Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa
File:                     323830343a313339383a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier:          2bdmxdEN6zlRgK01yGT2679GcFYI7ab/kH9Mm1hWeUA=
Subject key identifier:   35:11:FA:64:91:D0:53:27:76:43:90:A9:B7:B5:B1:FD:2F:D9:E8:F7
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       43D69BE43E961F3E46CF1966DBA048753CB231B4
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa
Signing time:             Mon 04 Aug 2025 15:26:42 +0000
ROA not before:           Mon 04 Aug 2025 15:21:42 +0000
ROA not after:            Mon 03 Aug 2026 15:26:42 +0000
asID:                     263541
IP address blocks:        2804:1398::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d6:9b:e4:3e:96:1f:3e:46:cf:19:66:db:a0:48:75:3c:b2:31:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Aug  4 15:21:42 2025 GMT
            Not After : Aug  3 15:26:42 2026 GMT
        Subject: CN=3511FA6491D05327764390A9B7B5B1FD2FD9E8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:f1:ee:95:af:bc:98:f5:d8:2b:ab:b8:39:
                    65:a6:0d:f6:cd:8b:36:56:c3:ad:30:04:7c:d3:0e:
                    cb:7c:c4:44:10:c9:5e:51:6d:70:fd:98:5f:94:e3:
                    23:94:5e:39:ba:7d:8a:88:b5:43:c5:8d:6f:9c:14:
                    53:9f:3a:44:0c:37:a6:f4:37:b5:c8:62:8b:21:cf:
                    ee:23:33:c2:4c:67:32:64:96:2d:a1:8a:83:a8:c4:
                    ec:5a:31:45:e0:55:79:54:b3:5f:be:cf:be:6a:1a:
                    ec:28:56:f4:8c:da:ed:d1:d3:81:70:9c:8a:60:79:
                    e4:fe:63:7c:17:5d:fe:13:fc:41:7a:6d:1d:27:90:
                    c8:8c:67:c5:3a:b6:18:ed:cc:39:fb:b9:ae:c7:b8:
                    50:55:26:71:22:a7:61:57:c8:39:e0:3a:6a:da:5f:
                    a6:46:b6:e2:52:49:1e:dc:1c:17:8b:3b:6d:e1:62:
                    3b:60:59:4b:32:ad:0b:7a:be:d7:cf:88:3b:ab:01:
                    ba:3b:57:dc:85:1f:10:c8:92:92:86:c0:8e:a6:bc:
                    ef:a0:01:82:1c:ed:99:99:cd:e2:e2:4e:ee:44:75:
                    c3:d6:e8:b5:f1:cd:0a:b7:ba:f1:47:d8:35:05:99:
                    e3:15:0d:ec:4d:d6:3f:26:b1:93:b3:b1:e9:3a:56:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:FA:64:91:D0:53:27:76:43:90:A9:B7:B5:B1:FD:2F:D9:E8:F7
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a3a2f34382d3438203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:3c:ad:d1:9f:05:06:66:c4:de:e9:f1:c2:b5:c6:51:99:
         ca:57:91:8c:92:ae:a1:4c:04:30:d7:9c:d4:f9:ea:f8:c0:6d:
         eb:13:23:ff:38:f7:6b:5c:b8:31:99:b9:18:28:bd:c2:44:02:
         bd:9c:9c:e3:af:8d:05:0c:45:5a:e8:71:a9:0e:f8:b0:6c:ca:
         b7:ab:b1:a4:6b:68:11:b2:17:f6:03:bb:e8:05:b9:53:70:d2:
         8c:f3:21:e3:32:9b:52:03:75:9c:5d:f0:19:7f:cf:65:71:ea:
         86:fb:93:72:48:c9:95:b3:a6:1d:db:2e:ea:a4:01:82:90:06:
         75:b9:00:28:76:80:bb:1d:71:39:37:a8:f2:14:ec:9e:f3:7f:
         ab:8c:28:bc:c9:ca:ad:67:df:6b:3f:78:52:78:28:8a:6c:5a:
         e6:64:12:cf:80:28:05:e6:da:0f:35:a0:52:4c:87:19:50:35:
         84:0c:33:61:42:14:4e:36:5c:5b:9f:87:ab:b8:2c:78:68:81:
         e9:69:76:47:64:14:d7:82:12:0f:e2:c9:29:45:41:93:cd:40:
         7a:90:ae:85:57:79:e4:d9:8d:23:24:18:f0:93:9c:ef:54:a1:
         d3:77:7c:eb:e3:c6:64:2f:43:cc:51:9f:57:81:19:11:f2:ce:
         b3:61:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:46:32 2025 by rpki-client