Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa
File:                     AS265303.roa (raw, json)
Hash identifier:          wYuBm9uWMOPSe//ml/fulEJfGlxc0w7S6ilEMFr7k8Y=
Subject key identifier:   68:31:86:FE:50:D0:C5:CD:02:9E:FD:63:DE:2E:BF:DE:F5:61:41:9C
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       3F7F2E69F090529E3E2655D4B71D6338A939CAFD
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa
Signing time:             Wed 11 Feb 2026 23:36:08 +0000
ROA not before:           Wed 11 Feb 2026 23:31:08 +0000
ROA not after:            Wed 10 Feb 2027 23:36:08 +0000
asID:                     265303
IP address blocks:        168.0.172.0/22 maxlen: 24
                          177.126.1.0/24 maxlen: 24
                          177.126.6.0/24 maxlen: 24
                          177.126.8.0/24 maxlen: 24
                          177.126.10.0/23 maxlen: 24
                          177.126.13.0/24 maxlen: 24
                          177.126.15.0/24 maxlen: 24
                          187.120.12.0/24 maxlen: 24
                          189.39.216.0/22 maxlen: 24
                          200.150.164.0/23 maxlen: 24
                          200.150.167.0/24 maxlen: 24
                          200.150.169.0/24 maxlen: 24
                          200.150.170.0/24 maxlen: 24
                          200.150.172.0/24 maxlen: 24
                          200.150.174.0/23 maxlen: 24
                          201.87.128.0/24 maxlen: 24
                          201.87.131.0/24 maxlen: 24
                          201.87.133.0/24 maxlen: 24
                          201.87.134.0/23 maxlen: 24
                          201.87.136.0/23 maxlen: 24
                          201.87.139.0/24 maxlen: 24
                          201.87.140.0/23 maxlen: 24
                          201.87.142.0/24 maxlen: 24
                          201.87.144.0/24 maxlen: 24
                          201.87.146.0/23 maxlen: 24
                          201.87.148.0/23 maxlen: 24
                          201.87.150.0/24 maxlen: 24
                          201.87.152.0/23 maxlen: 24
                          201.87.157.0/24 maxlen: 24
                          2804:2dc8::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7f:2e:69:f0:90:52:9e:3e:26:55:d4:b7:1d:63:38:a9:39:ca:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb 11 23:31:08 2026 GMT
            Not After : Feb 10 23:36:08 2027 GMT
        Subject: CN=683186FE50D0C5CD029EFD63DE2EBFDEF561419C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:48:12:24:78:3e:37:e7:d1:27:02:ab:22:
                    72:5b:3b:86:24:5a:77:cf:da:b4:ec:cf:8e:b2:c4:
                    3f:dc:a6:d5:91:a9:e8:a3:9a:a1:74:b0:a4:06:da:
                    ef:af:08:1e:1a:66:3e:80:da:39:b0:62:e2:9f:68:
                    3f:11:ce:c1:2f:ec:a0:c9:c9:f4:36:bc:55:27:32:
                    5c:32:24:09:97:8e:d5:20:df:93:93:9c:02:a9:38:
                    ee:ca:2d:3e:ec:1c:a7:a7:eb:e2:e7:30:e2:f4:15:
                    ed:f4:f9:5b:d9:b3:73:b3:f4:e0:ce:51:fe:8a:a7:
                    d3:65:10:ea:d4:31:b6:eb:e8:1a:fb:27:73:8e:22:
                    68:2b:56:14:e2:a7:7c:e0:fc:9e:d1:96:bc:d9:16:
                    df:e9:ea:96:58:c1:84:b7:83:01:38:fb:dd:32:d4:
                    86:dc:97:9f:5a:fb:51:17:96:58:6c:cf:32:59:f2:
                    76:95:75:92:58:06:9f:7b:5a:84:c4:58:16:43:ee:
                    e2:53:df:d8:95:a8:9b:df:2f:aa:be:f3:95:e8:df:
                    b7:96:bc:8f:9c:1b:17:68:de:ea:21:a8:d3:be:4f:
                    73:f0:50:49:10:64:22:f8:30:a9:48:44:db:26:4b:
                    6a:09:1e:f3:42:df:fb:44:22:21:8d:62:08:d6:95:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:31:86:FE:50:D0:C5:CD:02:9E:FD:63:DE:2E:BF:DE:F5:61:41:9C
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS265303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.172.0/22
                  177.126.1.0/24
                  177.126.6.0/24
                  177.126.8.0/24
                  177.126.10.0/23
                  177.126.13.0/24
                  177.126.15.0/24
                  187.120.12.0/24
                  189.39.216.0/22
                  200.150.164.0/23
                  200.150.167.0/24
                  200.150.169.0-200.150.170.255
                  200.150.172.0/24
                  200.150.174.0/23
                  201.87.128.0/24
                  201.87.131.0/24
                  201.87.133.0-201.87.137.255
                  201.87.139.0-201.87.142.255
                  201.87.144.0/24
                  201.87.146.0-201.87.150.255
                  201.87.152.0/23
                  201.87.157.0/24
                IPv6:
                  2804:2dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:e1:e2:27:1b:a9:e3:1e:6a:f0:e0:1f:fa:91:98:c6:c4:
         30:58:86:58:0c:65:8a:5d:6d:af:91:4e:fa:56:d9:d3:67:55:
         df:a4:fa:06:5e:68:ce:2b:0a:35:eb:50:01:4a:46:60:e3:bb:
         66:9b:d8:71:e2:e6:92:4b:39:68:6e:75:b7:d2:98:bc:df:ed:
         c9:25:50:7b:01:6d:62:92:a4:e2:73:0c:31:7c:19:1e:55:dd:
         77:ca:4c:19:71:58:18:96:01:56:7d:0e:ac:a7:90:dc:7e:5e:
         c5:2f:93:63:43:4e:48:28:70:01:c1:55:db:ae:26:6e:7b:db:
         8d:3a:fc:b7:c1:60:96:ba:c7:56:b7:cf:fa:84:69:2f:82:d0:
         d9:33:e1:be:32:f2:3a:36:42:a2:53:23:5a:2a:b5:ea:ec:b6:
         1c:9d:60:36:4d:a2:60:cd:9e:23:e6:b4:d3:bc:48:32:3a:70:
         9c:76:82:da:d8:1a:90:bf:04:4a:5c:98:33:6c:87:41:80:1b:
         c2:ec:32:bc:fc:0f:fe:ac:08:85:68:1a:33:e9:fc:39:8f:b3:
         3d:1c:37:42:d7:4d:2c:4f:30:58:24:a8:13:e6:f2:23:3c:50:
         fc:41:57:05:89:a6:53:01:8f:8a:7e:f4:41:bd:09:14:b3:39:
         a1:0e:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:15 2026 by rpki-client