Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
File:                     323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (raw, json)
Hash identifier:          ByiDpON9J4wXQtPVNdO8weNIpf4hxdbzV8y28++a1nI=
Subject key identifier:   41:CA:82:21:84:8F:33:F9:65:63:96:5E:F5:06:CC:BF:72:B0:86:3C
Certificate issuer:       /CN=79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81
Certificate serial:       479768AFA623E9EE1D23F7C7E1FF15CCDC8E7135
Authority key identifier: 79:BB:7B:8B:5C:DC:6A:5F:71:F7:60:97:2A:72:E6:A7:7C:CD:FA:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
Signing time:             Sun 08 Jun 2025 12:07:07 +0000
ROA not before:           Sun 08 Jun 2025 12:02:07 +0000
ROA not after:            Sun 07 Jun 2026 12:07:07 +0000
asID:                     263165
IP address blocks:        2804:17b0::/32 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:68:af:a6:23:e9:ee:1d:23:f7:c7:e1:ff:15:cc:dc:8e:71:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81
        Validity
            Not Before: Jun  8 12:02:07 2025 GMT
            Not After : Jun  7 12:07:07 2026 GMT
        Subject: CN=41CA8221848F33F96563965EF506CCBF72B0863C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:9d:f7:45:5a:f4:5a:1b:8b:9a:91:0d:c5:
                    1d:6e:c6:ff:72:59:9c:c8:47:ca:f4:34:b1:0b:ed:
                    80:9e:43:07:5b:66:d5:74:36:1b:56:37:ae:33:cc:
                    d1:8b:41:a4:c0:a4:c1:8d:6e:e1:24:13:3a:43:fe:
                    91:dc:d0:36:36:74:34:2d:0a:ff:16:9e:41:d4:d2:
                    f9:1d:0a:79:0a:98:4f:7d:1d:55:40:f0:42:36:c6:
                    d3:4b:38:ad:ee:0f:7f:54:04:7c:7f:ec:f4:fb:34:
                    cb:b7:19:c6:b0:38:e8:f4:f6:e2:d9:87:9e:b5:56:
                    09:1d:8b:16:23:c5:7f:8e:d9:d4:21:df:fc:61:0f:
                    52:f6:99:33:62:5f:7b:59:ab:a8:16:41:e8:37:f0:
                    d5:c1:1d:31:cb:66:7b:ce:9a:bb:e1:4d:57:78:12:
                    33:fd:26:57:29:ff:56:ee:0b:d0:6e:91:19:df:c2:
                    27:1f:bd:08:42:24:b1:fa:72:17:00:06:95:ce:22:
                    47:a7:74:50:7e:a2:15:0c:59:fb:b9:3e:f1:b5:15:
                    55:c5:bd:10:05:42:c7:4d:ea:06:c7:26:5a:75:88:
                    45:fc:a9:f0:ca:80:69:c3:ed:cb:fe:f7:dc:fd:f0:
                    ba:1d:c7:3d:c8:67:f4:fc:09:1a:32:29:bb:ff:67:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:82:21:84:8F:33:F9:65:63:96:5E:F5:06:CC:BF:72:B0:86:3C
            X509v3 Authority Key Identifier:
                keyid:79:BB:7B:8B:5C:DC:6A:5F:71:F7:60:97:2A:72:E6:A7:7C:CD:FA:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79BB7B8B5CDC6A5F71F760972A72E6A77CCDFA81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:69:ae:1f:fd:81:30:c5:f5:92:8c:45:2f:d7:98:4d:0c:2e:
         af:e1:d8:fe:dd:d9:13:0e:e7:f3:e6:d4:3e:ca:9a:ab:1d:4b:
         1d:19:8d:c9:ce:10:29:9d:67:86:14:30:92:2e:4d:22:aa:05:
         c2:a4:b8:72:50:31:35:84:12:bb:13:b5:c0:36:8f:a0:bb:c0:
         80:1c:b4:68:61:4f:53:79:4d:62:70:82:20:95:29:3c:d3:aa:
         1a:f2:5f:4b:b4:fb:47:cc:e6:ab:7b:5b:c4:af:04:24:e3:3a:
         f3:7d:63:29:fb:5a:68:29:e6:80:6b:67:b7:e0:06:18:64:0c:
         b6:dc:eb:1c:a1:52:c9:8b:4b:df:00:8b:68:66:f1:82:cb:72:
         3a:c1:8b:29:a0:c0:3e:ec:03:72:f0:a6:d4:ee:04:28:cd:cb:
         e9:9d:aa:5e:46:e8:90:4b:93:e5:97:a1:34:07:e0:36:dc:ba:
         85:17:38:b5:65:61:ef:1c:02:97:73:e2:eb:ac:78:69:1e:b5:
         af:de:19:81:09:fe:fb:3e:6e:bd:61:d4:af:ea:27:23:e0:47:
         df:7c:57:d5:7e:96:87:f6:2a:a5:61:6f:e2:58:be:e4:05:46:
         66:7d:5c:42:bb:0e:76:68:c4:91:59:71:84:94:ba:a1:3e:b4:
         13:ab:15:d9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUR5dor6Yj6e4dI/fH4f8VzNyOcTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlCQjdCOEI1Q0RDNkE1RjcxRjc2MDk3MkE3MkU2QTc3
Q0NERkE4MTAeFw0yNTA2MDgxMjAyMDdaFw0yNjA2MDcxMjA3MDdaMDMxMTAvBgNV
BAMTKDQxQ0E4MjIxODQ4RjMzRjk2NTYzOTY1RUY1MDZDQ0JGNzJCMDg2M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlZ33RVr0WhuLmpENxR1uxv9y
WZzIR8r0NLEL7YCeQwdbZtV0NhtWN64zzNGLQaTApMGNbuEkEzpD/pHc0DY2dDQt
Cv8WnkHU0vkdCnkKmE99HVVA8EI2xtNLOK3uD39UBHx/7PT7NMu3GcawOOj09uLZ
h561VgkdixYjxX+O2dQh3/xhD1L2mTNiX3tZq6gWQeg38NXBHTHLZnvOmrvhTVd4
EjP9Jlcp/1buC9BukRnfwicfvQhCJLH6chcABpXOIkendFB+ohUMWfu5PvG1FVXF
vRAFQsdN6gbHJlp1iEX8qfDKgGnD7cv+99z98Lodxz3IZ/T8CRoyKbv/Z8B3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQcqCIYSPM/llY5Ze9QbMv3KwhjwwHwYDVR0j
BBgwFoAUebt7i1zcal9x92CXKnLmp3zN+oEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXF6SFoyRVMzbTN3R0RKTnZ4RExnSE15eHJTRHBTRVNiTGNuTFZRSnB5
Q2YvMC83OUJCN0I4QjVDREM2QTVGNzFGNzYwOTcyQTcyRTZBNzdDQ0RGQTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5QkI3QjhCNUNEQzZBNUY3
MUY3NjA5NzJBNzJFNkE3N0NDREZBODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxekhaMkVTM20zd0dESk52eERMZ0hNeXhyU0RwU0VTYkxjbkxWUUpweUNmLzAv
MzIzODMwMzQzYTMxMzc2MjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBewMA0GCSqGSIb3DQEBCwUAA4IBAQBmaa4f
/YEwxfWSjEUv15hNDC6v4dj+3dkTDufz5tQ+ypqrHUsdGY3JzhApnWeGFDCSLk0i
qgXCpLhyUDE1hBK7E7XANo+gu8CAHLRoYU9TeU1icIIglSk806oa8l9LtPtHzOar
e1vErwQk4zrzfWMp+1poKeaAa2e34AYYZAy23OscoVLJi0vfAItoZvGCy3I6wYsp
oMA+7ANy8KbU7gQozcvpnapeRuiQS5Pll6E0B+A23LqFFzi1ZWHvHAKXc+LrrHhp
HrWv3hmBCf77Pm69YdSv6icj4EfffFfVfpaH9iqlYW/iWL7kBUZmfVxCuw52aMSR
WXGElLqhPrQTqxXZ
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:04:00 2025 by rpki-client