Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa
File:                     AS53062.roa (raw, json)
Hash identifier:          9o9npdRUrRU/P0nPs2kPeME1VGs4mQuMf664pswrXZ8=
Subject key identifier:   40:55:9A:29:8B:9C:F2:07:B3:67:C0:6D:E9:6B:DD:18:98:80:2A:77
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       3FCF9ED3F5D75C5CE8517E310C60E74C2B0B8712
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa
Signing time:             Thu 05 Feb 2026 15:17:23 +0000
ROA not before:           Thu 05 Feb 2026 15:12:23 +0000
ROA not after:            Thu 04 Feb 2027 15:17:23 +0000
asID:                     53062
IP address blocks:        45.164.194.0/23 maxlen: 24
                          179.51.216.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cf:9e:d3:f5:d7:5c:5c:e8:51:7e:31:0c:60:e7:4c:2b:0b:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb  5 15:12:23 2026 GMT
            Not After : Feb  4 15:17:23 2027 GMT
        Subject: CN=40559A298B9CF207B367C06DE96BDD1898802A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:cd:c3:cc:5d:a6:c3:ce:d3:d2:b2:59:7c:
                    40:18:88:8c:72:90:e0:fc:50:6f:da:30:46:fe:1f:
                    6e:00:d1:31:d6:0c:2d:a9:79:5b:55:95:c6:a9:58:
                    a4:fd:de:f3:f6:0f:be:61:44:84:73:dc:36:c7:f7:
                    cf:9d:2d:42:c1:7b:bb:94:9c:13:b0:1e:c0:74:4e:
                    3d:03:56:3e:80:e7:31:01:2e:aa:a2:56:1b:91:52:
                    12:29:c8:19:74:5c:99:12:6f:66:0f:57:77:5d:c4:
                    71:ca:cc:1e:c6:85:d7:8c:eb:f3:e9:3a:e2:d0:6a:
                    05:e6:32:c5:5b:99:91:8f:4d:43:69:dc:71:a2:77:
                    8f:69:83:0a:73:29:97:6e:49:ef:50:dd:6a:f7:25:
                    bd:17:62:c6:58:e9:8a:ce:83:65:a4:af:2d:bb:a4:
                    34:70:d9:a6:b5:6b:85:bb:33:4f:e0:50:87:6f:4b:
                    1a:f9:b6:d8:84:fc:71:b1:de:f9:b4:13:b9:d6:19:
                    79:ca:02:d4:b3:56:ad:fc:6c:c0:a6:d9:ac:91:5f:
                    13:26:46:9a:ec:b9:98:38:bd:12:ba:a0:1c:98:9f:
                    38:83:2d:a1:9f:00:84:de:d3:cd:34:87:db:40:c7:
                    bc:ba:a5:9a:ad:dd:9f:e6:e0:cf:05:59:de:39:99:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:9A:29:8B:9C:F2:07:B3:67:C0:6D:E9:6B:DD:18:98:80:2A:77
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.194.0/23
                  179.51.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:43:40:48:89:1b:77:0f:0e:68:8c:03:3d:76:99:32:43:
         5b:36:e4:5f:96:8f:55:48:ac:39:c8:ee:fe:4e:f5:4b:a6:03:
         54:45:83:bc:f2:f0:0b:87:d5:5e:f5:83:33:4d:7f:8b:02:14:
         c6:77:03:aa:30:d5:59:86:fe:b1:82:e5:47:c8:13:46:33:bb:
         97:eb:ce:ae:f8:0e:57:be:b1:64:5e:83:ed:6a:82:49:3b:97:
         f0:ce:ee:02:d3:3e:46:19:3b:27:e0:bf:7f:19:e4:f6:26:f6:
         14:e2:91:90:b5:96:1d:c1:c4:89:fc:75:1d:c7:84:69:37:7f:
         01:09:ac:aa:62:7b:62:50:4f:7f:31:d5:de:d6:96:3e:ef:79:
         39:6c:68:8e:76:f4:58:3c:58:aa:be:99:68:7d:0b:85:2e:98:
         40:2e:44:0c:d5:92:ab:e8:90:e9:05:91:24:a8:36:d4:b8:7c:
         4d:3c:ab:01:b2:d6:bb:ed:57:dd:c6:65:44:3c:37:4b:1e:4d:
         4c:33:78:c8:74:63:0a:7e:0e:22:93:62:ce:1c:cd:5a:b9:22:
         b7:8a:85:e2:05:8b:85:bb:e9:dc:4e:29:af:18:57:73:d2:46:
         c5:3c:16:f0:e2:f5:d7:be:7a:c6:74:6d:39:7b:a6:85:25:f4:
         0d:1d:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:43:02 2026 by rpki-client