Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa
File:                     323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa (raw, json)
Hash identifier:          q71pHwdDpHrjtQlnQqHAV3FfJZn0f/xiL8sjXkkWJXc=
Subject key identifier:   BD:5F:63:D5:6D:6F:11:82:F0:F5:B6:D7:96:B9:0A:3A:CD:25:5B:8E
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       15311C641F52FCC290805D7154EC73618D05A8BC
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa
Signing time:             Thu 05 Feb 2026 01:34:09 +0000
ROA not before:           Thu 05 Feb 2026 01:29:09 +0000
ROA not after:            Thu 04 Feb 2027 01:34:09 +0000
asID:                     263961
IP address blocks:        2804:2868:8000::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:31:1c:64:1f:52:fc:c2:90:80:5d:71:54:ec:73:61:8d:05:a8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Feb  5 01:29:09 2026 GMT
            Not After : Feb  4 01:34:09 2027 GMT
        Subject: CN=BD5F63D56D6F1182F0F5B6D796B90A3ACD255B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:2f:03:ab:66:70:14:2b:bd:0e:1d:e6:c5:
                    b3:d7:f7:2a:5c:11:62:56:e3:b8:71:88:f2:4e:f6:
                    4a:13:a8:63:20:a2:69:d8:66:93:e3:94:79:ef:92:
                    e8:11:b9:69:f1:b0:c4:7f:32:cf:c8:7e:42:9c:81:
                    84:41:48:e0:d7:85:50:aa:74:da:cb:9e:63:89:b1:
                    5a:a2:ce:b3:be:33:9b:00:5d:57:40:be:11:82:14:
                    2a:8a:e1:64:86:ee:0c:c6:2f:84:7f:6f:99:25:8b:
                    f1:2b:58:bf:67:aa:68:0e:36:07:18:5d:32:43:24:
                    a0:15:72:2e:2e:4d:46:47:1f:41:da:fe:43:2f:ea:
                    16:a6:0d:ba:e9:a4:c2:86:4b:34:6b:7b:da:aa:fc:
                    01:7a:a6:52:75:39:4f:bf:af:66:4c:9f:d5:42:eb:
                    09:ca:5a:54:2e:78:1f:cf:e1:9c:77:74:3b:d9:b5:
                    22:51:5a:9d:a4:d4:be:13:d3:d7:64:f6:82:8f:55:
                    03:24:ca:df:83:6a:05:12:4a:74:95:c5:13:6d:ce:
                    9f:c9:c9:a7:76:3c:e1:e0:6b:e7:c6:b6:b2:49:68:
                    e4:31:4a:44:ab:26:3d:d3:9a:c9:84:09:1b:6e:9b:
                    3f:10:6d:a9:24:ff:c9:1e:4e:13:60:0f:d7:f6:0f:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5F:63:D5:6D:6F:11:82:F0:F5:B6:D7:96:B9:0A:3A:CD:25:5B:8E
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33332d3333203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         94:94:f6:79:c4:f2:85:49:7a:e4:59:a5:9a:87:98:48:da:de:
         cc:a9:4a:9e:81:2f:96:e5:87:d5:51:27:8b:a0:54:c6:68:a0:
         37:ee:f9:08:58:e0:09:13:05:75:38:91:d6:d6:ac:22:a8:93:
         6d:ba:24:38:8f:e4:c1:ad:11:99:09:c7:b8:e2:58:7a:f0:aa:
         7e:3f:92:15:8e:97:2c:de:50:94:82:ed:50:86:71:6b:df:7b:
         26:0b:6d:ad:35:4e:d3:de:24:10:d2:9b:b5:5d:07:f0:23:10:
         d8:a8:c9:22:eb:ad:6b:44:a0:e0:38:6b:e7:5b:0f:7b:30:d4:
         e7:5c:d7:cf:6b:36:21:07:cd:a5:f0:74:fe:70:6b:99:9a:06:
         88:73:55:84:56:67:50:4a:ab:46:af:5e:6b:55:53:30:60:59:
         cf:fb:48:8c:b3:14:e0:a4:a6:32:28:31:38:90:3e:4b:96:77:
         91:95:09:b9:11:7e:ef:4f:db:2f:fa:ff:d8:05:0b:fa:ca:30:
         fd:99:6e:f2:3e:3c:bb:d8:3d:ef:a2:6d:64:09:f8:fe:e9:d6:
         94:ae:5b:14:c2:92:ee:d6:d5:a0:e0:ed:85:c1:a0:6a:64:1b:
         01:bf:f6:33:77:62:02:ca:86:33:ab:7e:28:2f:79:5e:dc:8b:
         dc:5d:da:17
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFTEcZB9S/MKQgF1xVOxzYY0FqLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOTQ5MkI2MjI3RUFCQjc3MjZBNUEwNjRCRUJFMDRF
NTNDODI0QTAeFw0yNjAyMDUwMTI5MDlaFw0yNzAyMDQwMTM0MDlaMDMxMTAvBgNV
BAMTKEJENUY2M0Q1NkQ2RjExODJGMEY1QjZENzk2QjkwQTNBQ0QyNTVCOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+y8Dq2ZwFCu9Dh3mxbPX9ypc
EWJW47hxiPJO9koTqGMgomnYZpPjlHnvkugRuWnxsMR/Ms/IfkKcgYRBSODXhVCq
dNrLnmOJsVqizrO+M5sAXVdAvhGCFCqK4WSG7gzGL4R/b5kli/ErWL9nqmgONgcY
XTJDJKAVci4uTUZHH0Ha/kMv6hamDbrppMKGSzRre9qq/AF6plJ1OU+/r2ZMn9VC
6wnKWlQueB/P4Zx3dDvZtSJRWp2k1L4T09dk9oKPVQMkyt+DagUSSnSVxRNtzp/J
yad2POHga+fGtrJJaOQxSkSrJj3TmsmECRtumz8Qbakk/8keThNgD9f2D4v5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUvV9j1W1vEYLw9bbXlrkKOs0lW44wHwYDVR0j
BBgwFoAUCDlJK2In6rt3JqWgZL6+BOU8gkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMS8wODM5NDkyQjYyMjdFQUJCNzcyNkE1QTA2NEJFQkUwNEU1M0M4MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Mzk0OTJCNjIyN0VBQkI3
NzI2QTVBMDY0QkVCRTA0RTUzQzgyNEEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzEv
MzIzODMwMzQzYTMyMzgzNjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzMzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEKGiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCUlPZ5xPKFSXrkWaWah5hI2t7MqUqegS+W5YfVUSeLoFTGaKA37vkIWOAJ
EwV1OJHW1qwiqJNtuiQ4j+TBrRGZCce44lh68Kp+P5IVjpcs3lCUgu1QhnFr33sm
C22tNU7T3iQQ0pu1XQfwIxDYqMki661rRKDgOGvnWw97MNTnXNfPazYhB82l8HT+
cGuZmgaIc1WEVmdQSqtGr15rVVMwYFnP+0iMsxTgpKYyKDE4kD5LlneRlQm5EX7v
T9sv+v/YBQv6yjD9mW7yPjy72D3vom1kCfj+6daUrlsUwpLu1tWg4O2FwaBqZBsB
v/Yzd2ICyoYzq34oL3le3IvcXdoX
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:24 2026 by rpki-client