Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (raw, json)
Hash identifier:          K/eKXbYEpCM1DLZlxEnppFRulv9sQ31UHnRsWu+BDI4=
Subject key identifier:   DF:3C:F4:AE:6B:22:1A:67:C3:BA:A1:F3:F4:3C:51:00:49:C6:FA:84
Certificate issuer:       /CN=06F15D186076555DEA5244605F906111464A42B4
Certificate serial:       4EC2109EF347D5FC847839C35D8AD5402E2E8C3B
Authority key identifier: 06:F1:5D:18:60:76:55:5D:EA:52:44:60:5F:90:61:11:46:4A:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F15D186076555DEA5244605F906111464A42B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
Signing time:             Fri 13 Jun 2025 16:31:26 +0000
ROA not before:           Fri 13 Jun 2025 16:26:26 +0000
ROA not after:            Fri 12 Jun 2026 16:31:26 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:10:9e:f3:47:d5:fc:84:78:39:c3:5d:8a:d5:40:2e:2e:8c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F15D186076555DEA5244605F906111464A42B4
        Validity
            Not Before: Jun 13 16:26:26 2025 GMT
            Not After : Jun 12 16:31:26 2026 GMT
        Subject: CN=DF3CF4AE6B221A67C3BAA1F3F43C510049C6FA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a2:3c:eb:b4:e5:63:fc:e1:24:6f:57:60:ce:
                    9a:e6:3c:ed:84:82:89:70:e2:e2:4a:cf:cc:ae:81:
                    21:a7:ed:e6:62:32:f3:a6:43:2e:69:56:2b:86:cc:
                    df:07:3d:5a:3e:ba:b4:f5:c1:94:af:6a:2c:ce:3d:
                    17:7b:9e:6b:ea:3d:b7:4c:27:69:2e:72:f8:e0:5b:
                    7a:a3:8f:d1:9b:6b:f9:b1:5a:3f:19:a3:21:e2:b6:
                    3a:63:a0:37:ca:2d:8f:e8:15:dc:53:a9:73:ee:14:
                    62:b9:ac:1b:d1:93:19:58:67:27:71:a8:e6:fa:3d:
                    c7:51:d6:f4:7c:97:c0:a7:5c:95:2f:05:3b:90:61:
                    72:69:c7:31:1c:48:c0:6d:d1:21:c0:29:61:67:ef:
                    4e:38:e1:53:ee:c2:4b:5a:d1:af:66:82:b5:02:b5:
                    0b:34:21:68:88:2f:3e:c3:21:0f:c7:fd:6a:d5:d9:
                    46:2f:19:18:b8:31:e4:5a:f1:90:24:1d:ba:f6:82:
                    09:55:15:5f:f4:87:6d:02:de:7b:49:5b:77:5d:44:
                    14:14:1b:d9:b0:8c:ad:0c:32:a7:43:06:e2:1c:da:
                    21:72:3a:a7:55:d6:13:bb:b2:9b:52:7f:b9:79:55:
                    3c:4a:ab:a8:6b:ec:3a:1d:5e:f6:73:6b:93:5f:cc:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3C:F4:AE:6B:22:1A:67:C3:BA:A1:F3:F4:3C:51:00:49:C6:FA:84
            X509v3 Authority Key Identifier:
                keyid:06:F1:5D:18:60:76:55:5D:EA:52:44:60:5F:90:61:11:46:4A:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/06F15D186076555DEA5244605F906111464A42B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F15D186076555DEA5244605F906111464A42B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:80:ea:1a:c0:5e:7f:c8:ad:83:79:0f:3a:6a:37:27:dd:
         56:f0:e4:c4:2a:5d:b0:63:0c:5e:74:cd:2e:98:02:29:42:a6:
         6a:0c:cd:7b:c8:c9:69:0c:37:ac:07:fc:d6:9d:2d:79:9c:c5:
         eb:02:3b:76:d9:b9:9c:a7:3d:42:90:ad:b0:dc:bb:09:ad:2c:
         20:43:9d:14:d8:a5:9b:a9:a0:c7:8e:0b:3e:d5:cc:55:a5:fc:
         80:a3:9a:cc:34:21:9b:95:e0:12:93:95:1b:91:c2:01:a0:74:
         e9:2f:ff:f8:3f:a2:36:06:0c:83:6a:63:5d:c4:a1:33:20:0c:
         05:6b:2a:c7:ad:20:26:7b:62:20:42:c5:67:5e:c2:4a:1c:d6:
         a3:07:7b:7a:51:73:65:63:2d:aa:b3:8b:36:a1:66:f2:4c:37:
         a6:cd:52:69:5f:21:7c:15:58:e4:06:02:02:4a:98:e0:42:6e:
         95:93:84:f7:5c:f1:d9:2b:fd:5d:66:ef:81:80:7a:5f:54:2a:
         33:78:72:3c:dd:bf:c4:fc:bb:dc:fa:7d:51:57:da:43:6b:c7:
         35:c4:69:57:5c:ae:3a:fc:72:c7:c7:ec:4d:c6:ae:2f:c6:fb:
         4a:50:a5:d9:a4:92:f5:e3:9a:26:79:f0:5a:f3:57:15:c5:96:
         02:72:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:10:49 2025 by rpki-client