Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
File:                     323830343a356639383a3a2f33332d3333203d3e20323639313131.roa (raw, json)
Hash identifier:          yqj14cnnc6nNqc0t0S1q/KiU/OfPVsgID+DE+mlffAA=
Subject key identifier:   8C:DD:9C:70:46:15:A7:E6:2E:B4:7B:93:D6:47:1A:E8:02:20:8C:C6
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       41E263EB56A55FCF58DB46AB445AD34FC0F401E4
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa
Signing time:             Thu 05 Feb 2026 00:06:10 +0000
ROA not before:           Thu 05 Feb 2026 00:01:10 +0000
ROA not after:            Thu 04 Feb 2027 00:06:10 +0000
asID:                     269111
IP address blocks:        2804:5f98::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e2:63:eb:56:a5:5f:cf:58:db:46:ab:44:5a:d3:4f:c0:f4:01:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Feb  5 00:01:10 2026 GMT
            Not After : Feb  4 00:06:10 2027 GMT
        Subject: CN=8CDD9C704615A7E62EB47B93D6471AE802208CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:76:dc:94:9b:cc:01:02:40:bb:76:87:c1:
                    e2:85:80:3d:8b:71:d4:b0:08:9f:db:1d:8a:05:be:
                    99:7c:6e:4f:8e:79:df:f8:1d:07:85:06:6a:8e:c1:
                    dd:e2:22:3b:f4:65:12:10:43:c6:93:4e:76:c1:a5:
                    cb:0d:1d:2f:ee:da:50:ed:35:5d:83:04:d3:0f:80:
                    57:fd:13:de:bc:23:20:20:1d:09:1d:58:81:cc:9a:
                    4e:89:d7:5d:a9:0c:6e:12:12:dc:1b:9b:99:04:8f:
                    57:a0:5a:c4:c5:8b:96:f5:60:d3:90:52:db:56:68:
                    33:19:b9:b5:44:2a:91:b8:cd:62:71:96:0a:74:d6:
                    b7:ff:01:2d:80:ba:9e:eb:9d:55:bb:ae:e0:69:f1:
                    d8:87:27:f3:38:4a:c3:96:fb:dd:24:fb:61:af:98:
                    d6:d2:a0:6c:8e:10:12:2e:b1:3c:66:a6:a5:da:ab:
                    1d:e4:33:35:5a:b3:b6:fa:69:60:02:e2:4e:d8:61:
                    28:06:2d:36:3a:76:d8:3b:01:a2:e2:f2:bd:4c:73:
                    61:73:47:ec:68:62:86:ca:ca:55:7f:93:f6:1c:55:
                    65:65:93:9f:f1:d5:e2:da:46:8f:64:de:21:6e:a0:
                    f8:eb:1b:23:5c:80:af:8e:da:58:cd:ba:9e:34:68:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DD:9C:70:46:15:A7:E6:2E:B4:7B:93:D6:47:1A:E8:02:20:8C:C6
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/323830343a356639383a3a2f33332d3333203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f98::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:40:4e:23:b5:32:59:62:57:9b:db:c5:1d:dc:85:b4:db:33:
         b6:66:c9:64:09:c0:ef:90:26:ff:70:89:c6:b3:3f:e7:05:53:
         c2:73:b1:9c:95:3b:c3:f9:f8:71:c4:22:67:ec:23:c1:e4:1c:
         d7:10:a4:7b:8f:d1:8a:b6:b3:c6:79:3e:70:b1:49:a4:d2:59:
         75:23:8f:b1:ff:ab:0c:77:4d:b8:28:21:26:ba:fa:50:4a:9e:
         15:6e:3e:8f:85:57:52:85:3a:77:68:8d:19:6c:c3:b7:40:9b:
         ac:ae:3a:c5:f5:a1:57:f5:1e:87:23:fd:a5:1f:d4:fc:7f:65:
         8f:e3:d0:ae:b9:91:7d:1b:5a:bc:5a:96:ae:c0:e8:eb:e9:95:
         92:c3:7f:33:c2:df:f6:7b:20:15:d7:87:da:a5:7e:ab:90:52:
         ac:9c:6f:52:fc:51:2b:90:8a:6c:3b:a4:44:29:2e:6f:aa:b3:
         54:5f:14:3d:b0:cb:f1:5b:49:6c:c3:36:68:21:e3:57:61:ee:
         66:c5:9a:12:59:f5:65:53:f5:2a:31:0e:38:6b:f0:1b:43:ae:
         7f:04:df:25:25:58:5a:de:3b:99:eb:ab:7d:ed:1c:be:d4:1c:
         19:c9:24:89:7f:0d:ec:c7:d4:30:94:4c:9e:35:50:b8:4f:a4:
         0d:c1:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:43:47 2026 by rpki-client