Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          LwISnZea5xF67hQz/dxparYTAgWf2m+3NkfNB+qB6Fc=
Subject key identifier:   C7:F3:CF:ED:BA:5B:2B:96:B3:B0:15:D3:54:94:A8:21:C5:C9:40:2F
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       5C2B3F91A4D20501734886559561DE7A1067323B
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa
Signing time:             Thu 05 Feb 2026 00:06:10 +0000
ROA not before:           Thu 05 Feb 2026 00:01:10 +0000
ROA not after:            Thu 04 Feb 2027 00:06:10 +0000
asID:                     269111
IP address blocks:        45.178.212.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2b:3f:91:a4:d2:05:01:73:48:86:55:95:61:de:7a:10:67:32:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Feb  5 00:01:10 2026 GMT
            Not After : Feb  4 00:06:10 2027 GMT
        Subject: CN=C7F3CFEDBA5B2B96B3B015D35494A821C5C9402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:8b:99:34:17:d5:e1:df:c0:d6:3d:d7:36:
                    e4:1e:23:73:ed:00:50:30:82:8e:83:a9:ab:4e:77:
                    17:25:8b:b3:d0:ed:c1:84:87:b7:73:cb:2a:79:5f:
                    f3:40:f8:83:a0:5e:31:d6:4d:16:64:f6:6f:45:f6:
                    32:52:77:a3:29:c2:71:de:2c:f4:ba:74:75:73:ee:
                    c9:6a:2b:3c:bc:50:81:55:bd:66:ca:f8:3e:a9:c5:
                    3b:70:5b:38:a4:37:a3:11:4c:dd:ce:22:bb:38:47:
                    2b:07:24:31:00:73:79:ca:e3:48:1e:20:12:83:8a:
                    1a:5f:4d:c7:f1:aa:92:a2:78:31:62:3f:5e:18:6d:
                    01:51:ff:42:7d:bc:27:ba:2e:cc:54:8e:00:eb:03:
                    20:94:d8:b8:e5:b4:ba:e7:39:e7:2d:15:8a:3e:a7:
                    7f:43:f7:1f:9a:7e:69:0e:0f:18:14:f2:5b:47:6c:
                    9f:e7:e6:d3:00:a6:77:46:49:ec:a4:1b:db:09:b5:
                    22:97:cf:96:b2:a5:c6:4f:c8:f0:12:9b:af:0b:a8:
                    79:18:47:0d:73:26:db:29:cc:d1:55:16:e3:09:f8:
                    5c:cf:f7:c0:31:06:7b:cd:1a:09:4a:20:a7:6c:c1:
                    53:00:6f:f0:84:c9:1c:06:95:aa:6d:09:70:f3:aa:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:CF:ED:BA:5B:2B:96:B3:B0:15:D3:54:94:A8:21:C5:C9:40:2F
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231322e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:96:64:23:9d:30:c6:0f:56:91:fe:f5:e5:8c:1b:0d:8f:
         2d:84:00:af:38:19:5e:5f:04:1c:30:65:b8:9e:df:b3:ce:fa:
         4a:27:e6:64:b0:1d:42:71:e3:24:6e:45:87:6b:08:3e:5a:65:
         61:c3:25:4a:2a:4a:d3:a5:96:e3:a5:13:8a:66:ca:85:6a:67:
         42:b7:ba:a3:52:37:da:2a:f8:66:00:d6:a9:ab:67:0a:e0:24:
         74:8d:65:e5:22:b7:4b:1b:d1:1f:cf:a7:87:c1:d4:f7:b5:fc:
         a7:aa:aa:09:e3:4e:8b:36:30:a0:1e:b9:ca:d3:c8:05:45:63:
         82:b5:b1:c6:6b:4d:c1:66:49:c4:90:ab:84:d2:eb:25:31:00:
         61:cd:4e:27:6f:99:9c:c5:1c:5c:ec:88:2a:57:f2:98:5e:ef:
         f7:da:d7:ea:29:b5:26:f8:08:ce:86:bb:0e:c8:cb:df:f3:d6:
         8e:5c:59:67:fe:fd:77:a7:19:33:d8:2b:70:0a:31:d1:d5:84:
         ca:fc:d4:4a:a2:69:70:6f:1e:db:de:cc:f0:2f:2c:b1:af:c3:
         fc:b6:ee:25:f2:c2:87:e6:8c:e8:35:71:df:f3:72:e7:a6:b5:
         b9:55:ac:0c:e0:da:6c:34:ef:f2:28:00:11:78:14:a4:d9:45:
         4c:ed:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:43:29 2026 by rpki-client