Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa
File:                     323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier:          GEQfMW0o8nZuar+H3eWrhqw+hrCT0D43lPQyxFvUf30=
Subject key identifier:   49:37:B8:3E:28:AF:4F:EB:E1:53:3A:F1:4E:AB:AA:0D:C7:88:38:E3
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       52D28E37ADDDD85848B2C578B45269407271042F
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:56 +0000
ROA not before:           Mon 04 Aug 2025 15:21:56 +0000
ROA not after:            Mon 03 Aug 2026 15:26:56 +0000
asID:                     263541
IP address blocks:        2804:1398:200::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:8e:37:ad:dd:d8:58:48:b2:c5:78:b4:52:69:40:72:71:04:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:56 2025 GMT
            Not After : Aug  3 15:26:56 2026 GMT
        Subject: CN=4937B83E28AF4FEBE1533AF14EABAA0DC78838E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:25:50:cc:68:68:8e:b7:98:c1:d2:aa:35:
                    ae:bb:d4:d6:c8:d8:96:25:40:ff:38:ba:e8:29:b8:
                    61:51:f9:7b:56:48:00:e2:67:8f:e3:81:69:38:0e:
                    68:92:9e:37:f8:67:b1:9a:0a:b8:b9:6a:cd:f0:af:
                    21:40:af:f0:3b:6e:ee:3c:1e:fc:0e:81:e0:be:b8:
                    3c:12:3f:00:57:07:5f:54:84:f6:56:5d:8b:ea:25:
                    7f:01:90:60:fc:74:78:e6:e5:31:0f:aa:c2:37:2c:
                    88:84:30:30:4b:59:0e:90:0c:d3:0c:10:c3:23:db:
                    23:bc:63:3b:c9:92:ad:94:1f:93:b0:f9:77:a7:7d:
                    61:3c:59:33:a9:b9:b8:8c:dc:a2:f9:d3:f6:2b:6d:
                    2c:55:46:e4:b6:2c:2b:e6:00:a7:33:82:ea:b0:1e:
                    64:a3:23:70:69:01:22:5e:de:dc:16:41:d6:b2:8e:
                    77:62:a8:dd:75:38:5d:3b:bd:1b:ee:8c:98:ad:aa:
                    a3:70:86:22:e7:e4:a6:5a:27:9f:e7:a3:bb:e0:2e:
                    40:2f:3a:cd:cd:09:6a:57:27:3a:91:73:d9:6e:6a:
                    74:7b:fe:1e:38:67:cc:50:69:1d:a0:ad:ec:22:70:
                    22:d2:ae:90:03:0a:09:89:aa:38:d1:58:13:b9:bd:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:B8:3E:28:AF:4F:EB:E1:53:3A:F1:4E:AB:AA:0D:C7:88:38:E3
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3230303a3a2f34302d3430203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:b4:c2:92:96:cf:6e:28:88:f8:11:00:8f:a0:1c:61:8e:
         2b:a9:bb:7f:d1:20:cb:14:06:c0:7b:70:75:ff:5c:87:d5:30:
         a7:c3:65:e4:13:15:d1:03:26:59:09:a0:8c:18:52:b3:0d:35:
         c0:a9:60:9b:54:4e:68:c8:f4:d8:5c:47:d7:19:5c:1f:e0:f7:
         47:67:ed:d1:ee:5a:9e:75:3d:be:0e:de:b3:c9:f6:4b:9d:53:
         53:54:c8:32:6c:88:df:71:95:b4:0d:d9:7b:73:7c:1c:89:55:
         be:f3:6c:20:74:8f:4b:e6:0e:e2:68:4c:8b:aa:33:54:81:23:
         68:c7:d9:5c:68:51:ff:e4:98:e4:f8:e9:08:e1:6b:bd:8b:7d:
         12:00:b4:f2:11:67:3a:cc:63:af:0b:df:07:09:7b:6e:69:67:
         9c:af:69:6c:50:cd:44:82:78:f3:49:c3:83:4c:31:47:ac:f3:
         4a:ff:9b:89:2f:2e:e7:db:54:70:c4:81:10:56:47:99:7a:19:
         cd:76:17:d4:83:8b:5e:1e:aa:65:81:84:de:5a:fc:f5:76:36:
         50:5d:28:f2:0e:f2:6c:3e:4d:30:45:97:36:3f:48:de:f4:46:
         3e:49:c6:5e:16:3f:54:44:ad:ac:3a:a9:a4:a2:24:b4:e4:8c:
         bb:f5:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:47:29 2025 by rpki-client