Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
File:                     34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa (raw, json)
Hash identifier:          I2iEr4mXBaUlyD6sJPmb6Ee1ITF/ZdaDiSCa4M2+5v4=
Subject key identifier:   C5:49:25:16:85:46:54:C3:33:89:76:B6:DE:F4:38:AA:21:44:9E:97
Certificate issuer:       /CN=6B5D42D93E58C00245A6501E9C01C833BB782217
Certificate serial:       29E7149B136EA5A07BAFE16A5CAFB101D64D772E
Authority key identifier: 6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa
Signing time:             Thu 05 Feb 2026 00:06:10 +0000
ROA not before:           Thu 05 Feb 2026 00:01:10 +0000
ROA not after:            Thu 04 Feb 2027 00:06:10 +0000
asID:                     269111
IP address blocks:        45.178.214.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:14:9b:13:6e:a5:a0:7b:af:e1:6a:5c:af:b1:01:d6:4d:77:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5D42D93E58C00245A6501E9C01C833BB782217
        Validity
            Not Before: Feb  5 00:01:10 2026 GMT
            Not After : Feb  4 00:06:10 2027 GMT
        Subject: CN=C5492516854654C3338976B6DEF438AA21449E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:bb:c2:7e:77:fd:f2:b4:c0:e3:e7:86:d3:
                    0a:b1:87:05:5c:0e:ec:2f:c1:fa:05:11:0f:65:70:
                    35:ed:14:27:4d:ae:eb:c8:0b:0a:03:c3:25:41:06:
                    db:0a:2d:a5:61:32:02:59:56:1c:08:2c:b1:bb:b9:
                    02:63:f1:be:05:2d:a9:07:65:ef:bf:e5:d1:eb:9b:
                    c9:4a:ae:df:7a:47:56:3f:b2:a6:7e:d8:2c:60:f2:
                    f4:a0:c1:7d:3e:bc:7e:44:99:e9:dd:a6:d4:44:79:
                    96:b1:01:6c:1b:e1:cf:ad:f7:70:11:8b:1c:fe:f4:
                    e7:53:f2:49:84:9e:e1:5a:35:1d:ae:4d:84:e1:50:
                    03:30:33:db:21:93:16:29:60:bb:1a:97:0e:9f:04:
                    d7:8b:63:e8:24:a9:34:07:10:d6:21:a4:31:e4:6d:
                    dc:6b:96:96:9f:c8:f4:16:2f:da:6b:6f:1c:f3:39:
                    fd:a6:8f:fd:6a:6d:2f:6d:45:9e:dc:02:3f:51:f4:
                    d7:27:d6:64:96:a1:cb:bf:8e:1a:f0:39:6b:a8:f8:
                    81:38:2c:54:7e:a8:72:f7:96:b5:bd:cf:f8:aa:a4:
                    2f:5d:a1:bd:e8:dd:d1:3a:13:4c:1e:ee:30:d7:bf:
                    46:ed:57:d9:2a:bc:7a:95:ca:6f:f2:4f:be:6e:32:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:25:16:85:46:54:C3:33:89:76:B6:DE:F4:38:AA:21:44:9E:97
            X509v3 Authority Key Identifier:
                keyid:6B:5D:42:D9:3E:58:C0:02:45:A6:50:1E:9C:01:C8:33:BB:78:22:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/6B5D42D93E58C00245A6501E9C01C833BB782217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B5D42D93E58C00245A6501E9C01C833BB782217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6KuN768eM3kot4JwDHAC9HV4cawHWcYymCfnJvdYWop/2/34352e3137382e3231342e302f32342d3234203d3e20323639313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:70:09:4a:57:cf:ae:30:21:fe:c9:a5:92:75:30:47:dc:
         17:2c:ab:1e:79:aa:f8:9d:53:01:db:32:b2:03:d2:15:1a:aa:
         77:dc:af:91:9f:53:8f:a6:f3:08:0b:5f:15:37:71:8c:40:1c:
         d6:f5:08:40:49:ab:10:d9:c3:8f:a0:6a:de:a0:d6:ce:8d:8c:
         83:10:a1:20:d7:bd:b1:f3:0b:e8:5d:c1:a2:d5:6e:cd:0c:dd:
         49:90:da:bf:1b:d8:f4:ac:e0:4b:d5:b8:50:60:df:d6:c7:93:
         83:7d:dd:1d:d5:d9:22:d6:5c:2f:0f:66:d5:45:6b:d6:25:7c:
         8b:fe:6f:e8:1b:10:30:55:ad:1f:ca:59:db:2b:d4:2a:3d:ec:
         56:e8:18:74:d0:9e:a3:ff:9b:2a:ce:44:97:3c:60:23:23:cc:
         fa:fc:3e:46:91:87:8b:98:a5:b6:5b:12:ab:4b:f1:20:2a:5d:
         52:f7:5b:7e:65:ef:2b:ab:0b:ec:25:d0:25:21:87:c3:65:fe:
         8a:9d:5a:34:01:55:e8:04:e6:69:3c:72:3c:bf:cc:67:43:26:
         53:57:b9:3a:ab:11:06:c4:fc:4e:87:10:92:0f:4d:95:d2:d1:
         c5:00:fc:6d:17:c6:42:e7:3f:95:13:d6:44:ed:14:eb:71:ff:
         32:15:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:41 2026 by rpki-client