 2026 GMT
            Not After : May 31 14:47:31 2027 GMT
        Subject: CN=2E7C2A5AD657A123872C3BBF488224980C6046B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:ad:12:49:82:a5:7c:4b:3b:8d:5c:78:36:
                    81:8e:e7:e4:f5:06:ba:8a:8e:36:8a:20:98:32:e5:
                    48:c0:ba:f0:cf:06:e0:9e:ef:fa:1a:c0:10:4f:a5:
                    68:6c:6a:ff:a3:7a:bc:7e:18:93:94:31:c0:f3:67:
                    2c:76:5e:80:51:82:91:70:22:3a:d5:48:0f:89:ab:
                    29:9e:08:3e:06:e7:89:5f:10:ae:19:36:3e:4a:0b:
                    33:d7:f0:31:d1:36:f6:91:2e:f9:d5:e0:7d:1a:34:
                    7e:00:a3:ac:c8:0b:f7:76:5b:cd:99:d7:35:7e:de:
                    76:cc:a0:f5:e4:2e:04:ea:94:63:4f:28:3a:6f:62:
                    07:25:22:d9:f6:13:fd:fb:a8:4c:85:39:cc:25:08:
                    77:af:85:16:dc:30:ab:de:d1:b6:f0:6f:d4:e5:6b:
                    5f:60:cd:ba:75:12:98:bc:14:87:09:73:6e:9c:c6:
                    0f:21:e3:54:87:44:14:8c:2b:b1:62:c3:30:af:f2:
                    2c:93:06:e8:2b:d5:2a:46:bc:62:2b:73:c3:df:e9:
                    8e:25:42:b3:c5:81:21:f0:fd:3d:22:75:89:7a:d8:
                    9b:c0:28:b1:16:1a:c4:61:43:f6:99:cd:90:18:2e:
                    b8:15:c6:ca:9f:7d:31:76:22:b1:e8:58:46:e5:73:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7C:2A:5A:D6:57:A1:23:87:2C:3B:BF:48:82:24:98:0C:60:46:B3
            X509v3 Authority Key Identifier:
                keyid:90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/9035FAE529E5A5E055FE491F5D4582556528596C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e20313336393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:98:5a:69:6d:d3:da:d1:2b:50:90:94:1d:c4:cf:94:0b:
         1c:b4:30:1b:96:10:0a:c7:65:0b:b9:fd:74:e6:86:60:fb:c0:
         bc:c3:21:8c:d2:d5:83:b8:6f:f1:bd:1a:2b:50:6c:10:18:1e:
         8b:10:a0:d7:3d:f9:a6:0e:08:b4:29:29:7b:9e:06:b7:00:b6:
         98:b2:d9:db:c8:64:da:8b:31:a4:1e:3e:25:53:cd:97:de:43:
         6a:34:60:1b:fb:dd:b7:1e:ca:8d:9e:d3:bb:70:99:12:08:ff:
         b6:18:ba:7c:8b:f0:f1:e8:15:34:e9:88:a9:ba:b1:a2:8b:a0:
         52:94:f0:a1:fb:60:9f:17:52:53:e4:d1:87:38:c2:b6:2c:70:
         a3:5d:e6:90:53:36:15:2c:11:55:5d:6d:9c:d9:d1:15:7f:79:
         0d:d3:20:73:e9:35:13:b0:b1:f5:0a:1b:c6:ca:dd:96:88:2b:
         a6:28:86:82:c4:ca:98:64:21:d8:87:ab:7f:49:3b:92:e5:d3:
         ba:30:b9:91:e1:09:d5:48:9c:c7:43:6b:35:19:33:73:a2:d3:
         3a:0a:6d:b6:f7:9d:ef:7c:13:d3:3e:f5:88:3b:8a:57:41:7d:
         36:4c:08:34:fc:23:91:b4:d1:06:6a:1d:61:ef:92:9e:41:88:
         98:0a:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:18:07 2026 by rpki-client