Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa
File:                     323830343a313633383a3a2f33332d3333203d3e20323633323736.roa (raw, json)
Hash identifier:          yaMw4foR1NR59lX5aiE3Ooa+9KEId4nzXYXqtg07KKw=
Subject key identifier:   C2:6C:AB:BE:C4:40:F2:2A:72:B7:E3:47:A2:6C:2C:55:47:53:F8:99
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       051CCE1B66B7179B970E280DE8A54A0BF6118F90
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:02:59 +0000
ROA not before:           Wed 07 Oct 2026 18:57:59 +0000
ROA not after:            Wed 06 Oct 2027 19:02:59 +0000
asID:                     263276
IP address blocks:        2804:1638::/33 maxlen: 33
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1c:ce:1b:66:b7:17:9b:97:0e:28:0d:e8:a5:4a:0b:f6:11:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:57:59 2026 GMT
            Not After : Oct  6 19:02:59 2027 GMT
        Subject: CN=C26CABBEC440F22A72B7E347A26C2C554753F899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:c2:31:93:48:b9:03:37:b3:cd:16:6a:4a:
                    40:5a:db:6e:c6:e0:ab:10:31:18:aa:de:8f:40:13:
                    b2:10:94:b5:1a:59:37:d7:8d:d3:f9:57:5b:2c:7f:
                    89:ac:70:1d:dd:c2:0b:fc:35:f1:17:0a:2b:93:7c:
                    16:69:06:fd:da:46:d2:d1:b0:07:2c:a9:ee:e2:28:
                    bf:73:c5:66:00:9a:63:1e:d9:24:d1:02:3b:87:dc:
                    3f:95:c5:5b:fb:98:9b:55:a2:88:39:77:69:86:cf:
                    19:a8:1d:45:5c:07:18:42:f9:5d:60:4a:e2:8e:74:
                    68:74:89:be:cd:bf:e8:38:db:75:0a:5b:13:2f:46:
                    58:77:63:63:77:86:ba:cc:64:be:40:7b:0c:38:1f:
                    a6:e2:16:0a:d4:d9:43:ba:e7:21:e3:dd:ea:6e:22:
                    08:9d:ba:85:2c:2e:74:85:3e:32:13:7e:16:e8:d6:
                    4c:cf:3e:6d:62:17:a7:d8:2c:0a:4e:0f:e1:24:6d:
                    ba:ad:80:fc:bb:d9:e8:19:20:a0:29:88:ff:46:9a:
                    c8:95:7f:c2:2a:f6:cc:77:90:15:de:77:d3:ff:88:
                    08:b1:39:19:84:48:bc:f9:ed:80:9e:a4:e3:a0:db:
                    c8:ae:2c:9b:af:c2:dc:0a:b9:ec:cb:af:c0:ac:2f:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:AB:BE:C4:40:F2:2A:72:B7:E3:47:A2:6C:2C:55:47:53:F8:99
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a3a2f33332d3333203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:a4:11:21:74:e0:09:7d:a4:e5:44:39:6d:da:28:28:d9:
         ed:1e:a1:6b:5c:ef:13:58:14:cf:e4:74:f9:ab:d5:83:50:70:
         25:33:b2:ac:72:67:8b:9d:30:20:98:4f:79:f7:b3:b6:c9:da:
         9b:ec:3f:b5:d8:e6:81:85:8c:a9:18:98:31:97:a9:0d:98:1c:
         b7:0e:b8:6f:0e:6a:df:fe:c9:b4:e9:02:3f:b8:7f:23:cf:9a:
         82:4a:38:48:f9:a7:47:93:76:31:80:cd:3a:1c:8d:af:6f:9c:
         d3:7d:8e:72:88:53:34:7b:91:a0:c1:33:44:cb:b0:56:ac:bc:
         97:e6:a0:25:90:94:ff:ff:c5:da:ec:79:c3:1c:a2:1d:e1:16:
         45:26:87:83:5b:15:92:9b:23:90:31:0f:79:cf:59:43:f7:df:
         b5:77:54:8f:26:1d:8e:2d:3e:c9:b4:92:07:9a:94:4b:5a:ed:
         93:d3:6b:d0:ca:c9:e4:a7:bf:f5:4c:d2:1d:b1:71:1e:93:b2:
         96:8f:44:4c:da:18:b6:7c:cd:67:47:ef:fb:4e:d0:36:10:49:
         b0:75:02:af:fa:4d:b6:67:06:13:56:c2:6a:80:88:28:b9:e5:
         fd:84:7d:91:06:e5:79:c7:ee:53:d5:7f:8c:11:68:ac:03:1d:
         fc:8a:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----