Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa
File:                     323830343a326131303a3a2f33322d3438203d3e20323634303534.roa (raw, json)
Hash identifier:          LyBCwAGRm6XSOfqphm46K53BuGg9hUEK1BhRr+rNnoM=
Subject key identifier:   04:2D:92:B1:34:CA:38:BD:B7:99:08:C8:6E:14:55:E0:DB:85:F4:47
Certificate issuer:       /CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
Certificate serial:       1055A680AFA940585884818CF748736647834A2D
Authority key identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa
Signing time:             Thu 05 Feb 2026 06:19:34 +0000
ROA not before:           Thu 05 Feb 2026 06:14:34 +0000
ROA not after:            Thu 04 Feb 2027 06:19:34 +0000
asID:                     264054
IP address blocks:        2804:2a10::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:55:a6:80:af:a9:40:58:58:84:81:8c:f7:48:73:66:47:83:4a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
        Validity
            Not Before: Feb  5 06:14:34 2026 GMT
            Not After : Feb  4 06:19:34 2027 GMT
        Subject: CN=042D92B134CA38BDB79908C86E1455E0DB85F447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:35:76:e3:9a:86:d2:83:0c:83:2b:62:7d:
                    7b:91:08:42:45:a1:8a:fd:d4:7c:f1:92:92:4c:dd:
                    5e:3f:cd:e7:fc:9c:e2:ad:8d:55:68:00:b9:08:1e:
                    28:7e:fe:d1:aa:48:3f:04:d8:67:46:4c:e2:00:90:
                    a9:34:a0:ae:02:31:b0:be:3d:d4:a1:6d:3b:f8:90:
                    fb:9f:73:71:45:14:60:15:40:bb:94:0a:e7:a3:d9:
                    60:cb:bf:4f:5c:f5:6e:23:f1:c4:4e:73:cc:04:44:
                    bc:fe:ca:62:9d:9a:dd:f1:fb:e5:26:06:5c:68:87:
                    8d:1b:38:3c:40:5d:4f:1f:d8:72:fa:3b:fb:25:8b:
                    12:51:33:c4:00:a2:db:99:da:8a:cb:28:63:9b:62:
                    19:de:7d:27:66:59:0f:43:ac:4b:b3:12:64:b0:32:
                    0d:73:f9:71:ca:b3:9d:c5:9c:fb:39:f5:12:11:32:
                    f1:f8:2f:fd:09:2e:44:2c:66:67:59:0a:b2:3f:32:
                    cf:13:c3:99:af:41:c6:72:52:29:e7:6f:42:fe:76:
                    60:81:99:f3:d1:22:d9:e4:dc:2d:ee:9f:98:44:d9:
                    1d:ae:4b:41:80:55:f4:a4:9c:39:d9:cd:1a:75:62:
                    51:f7:73:b0:e5:82:f7:0c:33:6b:18:80:d0:d6:5d:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2D:92:B1:34:CA:38:BD:B7:99:08:C8:6E:14:55:E0:DB:85:F4:47
            X509v3 Authority Key Identifier:
                keyid:E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/323830343a326131303a3a2f33322d3438203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:73:77:b8:75:65:39:c3:28:b3:e7:96:82:30:68:43:95:ad:
         85:50:88:2a:fe:48:48:9b:b4:59:7d:ae:d7:67:0d:d5:62:db:
         c6:90:47:b4:fa:bc:fe:b5:6e:68:23:c9:46:ad:73:7d:ca:9e:
         10:32:4a:ba:de:0d:ea:cf:d7:31:f5:83:f0:61:1f:63:f8:99:
         7c:c2:d4:6d:36:7a:df:b3:14:42:27:62:2a:92:0a:5b:ee:7e:
         aa:a2:42:fe:b3:62:f5:1c:b1:51:21:b8:59:31:19:e9:d9:20:
         bf:c3:da:1c:fc:eb:01:6e:e3:d0:0f:e8:33:75:00:f0:99:ca:
         1d:10:d3:bd:e9:95:e6:45:32:ee:2e:da:a1:2d:be:f5:8f:73:
         a8:52:65:9d:36:3b:22:55:b7:41:9d:50:5c:62:85:a9:3b:ff:
         11:12:e1:49:78:8e:b3:2e:9a:b5:c8:88:fb:77:dc:66:03:c4:
         30:da:f9:90:13:7f:66:20:d5:43:bb:67:d7:f8:0a:45:b9:58:
         16:69:72:94:55:94:4f:41:4f:1a:65:1f:01:eb:c1:5b:cc:5e:
         6b:c3:c9:de:9a:c9:90:35:28:30:d5:63:dc:2c:fc:9f:f5:2b:
         13:4f:a9:7f:35:81:ad:8c:28:73:67:99:2f:51:6f:98:75:f6:
         d2:2c:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:52 2026 by rpki-client