Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
File:                     3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (raw, json)
Hash identifier:          ifkq/WZnqNxa4KZDKatWhhki5JDZRtHdN91pOIWqUBc=
Subject key identifier:   DE:02:D6:44:97:2D:29:41:9B:F2:8B:98:C5:6B:EA:E1:BC:BA:49:8C
Certificate issuer:       /CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
Certificate serial:       4F065CDC64005D961C94A775EE3128C02CA40B68
Authority key identifier: 81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
Signing time:             Wed 26 Aug 2026 12:44:22 +0000
ROA not before:           Wed 26 Aug 2026 12:39:22 +0000
ROA not after:            Wed 25 Aug 2027 12:44:22 +0000
asID:                     264316
IP address blocks:        168.121.216.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:5c:dc:64:00:5d:96:1c:94:a7:75:ee:31:28:c0:2c:a4:0b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F1A503A376C564F65BFB27FD51A3B4D5C92F6
        Validity
            Not Before: Aug 26 12:39:22 2026 GMT
            Not After : Aug 25 12:44:22 2027 GMT
        Subject: CN=DE02D644972D29419BF28B98C56BEAE1BCBA498C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:a6:05:7c:f0:5c:a6:09:31:10:27:98:dd:
                    9d:f3:f0:4d:48:6a:2d:20:ba:30:37:d0:6d:b1:06:
                    81:0f:db:cf:83:9f:e4:0f:92:e4:b3:1d:72:cb:02:
                    37:d3:44:ef:54:ba:36:6c:df:07:78:7f:54:c7:ee:
                    d7:51:3d:c4:79:b0:10:97:58:e6:49:56:d0:5d:b7:
                    7b:f5:ca:16:49:c9:1f:89:47:41:27:e2:af:24:57:
                    b4:98:d1:f8:e8:4b:2c:b6:2c:e3:f8:43:a4:db:8d:
                    57:f3:36:6e:b5:e9:36:99:f9:8f:67:1a:d8:43:01:
                    1a:83:7e:58:a6:dc:6c:0a:a8:12:0b:cf:a2:8e:01:
                    21:16:79:e6:17:1d:fc:09:64:bd:3b:de:f6:52:af:
                    a2:3d:f8:76:65:a0:de:8b:86:d4:e2:a4:6d:2e:71:
                    f8:f3:eb:ab:9f:79:67:f8:18:83:b3:13:a7:87:6a:
                    57:65:76:5e:9a:c6:f6:5c:66:0f:72:f5:4f:74:5f:
                    e6:97:ef:00:68:5d:5d:55:01:c0:7a:1b:f1:a2:f3:
                    2f:e6:5b:c7:eb:67:59:24:71:60:dc:d8:e5:90:4d:
                    57:1f:bb:ab:33:82:be:6c:80:98:4b:f1:6c:06:c4:
                    d0:b1:f1:86:26:50:35:e7:4c:cf:58:61:45:20:99:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:D6:44:97:2D:29:41:9B:F2:8B:98:C5:6B:EA:E1:BC:BA:49:8C
            X509v3 Authority Key Identifier:
                keyid:81:7F:1A:50:3A:37:6C:56:4F:65:BF:B2:7F:D5:1A:3B:4D:5C:92:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F1A503A376C564F65BFB27FD51A3B4D5C92F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:51:8e:e7:bf:66:15:2c:a4:b0:2a:82:c1:1d:39:fe:65:bc:
         e7:8c:5f:26:a5:98:02:62:59:5b:0f:99:8b:14:8d:f2:d4:52:
         a9:9d:1a:46:36:f5:d5:62:14:33:2e:d2:a3:a7:20:52:7e:29:
         4c:9b:e6:7c:9e:41:25:da:94:df:28:1a:b2:fd:fa:7d:92:3f:
         c2:6f:05:ab:96:b8:f3:79:e9:71:91:e3:a1:cf:16:ff:d7:40:
         ff:2e:42:de:26:b9:d8:24:1a:98:c6:d3:e9:56:60:5c:35:09:
         b5:b6:bd:8e:38:80:e5:ea:d8:64:00:cb:e2:a6:4d:a2:11:10:
         67:2d:43:f1:7b:0f:90:15:25:38:26:2a:15:49:ef:60:54:d6:
         6a:df:21:34:f6:8f:cb:6c:43:a3:5a:9b:7a:3f:99:27:50:cc:
         61:7f:c5:46:9d:33:ce:5f:ed:e0:52:16:82:ec:f0:bf:4e:36:
         29:4d:9d:72:4a:4d:23:6c:8e:c2:4b:47:ba:77:87:4d:57:ac:
         2f:6a:ec:30:e4:c3:b9:cf:09:29:72:71:82:a3:a6:26:c9:16:
         2f:c1:80:43:69:c5:85:f9:72:7a:c0:ca:23:05:e3:a7:26:cd:
         f1:c2:84:f9:fc:20:56:45:76:af:90:36:0b:0a:a1:71:a8:1e:
         3f:da:20:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTwZc3GQAXZYclKd17jEowCykC2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjFBNTAzQTM3NkM1NjRGNjVCRkIyN0ZENTFBM0I0
RDVDOTJGNjAeFw0yNjA4MjYxMjM5MjJaFw0yNzA4MjUxMjQ0MjJaMDMxMTAvBgNV
BAMTKERFMDJENjQ0OTcyRDI5NDE5QkYyOEI5OEM1NkJFQUUxQkNCQTQ5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOaYFfPBcpgkxECeY3Z3z8E1I
ai0gujA30G2xBoEP28+Dn+QPkuSzHXLLAjfTRO9UujZs3wd4f1TH7tdRPcR5sBCX
WOZJVtBdt3v1yhZJyR+JR0En4q8kV7SY0fjoSyy2LOP4Q6TbjVfzNm616TaZ+Y9n
GthDARqDflim3GwKqBILz6KOASEWeeYXHfwJZL073vZSr6I9+HZloN6LhtTipG0u
cfjz66ufeWf4GIOzE6eHaldldl6axvZcZg9y9U90X+aX7wBoXV1VAcB6G/Gi8y/m
W8frZ1kkcWDc2OWQTVcfu6szgr5sgJhL8WwGxNCx8YYmUDXnTM9YYUUgmYavAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3gLWRJctKUGb8ouYxWvq4by6SYwwHwYDVR0j
BBgwFoAUgX8aUDo3bFZPZb+yf9UaO01ckvYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJCS2I2ZXRVUVR3SEVYSkJQODJES1NiOE1TelBKUDRKU3d3WnNuSzY1
cm0vMC84MTdGMUE1MDNBMzc2QzU2NEY2NUJGQjI3RkQ1MUEzQjRENUM5MkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0YxQTUwM0EzNzZDNTY0
RjY1QkZCMjdGRDUxQTNCNEQ1QzkyRjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyQktiNmV0VVFUd0hFWEpCUDgyREtTYjhNU3pQSlA0SlN3d1pzbks2NXJtLzAv
MzEzNjM4MmUzMTMyMzEyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh52DANBgkqhkiG9w0BAQsFAAOCAQEAOVGO
579mFSyksCqCwR05/mW854xfJqWYAmJZWw+ZixSN8tRSqZ0aRjb11WIUMy7So6cg
Un4pTJvmfJ5BJdqU3ygasv36fZI/wm8Fq5a483npcZHjoc8W/9dA/y5C3ia52CQa
mMbT6VZgXDUJtba9jjiA5erYZADL4qZNohEQZy1D8XsPkBUlOCYqFUnvYFTWat8h
NPaPy2xDo1qbej+ZJ1DMYX/FRp0zzl/t4FIWguzwv042KU2dckpNI2yOwktHuneH
TVesL2rsMOTDuc8JKXJxgqOmJskWL8GAQ2nFhflyesDKIwXjpybN8cKE+fwgVkV2
r5A2CwqhcageP9og1Q==
-----END CERTIFICATE-----