Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa
File:                     323830343a323836383a3a2f33332d3333203d3e20323633393631.roa (raw, json)
Hash identifier:          ieNXBtU/dfR4fRaEfRQ8FcYHw13qJbiRo+ZiDNDGuYI=
Subject key identifier:   04:B6:4F:C8:1D:62:69:23:82:30:2A:C7:46:57:61:2A:08:0B:ED:34
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       47224008088E712AF4FA5C53B61F2B06D8E1025F
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa
Signing time:             Thu 05 Feb 2026 01:34:09 +0000
ROA not before:           Thu 05 Feb 2026 01:29:09 +0000
ROA not after:            Thu 04 Feb 2027 01:34:09 +0000
asID:                     263961
IP address blocks:        2804:2868::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:22:40:08:08:8e:71:2a:f4:fa:5c:53:b6:1f:2b:06:d8:e1:02:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Feb  5 01:29:09 2026 GMT
            Not After : Feb  4 01:34:09 2027 GMT
        Subject: CN=04B64FC81D62692382302AC74657612A080BED34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:32:3f:1b:75:0b:39:f1:3c:b5:12:91:f5:
                    bb:28:23:bb:91:80:4a:3a:f7:56:d3:d6:77:95:a5:
                    fb:d5:95:7e:83:d2:b5:96:f6:d5:d6:2b:f5:08:1d:
                    a7:9a:84:e9:56:e9:9f:59:4d:b2:3b:0d:63:4b:91:
                    f4:aa:d9:b4:95:74:c0:2f:94:c2:64:5c:71:91:ae:
                    7a:d3:2e:89:82:17:2d:70:ac:7a:ab:55:2a:01:33:
                    df:f2:f1:33:4c:1c:53:b1:34:83:52:b6:14:99:2f:
                    b6:2a:86:f6:06:3c:8e:34:34:e1:3a:ac:85:15:8a:
                    22:13:90:37:ca:0b:3a:fc:ea:dd:2a:80:06:e0:53:
                    87:23:fa:c1:be:e4:b6:69:4a:14:f5:e4:ce:d6:10:
                    84:90:be:c6:b5:00:42:80:70:c6:5d:4c:77:70:e7:
                    94:7f:af:e0:c7:a8:b1:5f:fe:b7:c7:5e:46:6e:67:
                    e2:6a:5e:3e:88:67:d9:4d:c3:0d:61:a2:83:e0:e1:
                    c7:f4:6f:1c:19:d7:ea:16:3f:52:0a:d9:48:32:40:
                    69:4d:92:4b:b2:2f:e6:4e:f8:8c:8d:37:0b:0a:c0:
                    b6:b0:c4:80:e7:52:4f:a9:fe:a5:4f:53:dd:12:75:
                    7f:88:46:ae:87:21:74:e2:23:ac:b2:d1:5f:fd:ed:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:4F:C8:1D:62:69:23:82:30:2A:C7:46:57:61:2A:08:0B:ED:34
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/323830343a323836383a3a2f33332d3333203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:e9:d0:72:f4:bf:74:2b:79:48:f4:74:15:64:2d:96:81:
         54:c7:8e:90:af:7a:33:c4:90:4c:56:28:e3:6e:4f:cc:ed:eb:
         1f:99:f1:3b:74:28:82:41:7a:eb:a6:b6:cc:b8:80:bb:54:1b:
         b2:b1:8d:1f:a1:ac:6a:12:e5:21:d6:a4:02:c3:c9:d1:95:fb:
         61:8d:bd:a7:3b:c8:c1:87:88:80:7b:8d:28:d5:4e:9c:d8:32:
         9b:fe:fd:b0:ed:24:dc:25:12:72:b7:95:f4:97:0b:3e:80:08:
         89:48:85:04:ef:0e:9d:f0:a9:b0:3e:0f:9f:8f:ac:35:07:d1:
         ed:3b:2f:65:5a:a7:4b:d1:ab:b6:96:d5:79:98:6f:70:f4:fd:
         23:b4:d2:51:a4:18:63:1a:ab:22:45:7f:0b:3e:b8:9b:33:5a:
         93:94:9e:d6:42:95:db:a0:8c:9a:7a:e1:91:cc:0c:34:ea:8f:
         5b:19:bd:a8:19:ac:42:a4:1e:c2:e1:75:d1:1f:5f:34:a1:1b:
         19:d8:ea:45:fb:82:4b:54:83:fa:bf:ec:a5:55:c9:e8:a3:1d:
         9d:65:9a:a4:4d:df:44:ab:92:22:77:cc:6c:70:c2:a7:c1:98:
         11:63:8b:d8:07:73:9f:e2:71:17:4b:25:76:e2:8c:4b:07:3f:
         f3:93:90:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURyJACAiOcSr0+lxTth8rBtjhAl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOTQ5MkI2MjI3RUFCQjc3MjZBNUEwNjRCRUJFMDRF
NTNDODI0QTAeFw0yNjAyMDUwMTI5MDlaFw0yNzAyMDQwMTM0MDlaMDMxMTAvBgNV
BAMTKDA0QjY0RkM4MUQ2MjY5MjM4MjMwMkFDNzQ2NTc2MTJBMDgwQkVEMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ITI/G3ULOfE8tRKR9bsoI7uR
gEo691bT1neVpfvVlX6D0rWW9tXWK/UIHaeahOlW6Z9ZTbI7DWNLkfSq2bSVdMAv
lMJkXHGRrnrTLomCFy1wrHqrVSoBM9/y8TNMHFOxNINSthSZL7YqhvYGPI40NOE6
rIUViiITkDfKCzr86t0qgAbgU4cj+sG+5LZpShT15M7WEISQvsa1AEKAcMZdTHdw
55R/r+DHqLFf/rfHXkZuZ+JqXj6IZ9lNww1hooPg4cf0bxwZ1+oWP1IK2UgyQGlN
kkuyL+ZO+IyNNwsKwLawxIDnUk+p/qVPU90SdX+IRq6HIXTiI6yy0V/97RQFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBLZPyB1iaSOCMCrHRldhKggL7TQwHwYDVR0j
BBgwFoAUCDlJK2In6rt3JqWgZL6+BOU8gkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMS8wODM5NDkyQjYyMjdFQUJCNzcyNkE1QTA2NEJFQkUwNEU1M0M4MjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4Mzk0OTJCNjIyN0VBQkI3
NzI2QTVBMDY0QkVCRTA0RTUzQzgyNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzEv
MzIzODMwMzQzYTMyMzgzNjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzkzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQoaAAwDQYJKoZIhvcNAQELBQADggEBAGt+6dBy
9L90K3lI9HQVZC2WgVTHjpCvejPEkExWKONuT8zt6x+Z8Tt0KIJBeuumtsy4gLtU
G7KxjR+hrGoS5SHWpALDydGV+2GNvac7yMGHiIB7jSjVTpzYMpv+/bDtJNwlEnK3
lfSXCz6ACIlIhQTvDp3wqbA+D5+PrDUH0e07L2Vap0vRq7aW1XmYb3D0/SO00lGk
GGMaqyJFfws+uJszWpOUntZCldugjJp64ZHMDDTqj1sZvagZrEKkHsLhddEfXzSh
GxnY6kX7gktUg/q/7KVVyeijHZ1lmqRN30SrkiJ3zGxwwqfBmBFji9gHc5/icRdL
JXbijEsHP/OTkK8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:23 2026 by rpki-client