Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3333203d3e20323730373238.roa
File:                     323830343a373037383a3a2f33322d3333203d3e20323730373238.roa (raw, json)
Hash identifier:          04sSW+12oab6zd5RgPWCP0ndooi9YgdeiQsbIwXUJ9s=
Subject key identifier:   9B:26:E9:59:AA:8B:0B:DC:B4:1E:EA:DA:6D:5C:3A:AA:35:77:70:72
Certificate issuer:       /CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
Certificate serial:       09720188F73AC37D0334DABFA22949DF89421F88
Authority key identifier: B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3333203d3e20323730373238.roa
Signing time:             Sun 27 Jul 2025 01:53:06 +0000
ROA not before:           Sun 27 Jul 2025 01:48:06 +0000
ROA not after:            Sun 26 Jul 2026 01:53:06 +0000
asID:                     270728
IP address blocks:        2804:7078::/32 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:72:01:88:f7:3a:c3:7d:03:34:da:bf:a2:29:49:df:89:42:1f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D
        Validity
            Not Before: Jul 27 01:48:06 2025 GMT
            Not After : Jul 26 01:53:06 2026 GMT
        Subject: CN=9B26E959AA8B0BDCB41EEADA6D5C3AAA35777072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:66:24:ca:79:2e:e5:ea:09:b9:93:a8:a0:
                    41:c8:b9:1e:81:a5:f3:5c:c5:3a:5c:2e:be:b2:2c:
                    0a:19:ba:f0:a1:e8:39:3a:b8:e3:90:37:46:c0:56:
                    8d:ef:a6:b8:c3:a9:85:de:7f:9e:b6:04:79:e0:56:
                    fa:6d:69:67:7f:b9:43:0f:a8:a7:a5:b4:a9:20:78:
                    69:15:4a:b0:d4:72:9e:87:26:74:35:39:00:fe:18:
                    f4:de:a9:b4:02:bf:7b:56:8a:03:fd:69:90:10:05:
                    3a:2e:fc:44:42:1a:0d:49:ef:59:57:39:9b:d8:25:
                    d3:50:04:a7:0c:61:35:3f:51:1c:9a:3d:f2:b2:9d:
                    12:fa:df:db:b5:ef:be:26:5e:d3:99:9b:11:14:49:
                    db:06:64:07:9a:bd:ce:0e:08:0d:ad:30:19:b3:aa:
                    87:80:4d:d1:e3:cd:70:7f:44:3a:1c:8a:3f:bd:2a:
                    9f:80:c6:e3:dd:e8:7a:32:23:cb:70:20:68:19:33:
                    3e:97:34:7b:31:4e:2d:cf:43:90:76:93:ad:ce:cb:
                    fd:c5:cd:8d:7e:6e:6e:27:df:77:c7:9a:7b:e6:10:
                    df:73:6d:46:df:68:1a:78:e0:da:12:39:32:38:4d:
                    bc:27:fb:ef:c9:7c:2f:8f:7f:49:28:c9:27:ad:a9:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:E9:59:AA:8B:0B:DC:B4:1E:EA:DA:6D:5C:3A:AA:35:77:70:72
            X509v3 Authority Key Identifier:
                keyid:B2:8B:1B:21:D7:22:6B:1B:A0:2F:4E:D7:D9:BE:86:A3:C8:89:AA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B28B1B21D7226B1BA02F4ED7D9BE86A3C889AA0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/323830343a373037383a3a2f33322d3333203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7078::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ff:79:d3:b2:38:a8:75:1c:2c:02:8c:f8:b7:b7:86:81:76:
         33:fb:54:97:de:99:1b:f4:e0:97:95:a3:56:95:85:c9:81:b6:
         78:d7:3c:a8:cc:45:96:d7:8e:67:99:78:af:f9:a6:df:f8:6d:
         62:cb:ed:7a:1b:b8:f2:4a:0f:bb:50:66:14:a8:6d:4d:14:6b:
         e3:e3:93:3a:9d:49:bb:53:61:6c:68:2b:e2:10:11:07:aa:cb:
         52:67:85:d1:82:91:72:77:05:6b:e4:3d:8c:10:4c:04:9c:82:
         8a:89:4a:84:9d:05:e6:61:58:1a:0d:22:55:f5:3e:2c:c7:b7:
         b5:fb:89:0a:21:59:24:4d:e9:38:19:07:a3:b7:56:e3:ed:55:
         0d:82:02:97:8b:86:0c:7c:9b:be:eb:cf:fb:70:44:b8:27:6a:
         b6:09:f4:0a:6a:d5:88:74:14:65:32:6d:cf:4b:83:9b:75:37:
         77:5b:6c:f5:14:51:bf:93:c8:d3:68:e4:af:83:f5:c1:22:31:
         a9:06:44:1d:de:9c:a5:e5:6d:0b:39:1e:b4:ed:cb:fc:6f:4a:
         48:e3:84:3e:7c:26:b9:79:3a:a7:ea:16:58:b7:35:70:e1:8b:
         ba:f2:22:e7:a2:07:40:52:e2:58:ea:07:d3:d7:d9:0a:cc:98:
         6a:26:7b:3b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCXIBiPc6w30DNNq/oilJ34lCH4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4QjFCMjFENzIyNkIxQkEwMkY0RUQ3RDlCRTg2QTND
ODg5QUEwRDAeFw0yNTA3MjcwMTQ4MDZaFw0yNjA3MjYwMTUzMDZaMDMxMTAvBgNV
BAMTKDlCMjZFOTU5QUE4QjBCRENCNDFFRUFEQTZENUMzQUFBMzU3NzcwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRWYkynku5eoJuZOooEHIuR6B
pfNcxTpcLr6yLAoZuvCh6Dk6uOOQN0bAVo3vprjDqYXef562BHngVvptaWd/uUMP
qKeltKkgeGkVSrDUcp6HJnQ1OQD+GPTeqbQCv3tWigP9aZAQBTou/ERCGg1J71lX
OZvYJdNQBKcMYTU/URyaPfKynRL639u1774mXtOZmxEUSdsGZAeavc4OCA2tMBmz
qoeATdHjzXB/RDocij+9Kp+AxuPd6HoyI8twIGgZMz6XNHsxTi3PQ5B2k63Oy/3F
zY1+bm4n33fHmnvmEN9zbUbfaBp44NoSOTI4Tbwn++/JfC+Pf0koySetqT1xAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmybpWaqLC9y0HurabVw6qjV3cHIwHwYDVR0j
BBgwFoAUsosbIdciaxugL07X2b6Go8iJqg0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRERwbjkyMmRXSlhoRENpVkI0b2Zzd3U0VWFyRHBFeUNqam1oMkdBUnBM
ZVUvMC9CMjhCMUIyMUQ3MjI2QjFCQTAyRjRFRDdEOUJFODZBM0M4ODlBQTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyOEIxQjIxRDcyMjZCMUJB
MDJGNEVEN0Q5QkU4NkEzQzg4OUFBMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0REcG45MjJkV0pYaERDaVZCNG9mc3d1NFVhckRwRXlDamptaDJHQVJwTGVVLzAv
MzIzODMwMzQzYTM3MzAzNzM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMw
MzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARweDANBgkqhkiG9w0BAQsFAAOCAQEAWf9507I4
qHUcLAKM+Le3hoF2M/tUl96ZG/Tgl5WjVpWFyYG2eNc8qMxFlteOZ5l4r/mm3/ht
Ysvtehu48koPu1BmFKhtTRRr4+OTOp1Ju1NhbGgr4hARB6rLUmeF0YKRcncFa+Q9
jBBMBJyCiolKhJ0F5mFYGg0iVfU+LMe3tfuJCiFZJE3pOBkHo7dW4+1VDYICl4uG
DHybvuvP+3BEuCdqtgn0CmrViHQUZTJtz0uDm3U3d1ts9RRRv5PI02jkr4P1wSIx
qQZEHd6cpeVtCzketO3L/G9KSOOEPnwmuXk6p+oWWLc1cOGLuvIi56IHQFLiWOoH
09fZCsyYaiZ7Ow==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:18 2025 by rpki-client