Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f33342d3334203d3e20323633353431.roa
File:                     323830343a313339383a3a2f33342d3334203d3e20323633353431.roa (raw, json)
Hash identifier:          UrtR1g19iS0rfAjmke3rmPHOok4ZynfK0L7UTqDBSd8=
Subject key identifier:   E1:63:9E:63:D9:37:F5:53:57:14:84:EA:DD:00:26:08:E9:B7:E3:A4
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       66F1496D58BC628306ABA1E09E7D5EE190A710FF
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f33342d3334203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:25:12 +0000
ROA not before:           Mon 04 Aug 2025 15:20:12 +0000
ROA not after:            Mon 03 Aug 2026 15:25:12 +0000
asID:                     263541
IP address blocks:        2804:1398::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f1:49:6d:58:bc:62:83:06:ab:a1:e0:9e:7d:5e:e1:90:a7:10:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:20:12 2025 GMT
            Not After : Aug  3 15:25:12 2026 GMT
        Subject: CN=E1639E63D937F553571484EADD002608E9B7E3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:05:3a:4f:07:43:80:d6:74:6e:d1:bd:86:
                    3a:b1:c5:e7:a8:04:19:a9:41:31:73:7d:2a:55:95:
                    0f:ea:39:b8:68:86:f8:80:dd:ad:fd:de:8b:9c:ac:
                    83:dd:2e:03:83:df:fb:5f:8a:e4:04:24:84:3c:77:
                    df:29:12:d7:d2:83:e8:59:9e:97:a4:35:e4:39:74:
                    6d:dd:b6:02:a2:be:a6:a7:ca:3e:a9:fc:ff:5b:b5:
                    27:49:89:24:a9:df:ad:b4:29:a9:42:26:6f:92:aa:
                    83:c1:7d:15:b9:d2:58:bd:85:1d:f1:92:bb:67:ac:
                    70:b7:e0:23:94:b7:f1:90:09:de:2b:c9:23:4d:1c:
                    a8:e3:87:51:3e:35:b7:6f:18:47:e2:7f:99:6d:f2:
                    90:7e:34:06:b1:4f:63:43:d1:c0:e1:4e:7e:75:58:
                    00:5d:06:20:59:7f:0f:51:87:24:7a:97:69:25:71:
                    ef:ec:d0:16:39:41:47:a0:86:ab:95:a3:2b:7d:4c:
                    d8:de:5a:a7:bb:e4:12:e3:03:a7:4f:40:6d:e9:98:
                    f6:36:b0:91:8f:3f:4a:43:7b:aa:14:7c:f8:74:88:
                    5a:23:d4:cf:34:2b:c2:ae:88:94:85:28:c9:b2:96:
                    d0:e6:2d:6c:66:04:9b:2e:6c:4d:9e:39:cc:fa:66:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:9E:63:D9:37:F5:53:57:14:84:EA:DD:00:26:08:E9:B7:E3:A4
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f33342d3334203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:40:5e:c8:67:e1:6a:89:e4:fc:2d:d2:9f:73:c2:b2:d0:27:
         1b:56:3c:f2:70:7b:86:de:61:93:0c:ef:09:4c:a6:12:f4:e4:
         d8:c2:d7:ee:76:be:fd:4e:3b:d9:e0:54:bc:ba:5d:fd:c6:ed:
         34:82:9b:d3:05:52:a5:28:13:ce:fb:5f:92:90:79:7a:2d:2c:
         9c:69:c3:ac:ea:d7:6c:f7:4d:6a:fc:98:44:10:1c:d2:df:6c:
         34:2b:8e:37:90:9e:d7:b1:bc:b0:68:cc:8a:5c:b9:ac:e6:da:
         76:8a:ed:01:53:ea:be:ba:3a:bd:32:8d:85:c6:97:b2:f9:2c:
         35:0c:35:a7:7a:ed:d5:ed:ef:18:a3:1c:70:d3:3e:a9:3a:2a:
         22:cb:00:8f:22:05:97:ad:be:dd:f5:b2:74:0f:a3:b7:6b:56:
         54:ab:69:b4:f7:28:13:de:51:96:02:fe:c2:de:0d:06:dc:08:
         0a:57:d8:a3:45:e3:3a:c4:bf:0f:ab:c8:12:46:9c:91:40:0d:
         f7:9f:0d:04:7f:ff:1a:c0:e1:b3:55:ae:b2:d2:84:95:f1:09:
         25:40:06:78:cb:b2:16:d6:f1:97:df:88:d1:57:84:03:c8:3f:
         e1:c3:60:de:dd:df:f8:48:72:09:88:71:87:6b:b1:39:19:0a:
         ea:78:32:63
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZvFJbVi8YoMGq6Hgnn1e4ZCnEP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdCNzM1NTI2REIwMjJGMDM3MzRCMThDQzQ4NjQ1QzAx
MEU0NDQyQTAeFw0yNTA4MDQxNTIwMTJaFw0yNjA4MDMxNTI1MTJaMDMxMTAvBgNV
BAMTKEUxNjM5RTYzRDkzN0Y1NTM1NzE0ODRFQUREMDAyNjA4RTlCN0UzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0QU6TwdDgNZ0btG9hjqxxeeo
BBmpQTFzfSpVlQ/qObhohviA3a393oucrIPdLgOD3/tfiuQEJIQ8d98pEtfSg+hZ
npekNeQ5dG3dtgKivqanyj6p/P9btSdJiSSp3620KalCJm+SqoPBfRW50li9hR3x
krtnrHC34COUt/GQCd4rySNNHKjjh1E+NbdvGEfif5lt8pB+NAaxT2ND0cDhTn51
WABdBiBZfw9RhyR6l2klce/s0BY5QUeghquVoyt9TNjeWqe75BLjA6dPQG3pmPY2
sJGPP0pDe6oUfPh0iFoj1M80K8KuiJSFKMmyltDmLWxmBJsubE2eOcz6ZnUzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4WOeY9k39VNXFITq3QAmCOm346QwHwYDVR0j
BBgwFoAUF7c1Um2wIvA3NLGMxIZFwBDkRCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lhenB2ZzgxUTRER00yajgxQ1ZTRmF1WVdSUWM2NFlBeU13ckdYdlJ6
U1UvMC8xN0I3MzU1MjZEQjAyMkYwMzczNEIxOENDNDg2NDVDMDEwRTQ0NDJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QjczNTUyNkRCMDIyRjAz
NzM0QjE4Q0M0ODY0NUMwMTBFNDQ0MkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpYXpwdmc4MVE0REdNMmo4MUNWU0ZhdVlXUlFjNjRZQXlNd3JHWHZSelNVLzAv
MzIzODMwMzQzYTMxMzMzOTM4M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMz
MzUzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQTmAAwDQYJKoZIhvcNAQELBQADggEBAGJAXshn
4WqJ5Pwt0p9zwrLQJxtWPPJwe4beYZMM7wlMphL05NjC1+52vv1OO9ngVLy6Xf3G
7TSCm9MFUqUoE877X5KQeXotLJxpw6zq12z3TWr8mEQQHNLfbDQrjjeQntexvLBo
zIpcuazm2naK7QFT6r66Or0yjYXGl7L5LDUMNad67dXt7xijHHDTPqk6KiLLAI8i
BZetvt31snQPo7drVlSrabT3KBPeUZYC/sLeDQbcCApX2KNF4zrEvw+ryBJGnJFA
DfefDQR//xrA4bNVrrLShJXxCSVABnjLshbW8ZffiNFXhAPIP+HDYN7d3/hIcgmI
cYdrsTkZCup4MmM=
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:14 2025 by rpki-client