Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          AzEURMZToLn724hvX7EcDXvQyQEaMq9Y0deALdiLnLU=
Subject key identifier:   52:B2:DE:6B:70:03:D9:F8:37:92:A1:61:97:94:B0:71:F6:0C:F4:C2
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       3ED7AB97D02EB222EDB94F419625E7054A4C2A36
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:54 +0000
ROA not before:           Mon 04 Aug 2025 15:21:54 +0000
ROA not after:            Mon 03 Aug 2026 15:26:54 +0000
asID:                     263541
IP address blocks:        2804:1398:101::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:ab:97:d0:2e:b2:22:ed:b9:4f:41:96:25:e7:05:4a:4c:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:54 2025 GMT
            Not After : Aug  3 15:26:54 2026 GMT
        Subject: CN=52B2DE6B7003D9F83792A1619794B071F60CF4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:14:84:f7:c2:76:b7:1f:9f:52:49:da:0f:
                    c7:1b:f2:62:e5:63:95:d7:2d:3e:95:ae:75:8c:d8:
                    3c:e2:28:22:c1:4f:33:89:eb:d1:9b:60:36:21:94:
                    0d:f0:48:7e:5d:d8:3f:f2:74:97:dd:4f:24:4e:66:
                    3d:d1:45:32:d3:6c:3f:b9:33:0c:6d:2a:ef:e8:96:
                    e6:82:a2:c8:06:ef:9a:65:e7:7e:fb:48:f1:c0:b8:
                    39:01:6e:71:81:55:e3:d6:8b:35:1b:0b:1a:3c:8d:
                    b4:b0:92:dc:5a:b9:d5:15:76:04:5d:cc:92:6c:7d:
                    10:3d:28:b9:c3:4d:c8:56:5f:5e:4c:d3:fa:ac:e8:
                    e2:7f:43:a1:d5:8a:7a:8d:11:14:27:01:79:c4:56:
                    47:b3:e6:91:e0:28:a1:38:6b:86:c7:81:c8:9d:95:
                    56:d0:e9:72:4c:d5:71:14:72:8e:d4:46:7f:11:5f:
                    e8:78:ca:f5:c2:75:bf:23:18:cf:35:ea:d9:4d:94:
                    3e:63:58:5a:7b:10:82:df:2a:f9:0f:ea:3a:30:e7:
                    04:66:ad:95:1c:00:12:25:6a:b4:25:4b:33:28:43:
                    de:06:b9:a7:35:ed:fc:61:e6:2f:39:3c:4c:d3:b8:
                    3f:35:aa:fe:f4:04:b8:ba:f7:85:4d:bf:87:98:1e:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:DE:6B:70:03:D9:F8:37:92:A1:61:97:94:B0:71:F6:0C:F4:C2
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3130313a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:7d:81:3e:5d:3e:14:d6:52:72:07:ca:e8:a4:87:9d:6e:df:
         50:68:01:b7:84:b9:4a:6b:5f:b9:d7:f3:43:f7:5e:a9:d4:4b:
         e4:4f:09:91:aa:e2:b9:42:f4:c6:79:c3:ca:ba:8a:d1:1b:b6:
         94:d5:91:b8:a3:2f:1d:14:90:02:83:9b:2a:c5:04:c5:b1:50:
         0b:e3:bb:52:93:bd:99:14:23:49:ec:ce:26:fe:ab:4f:1d:11:
         b2:ec:e0:3f:51:a9:3e:85:1d:b7:52:dd:95:ee:a2:78:af:37:
         e2:c3:8f:12:68:52:ad:8c:bf:2e:60:ea:37:3f:05:21:8f:0c:
         e7:1e:9f:ab:e4:93:c5:fd:93:c9:c5:72:8f:2b:fe:d6:19:fb:
         da:ac:54:d7:5e:c7:0c:d7:b6:52:e0:6d:89:09:82:61:7e:69:
         12:2f:ad:f4:60:c3:28:cc:70:9f:b3:da:e3:43:ac:40:e8:94:
         be:20:fa:ac:ec:ee:7e:5b:c1:32:b7:f5:c7:75:d2:ca:65:53:
         de:74:c7:f3:22:43:86:c0:d5:40:b1:d5:70:fa:9d:45:39:2a:
         fb:bf:3c:bc:86:c8:cc:15:bf:fa:2b:5a:4e:2a:d9:e3:a0:34:
         c0:30:79:e6:17:ef:1c:a7:89:49:fb:97:f4:6f:88:e6:8b:f4:
         5e:5d:5e:90
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUPterl9AusiLtuU9BliXnBUpMKjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdCNzM1NTI2REIwMjJGMDM3MzRCMThDQzQ4NjQ1QzAx
MEU0NDQyQTAeFw0yNTA4MDQxNTIxNTRaFw0yNjA4MDMxNTI2NTRaMDMxMTAvBgNV
BAMTKDUyQjJERTZCNzAwM0Q5RjgzNzkyQTE2MTk3OTRCMDcxRjYwQ0Y0QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmxSE98J2tx+fUknaD8cb8mLl
Y5XXLT6VrnWM2DziKCLBTzOJ69GbYDYhlA3wSH5d2D/ydJfdTyROZj3RRTLTbD+5
MwxtKu/oluaCosgG75pl5377SPHAuDkBbnGBVePWizUbCxo8jbSwktxaudUVdgRd
zJJsfRA9KLnDTchWX15M0/qs6OJ/Q6HVinqNERQnAXnEVkez5pHgKKE4a4bHgcid
lVbQ6XJM1XEUco7URn8RX+h4yvXCdb8jGM816tlNlD5jWFp7EILfKvkP6jow5wRm
rZUcABIlarQlSzMoQ94Guac17fxh5i85PEzTuD81qv70BLi694VNv4eYHjWxAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUrLea3AD2fg3kqFhl5SwcfYM9MIwHwYDVR0j
BBgwFoAUF7c1Um2wIvA3NLGMxIZFwBDkRCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC8xN0I3MzU1MjZEQjAyMkYwMzczNEIxOENDNDg2NDVDMDEwRTQ0NDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QjczNTUyNkRCMDIyRjAz
NzM0QjE4Q0M0ODY0NUMwMTBFNDQ0MkEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2EzMTMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzMzNTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBBOYAQEwDQYJKoZIhvcNAQELBQAD
ggEBAE59gT5dPhTWUnIHyuikh51u31BoAbeEuUprX7nX80P3XqnUS+RPCZGq4rlC
9MZ5w8q6itEbtpTVkbijLx0UkAKDmyrFBMWxUAvju1KTvZkUI0nszib+q08dEbLs
4D9RqT6FHbdS3ZXuonivN+LDjxJoUq2Mvy5g6jc/BSGPDOcen6vkk8X9k8nFco8r
/tYZ+9qsVNdexwzXtlLgbYkJgmF+aRIvrfRgwyjMcJ+z2uNDrEDolL4g+qzs7n5b
wTK39cd10splU950x/MiQ4bA1UCx1XD6nUU5Kvu/PLyGyMwVv/orWk4q2eOgNMAw
eeYX7xyniUn7l/RviOaL9F5dXpA=
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:45:16 2025 by rpki-client