Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa
File:                     3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          4dsyIW2JOwzlSwPZrUtjMl6Gt5bXgVv2KD0M3/AS0cE=
Subject key identifier:   0B:87:C9:38:51:CC:6C:F2:E6:45:60:8B:53:93:81:A4:C9:36:C8:AF
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       58621C15ECDA13E90B0837C50504920D3D442BA9
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa
Signing time:             Fri 16 Jan 2026 02:01:55 +0000
ROA not before:           Fri 16 Jan 2026 01:56:55 +0000
ROA not after:            Fri 15 Jan 2027 02:01:55 +0000
asID:                     264367
IP address blocks:        168.196.136.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:62:1c:15:ec:da:13:e9:0b:08:37:c5:05:04:92:0d:3d:44:2b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Jan 16 01:56:55 2026 GMT
            Not After : Jan 15 02:01:55 2027 GMT
        Subject: CN=0B87C93851CC6CF2E645608B539381A4C936C8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:ba:95:ee:26:cf:b3:3f:1a:da:c1:e1:9b:
                    73:f3:36:68:1d:e5:3a:3b:cc:39:ed:b2:0d:ec:d0:
                    11:fd:8c:f2:c6:63:61:ca:2c:b5:8a:db:2b:18:96:
                    66:8f:ca:50:fe:7f:a7:71:ca:7b:b5:b4:61:27:20:
                    a4:09:64:09:77:94:10:01:b8:91:81:f3:98:e3:45:
                    07:5c:50:19:88:ae:c2:86:4a:ce:bf:8a:b1:5c:f9:
                    08:1a:cb:a0:cb:01:1f:50:b9:2c:61:d9:26:5f:08:
                    6a:7c:92:74:ee:02:54:9d:a8:b8:d8:c4:72:98:4c:
                    16:57:07:58:9c:b9:fd:36:d7:4f:e3:32:c5:7a:79:
                    50:93:37:a1:27:c2:46:46:e5:96:53:19:d5:24:2e:
                    15:3e:5a:a2:a9:a3:44:ff:b0:0d:4d:f6:60:3f:26:
                    eb:52:83:1d:b3:3d:d6:a8:fe:d6:77:f0:c9:d7:cd:
                    42:ac:b4:82:81:2a:8e:1f:7e:21:6d:16:e1:6c:bc:
                    62:0f:d0:3d:2d:aa:4b:59:4d:be:c3:8e:68:61:91:
                    7b:27:7d:cf:ff:ab:e1:d9:a4:6c:60:1f:06:d3:58:
                    8e:fb:71:7d:78:91:35:a0:2b:fe:09:6e:b4:5e:d8:
                    90:cc:83:86:6c:32:2b:c6:8c:19:a9:84:31:f6:e3:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:87:C9:38:51:CC:6C:F2:E6:45:60:8B:53:93:81:A4:C9:36:C8:AF
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3139362e3133362e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:7a:ab:be:86:ef:cd:56:56:bd:b5:34:1f:f0:cc:fb:35:89:
         34:d1:60:37:59:cd:4b:48:dd:6f:21:ad:52:63:70:80:b8:dc:
         63:57:9a:43:0a:de:39:72:c3:c1:d6:38:d7:3e:99:19:a8:13:
         54:7c:94:73:ab:62:ae:77:d2:a7:9d:4f:0f:bc:72:41:a4:66:
         d1:fc:59:e5:83:f3:c5:63:4e:8b:76:96:e4:d3:14:17:a5:0e:
         0a:37:d7:8e:f0:8e:36:e8:a4:18:08:d4:ff:41:d9:e8:bc:67:
         d9:ce:1b:92:ae:15:3e:b0:d6:12:d8:92:b8:99:a0:7b:e6:37:
         df:9e:66:de:ad:a8:14:c5:d7:0c:48:57:ca:62:cc:62:c2:ba:
         00:6d:51:34:e8:70:49:39:08:a2:4f:f6:4c:b7:86:d4:31:f6:
         6c:14:fb:f3:8d:37:86:3d:81:7f:e4:65:cc:ff:4e:71:21:ef:
         2a:d0:fc:8e:38:61:6a:b7:73:a2:e5:52:ba:be:62:ea:c3:fa:
         da:f9:dc:ae:27:c2:68:21:0f:52:13:ec:c0:2b:08:d2:3c:f9:
         b8:fd:26:e3:c0:35:9c:60:86:2d:c3:85:8c:28:3b:7d:05:82:
         71:b1:e4:7f:0a:46:89:1f:8b:39:05:45:6c:9c:97:b0:48:16:
         6d:20:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:07 2026 by rpki-client