Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          b0G1cbjSQexEvC1SjCrpKr2BqEGK0B9bF4AnzfmGJ+s=
Subject key identifier:   75:DA:77:62:2A:E1:56:95:9F:0D:79:97:93:DB:3E:F4:E7:AE:4C:8E
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       085626EC74E61BFE77DDC6E4AB235811C2C9CBEC
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:02:59 +0000
ROA not before:           Wed 07 Oct 2026 18:57:59 +0000
ROA not after:            Wed 06 Oct 2027 19:02:59 +0000
asID:                     263276
IP address blocks:        2804:1638:1::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:56:26:ec:74:e6:1b:fe:77:dd:c6:e4:ab:23:58:11:c2:c9:cb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:57:59 2026 GMT
            Not After : Oct  6 19:02:59 2027 GMT
        Subject: CN=75DA77622AE156959F0D799793DB3EF4E7AE4C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:05:26:e4:40:1b:bf:31:0a:62:dd:ab:cc:
                    7b:71:c1:fc:68:df:86:ea:36:f0:b9:ae:9d:8f:b7:
                    fb:05:ea:d0:8b:45:44:63:0b:62:7d:b1:97:45:7a:
                    60:55:91:08:88:20:58:60:45:20:48:d0:44:3b:7e:
                    c7:c4:c7:09:76:22:a6:cd:64:67:26:4b:4f:a1:5a:
                    6c:56:e4:39:92:d7:aa:3a:9b:64:f1:ba:db:7a:22:
                    d0:69:0c:2a:04:09:3c:42:00:dd:e2:30:e7:52:f0:
                    70:fb:f4:f7:13:fb:35:39:7f:50:a6:9f:bc:3f:e3:
                    9f:47:f0:f3:05:33:da:31:3e:b2:ed:5a:07:3d:9e:
                    08:02:4d:4b:3b:98:94:35:88:fe:1f:5e:b3:ca:47:
                    a9:58:19:c8:22:e4:9c:a2:95:02:88:76:f1:b6:fe:
                    e1:69:c1:38:19:64:8d:1f:fa:1f:2e:8f:6e:d8:23:
                    4a:37:f5:45:62:48:a6:37:50:9b:ed:9c:3c:6b:42:
                    ec:91:6a:01:17:29:e3:1b:1a:d0:05:60:5c:7e:7d:
                    0a:fb:6b:cb:ce:af:ad:65:06:42:5a:fd:68:2f:5e:
                    7f:af:47:e4:00:e4:be:a6:29:b4:ad:e8:e9:a6:71:
                    8b:2c:28:9c:95:01:e3:7d:b6:9a:b5:f5:0f:36:3e:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:77:62:2A:E1:56:95:9F:0D:79:97:93:DB:3E:F4:E7:AE:4C:8E
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a313a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:24:bc:2b:6b:c3:a8:b8:aa:25:35:fe:33:72:cc:03:50:06:
         af:a7:33:cf:bc:ff:f0:77:18:7e:a1:f4:6a:b0:27:40:e2:91:
         b1:24:a8:9d:af:df:7b:a8:d9:22:ed:b8:4a:28:97:d7:01:20:
         f6:70:77:3c:d8:3e:44:f7:c5:be:de:ff:e9:45:f1:55:f7:0e:
         87:9a:98:88:bf:a0:db:3a:47:51:d6:1f:8b:a2:e7:2e:85:9b:
         f5:d0:b9:2f:b7:bf:b8:60:77:0e:87:09:f0:af:90:52:e0:a9:
         40:fe:cd:6b:4a:a8:e9:7c:da:d9:83:3d:89:92:81:7e:bc:fe:
         da:04:76:29:5c:43:34:37:2c:1b:52:c2:5d:72:dc:d2:2c:7b:
         7b:76:33:b0:96:dc:e2:00:54:6c:75:4d:70:f5:0e:93:83:92:
         30:58:2e:eb:20:df:8f:43:7d:77:06:3d:91:76:78:a0:84:17:
         79:db:d6:13:56:c2:67:5f:57:e4:1b:6e:b8:1d:79:62:c9:41:
         c0:e9:57:b2:7e:33:dc:9d:49:d9:97:f1:c0:1d:a3:ce:f7:2d:
         06:48:28:89:02:e1:c8:a7:ce:e0:7d:f7:c3:aa:22:6d:71:ff:
         91:7f:58:fe:c2:f4:6e:da:7f:c3:d4:9f:4d:0c:75:e3:b7:55:
         7f:fe:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----