Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33342d3334203d3e20323633393631.roa
File:                     323830343a323836383a383030303a3a2f33342d3334203d3e20323633393631.roa (raw, json)
Hash identifier:          HQEVRa1M+QiuaL0HqapU5K3TwleKpfXLQMLcLB2+l1M=
Subject key identifier:   F6:74:CE:28:45:05:5A:6C:43:65:3F:68:74:7F:93:92:8C:38:17:B1
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       52D8BC0A869949CCD3F2A068E6CBAE128EF509EC
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33342d3334203d3e20323633393631.roa
Signing time:             Thu 05 Feb 2026 01:34:09 +0000
ROA not before:           Thu 05 Feb 2026 01:29:09 +0000
ROA not after:            Thu 04 Feb 2027 01:34:09 +0000
asID:                     263961
IP address blocks:        2804:2868:8000::/34 maxlen: 34
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d8:bc:0a:86:99:49:cc:d3:f2:a0:68:e6:cb:ae:12:8e:f5:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Feb  5 01:29:09 2026 GMT
            Not After : Feb  4 01:34:09 2027 GMT
        Subject: CN=F674CE2845055A6C43653F68747F93928C3817B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ee:a2:18:cf:0f:46:ce:0d:dd:42:bb:c3:91:
                    3e:54:ed:6b:41:07:73:06:71:b7:b5:f4:f9:86:8c:
                    b7:f1:8a:ac:c0:ad:4c:6c:b1:c2:e2:eb:e0:f7:fc:
                    3d:74:b9:fe:80:c2:c0:5a:f4:dd:83:34:01:67:ad:
                    72:b4:5c:1f:d7:a7:b7:f0:b4:28:3f:1f:e6:e4:ac:
                    66:44:99:fd:2f:b8:4c:5a:fe:04:74:b0:d2:65:0f:
                    43:c2:a5:1e:3e:54:6f:d3:b1:ea:7c:e6:4d:da:29:
                    5c:3c:a6:1c:91:dd:8e:b9:b3:1e:71:09:07:e1:f8:
                    03:28:7e:6b:69:0e:8a:3b:8c:c8:b9:aa:76:d7:00:
                    75:67:1b:96:95:88:ba:4a:5a:7a:c8:06:9c:5d:55:
                    18:05:ab:28:f9:a7:ce:e8:a3:29:cd:9d:4e:43:41:
                    d0:08:e3:96:c3:47:b0:75:56:62:76:6b:3e:72:a9:
                    6a:1d:a7:24:f7:94:18:c3:cc:2c:a2:c3:f7:ef:ed:
                    2a:63:37:b1:af:78:1b:72:8e:54:e6:db:26:a6:90:
                    87:4e:da:ba:1d:b1:df:0b:51:42:d8:98:48:6c:62:
                    fb:d0:62:c4:c6:4c:ed:8e:8c:c8:fe:67:4e:a9:b3:
                    d9:42:d4:da:1e:66:18:de:88:f0:03:7f:bf:58:93:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:CE:28:45:05:5A:6C:43:65:3F:68:74:7F:93:92:8C:38:17:B1
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a383030303a3a2f33342d3334203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:41:3c:f5:96:17:d2:d7:1c:31:ab:7e:10:01:1e:a7:62:
         4c:56:c6:f2:5e:7b:e2:6c:77:a1:0d:46:a4:70:e8:bf:11:f8:
         81:44:bb:4d:93:17:05:35:0d:4a:a7:88:fd:94:37:df:31:d5:
         e2:29:8c:55:ed:39:c1:b4:39:e7:6f:6e:4d:c0:42:3c:35:37:
         23:ac:79:7c:31:7b:4e:41:43:ac:68:6d:d0:fb:9b:38:72:fe:
         ff:04:c6:8c:43:dc:b5:4f:33:b6:27:76:29:3d:51:95:f4:dd:
         de:82:5d:ac:26:2e:0b:58:6e:e2:68:83:46:b5:91:ac:66:4f:
         51:0d:aa:a8:84:08:84:81:0a:c8:02:ee:5c:67:02:19:4d:c4:
         e4:a1:1a:44:2d:2f:84:0f:86:34:2c:9f:87:a6:e8:5e:07:8c:
         87:2d:6c:a6:88:be:c4:1b:a6:8a:a9:34:5d:78:7e:30:d9:25:
         8c:db:19:b5:18:99:bc:ee:5e:9a:f0:1a:b3:69:67:a5:51:84:
         37:96:b8:b7:cf:fa:a3:38:0e:6e:9d:37:3a:a3:a2:ad:f2:0e:
         60:a3:85:1b:a7:a3:e5:fa:d2:f7:52:ae:0b:43:51:b9:a7:d6:
         a6:a3:4b:19:de:b2:60:10:9b:21:08:7a:51:23:b6:cc:e9:67:
         06:4b:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:57 2026 by rpki-client