Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa
File:                     323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa (raw, json)
Hash identifier:          xRRDsSA/OvTWXSDbLl85ek5E+SoT5Yfy8MNBruXoR4s=
Subject key identifier:   E7:7A:AE:83:2B:2F:A5:52:39:E0:46:AE:18:CE:C9:02:A0:4A:5D:9E
Certificate issuer:       /CN=9035FAE529E5A5E055FE491F5D4582556528596C
Certificate serial:       563B0F176CF350C47787B1BBE45849B7C7DC1B06
Authority key identifier: 90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa
Signing time:             Thu 28 May 2026 14:47:31 +0000
ROA not before:           Thu 28 May 2026 14:42:31 +0000
ROA not after:            Thu 27 May 2027 14:47:31 +0000
asID:                     53215
IP address blocks:        2801:80:e0::/48 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3b:0f:17:6c:f3:50:c4:77:87:b1:bb:e4:58:49:b7:c7:dc:1b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9035FAE529E5A5E055FE491F5D4582556528596C
        Validity
            Not Before: May 28 14:42:31 2026 GMT
            Not After : May 27 14:47:31 2027 GMT
        Subject: CN=E77AAE832B2FA55239E046AE18CEC902A04A5D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:cc:03:39:95:6c:d4:3b:4a:75:48:34:9f:
                    8c:75:c7:a7:89:16:46:73:ea:09:18:70:76:65:55:
                    c1:3b:f5:9a:1f:ba:c0:a7:4e:77:ea:5a:d0:bb:30:
                    49:03:17:86:f9:6d:bb:86:20:fe:d1:70:e1:b0:7c:
                    ea:5c:83:90:af:6e:3c:87:ae:df:42:01:6f:6c:9b:
                    77:d8:39:73:a5:21:e3:0e:a0:e4:7a:5c:15:0c:9d:
                    c4:a6:61:36:e1:1e:16:23:79:d2:e0:74:18:a2:72:
                    94:bf:41:64:29:79:e4:13:1c:62:a3:8b:7c:03:36:
                    78:69:b4:d7:24:2a:ad:a5:7f:64:73:3c:2f:0d:13:
                    02:71:a4:66:c0:74:6a:d4:44:8b:eb:40:82:41:f2:
                    e0:18:8d:0d:6a:0f:c9:d3:63:8d:76:be:fd:c0:f2:
                    8a:39:a0:77:c6:c8:7f:6b:72:5e:ee:a1:aa:30:59:
                    36:b2:61:78:aa:23:25:53:16:51:36:a9:de:b3:d9:
                    44:25:4a:b7:ed:21:cb:8d:70:5d:d7:ee:1d:39:94:
                    d5:cf:07:97:e4:11:b3:80:0a:2d:59:9a:d9:7a:1c:
                    9f:7c:fc:33:dc:19:82:12:11:ed:d6:d1:69:9d:45:
                    a1:5e:81:1a:f3:e2:97:a7:6e:98:5c:7e:77:31:73:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7A:AE:83:2B:2F:A5:52:39:E0:46:AE:18:CE:C9:02:A0:4A:5D:9E
            X509v3 Authority Key Identifier:
                keyid:90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/9035FAE529E5A5E055FE491F5D4582556528596C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:13:81:d2:0f:31:8d:4b:b7:c2:38:ee:d8:bf:1a:7c:f6:
         f0:d2:b7:09:4c:77:10:10:99:73:53:5c:dc:b6:32:a6:2c:74:
         0d:dd:b1:ec:c2:a6:8e:c7:7f:e1:97:b3:81:de:98:32:e3:db:
         95:9d:3f:7f:c3:c2:ba:3d:12:f8:ea:fa:d0:79:c0:f4:77:69:
         46:f7:f6:37:95:f1:b8:70:ac:ae:2b:04:8f:fc:4e:e4:eb:e3:
         ba:d8:54:ec:f3:36:85:8a:2b:d7:b1:08:65:e1:18:3a:4e:5e:
         89:e1:1a:3a:c1:de:93:81:03:ab:f3:29:a1:5d:a9:67:35:3d:
         ae:67:3f:f9:45:72:b8:53:1d:26:1c:b6:c2:8e:a8:bc:b7:e6:
         e8:29:d3:41:48:77:c0:dc:66:62:fd:62:c1:04:5f:31:52:f0:
         89:31:15:3c:c2:49:49:13:60:8d:f1:2d:c1:b7:d4:dd:90:4e:
         de:9f:54:0a:07:4f:db:80:c5:0c:fd:f1:65:ad:d3:5f:16:2e:
         95:af:63:1a:46:af:a5:41:78:67:3f:17:b9:96:50:88:27:4d:
         99:21:e6:84:82:d2:d1:97:94:cc:1f:a8:9d:6f:3a:93:06:0c:
         6b:1f:f7:36:31:31:7f:de:7e:b3:73:52:2e:a5:ce:df:59:e6:
         7c:6c:2a:3d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUVjsPF2zzUMR3h7G75FhJt8fcGwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAzNUZBRTUyOUU1QTVFMDU1RkU0OTFGNUQ0NTgyNTU2
NTI4NTk2QzAeFw0yNjA1MjgxNDQyMzFaFw0yNzA1MjcxNDQ3MzFaMDMxMTAvBgNV
BAMTKEU3N0FBRTgzMkIyRkE1NTIzOUUwNDZBRTE4Q0VDOTAyQTA0QTVEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EswDOZVs1DtKdUg0n4x1x6eJ
FkZz6gkYcHZlVcE79ZofusCnTnfqWtC7MEkDF4b5bbuGIP7RcOGwfOpcg5CvbjyH
rt9CAW9sm3fYOXOlIeMOoOR6XBUMncSmYTbhHhYjedLgdBiicpS/QWQpeeQTHGKj
i3wDNnhptNckKq2lf2RzPC8NEwJxpGbAdGrURIvrQIJB8uAYjQ1qD8nTY412vv3A
8oo5oHfGyH9rcl7uoaowWTayYXiqIyVTFlE2qd6z2UQlSrftIcuNcF3X7h05lNXP
B5fkEbOACi1Zmtl6HJ98/DPcGYISEe3W0WmdRaFegRrz4penbphcfncxc3hvAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU53qugysvpVI54EauGM7JAqBKXZ4wHwYDVR0j
BBgwFoAUkDX65SnlpeBV/kkfXUWCVWUoWWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9UZkVuZ2dyNHJDUUxwRFp2bUJnYnVwVEhtVjFMSk1WOGt0WUhEaGVN
Z1ovMC85MDM1RkFFNTI5RTVBNUUwNTVGRTQ5MUY1RDQ1ODI1NTY1Mjg1OTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwMzVGQUU1MjlFNUE1RTA1
NUZFNDkxRjVENDU4MjU1NjUyODU5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvVGZFbmdncjRyQ1FMcERadm1CZ2J1cFRIbVYxTEpNVjhrdFlIRGhlTWdaLzAv
MzIzODMwMzEzYTM4MzAzYTY1MzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzNTMz
MzIzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAEAgADgMA0GCSqGSIb3DQEBCwUAA4IBAQBPLxOB
0g8xjUu3wjju2L8afPbw0rcJTHcQEJlzU1zctjKmLHQN3bHswqaOx3/hl7OB3pgy
49uVnT9/w8K6PRL46vrQecD0d2lG9/Y3lfG4cKyuKwSP/E7k6+O62FTs8zaFiivX
sQhl4Rg6Tl6J4Ro6wd6TgQOr8ymhXalnNT2uZz/5RXK4Ux0mHLbCjqi8t+boKdNB
SHfA3GZi/WLBBF8xUvCJMRU8wklJE2CN8S3Bt9TdkE7en1QKB0/bgMUM/fFlrdNf
Fi6Vr2MaRq+lQXhnPxe5llCIJ02ZIeaEgtLRl5TMH6idbzqTBgxrH/c2MTF/3n6z
c1Iupc7fWeZ8bCo9
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:15:46 2026 by rpki-client