Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa
File:                     323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa (raw, json)
Hash identifier:          aVqmtCKnkeHhj2Ifg4nTjzfJYOptYJlwTGn4zTY2Asw=
Subject key identifier:   D3:6F:DC:30:6C:66:6F:EC:5A:A2:BB:35:DB:3A:15:00:DC:75:88:07
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       64D68D115F9D7DEF4A44EDA90896D35754FCB7D6
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:02:59 +0000
ROA not before:           Wed 07 Oct 2026 18:57:59 +0000
ROA not after:            Wed 06 Oct 2027 19:02:59 +0000
asID:                     263276
IP address blocks:        2804:1638:aa90::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d6:8d:11:5f:9d:7d:ef:4a:44:ed:a9:08:96:d3:57:54:fc:b7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:57:59 2026 GMT
            Not After : Oct  6 19:02:59 2027 GMT
        Subject: CN=D36FDC306C666FEC5AA2BB35DB3A1500DC758807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:09:06:6a:e6:7a:02:a6:d9:59:5e:6a:e9:5d:
                    53:10:84:2b:38:5a:c1:21:e4:f9:56:58:48:29:ff:
                    67:60:c8:d8:a9:8f:ba:22:58:6a:b5:e9:35:1e:c6:
                    6b:1c:94:34:18:30:34:5a:63:4d:86:6b:e3:ed:82:
                    cb:ff:1a:3a:35:ff:33:6b:95:b7:9f:0e:4e:72:41:
                    b4:07:7a:12:7c:83:7a:ff:31:ac:d8:e6:7e:48:eb:
                    b4:03:4e:77:ff:26:fe:eb:90:ba:19:b1:39:0f:98:
                    64:a9:21:34:10:a6:62:5f:4d:30:ff:be:78:dc:e4:
                    61:34:17:05:99:d9:7f:60:5c:78:65:c5:d7:15:dc:
                    8d:91:67:23:0c:c1:9e:be:76:57:1b:ab:e3:2b:5f:
                    c4:88:8e:1c:eb:02:ed:89:9d:df:03:74:65:2f:c4:
                    49:f8:ec:13:5b:5c:c0:02:0b:65:7b:84:90:dd:0a:
                    9a:d4:64:51:ee:7e:de:b2:79:10:0f:57:17:a5:50:
                    83:1d:3c:22:e8:1d:3a:f1:64:c8:a1:c7:ed:1e:9d:
                    b1:fb:58:72:57:ee:35:1a:68:ea:7d:80:43:00:7e:
                    66:cb:6b:b9:44:be:ea:38:55:3f:75:98:ac:ae:c7:
                    7e:d3:a4:5c:f1:5e:e2:8b:fe:a3:94:aa:94:4d:93:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:DC:30:6C:66:6F:EC:5A:A2:BB:35:DB:3A:15:00:DC:75:88:07
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/323830343a313633383a616139303a3a2f34382d3438203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1638:aa90::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:fe:15:49:9d:c4:e4:56:73:ef:58:ed:95:b2:9f:53:38:fa:
         b1:be:d6:2b:3f:5c:9f:98:d0:cb:bc:74:f2:c7:dc:ad:7b:24:
         a9:33:90:b5:8b:14:0b:65:9a:fa:75:a4:02:5b:47:45:ba:bf:
         27:9b:4e:7d:aa:7a:bb:16:ef:58:45:66:71:37:c9:8e:71:98:
         8e:46:57:37:f7:cb:72:00:e8:d9:56:90:b4:6d:c5:1d:70:c6:
         a8:a2:ea:0f:e5:08:1c:a9:bf:e6:04:e7:30:10:72:0a:43:af:
         ce:ff:b3:fc:4c:03:df:b2:6c:5c:a7:c7:c4:87:db:15:80:b6:
         b6:5a:ae:7c:35:5f:a0:88:c0:5c:e6:f9:69:b4:68:3d:44:cd:
         ed:db:7f:c4:60:af:d8:05:ed:26:e6:1c:36:5d:52:83:f5:91:
         71:20:11:d6:39:25:8b:47:30:eb:32:f8:43:82:92:22:cc:9a:
         1c:1a:7b:7e:6a:75:3e:c7:37:6a:75:c1:16:56:6a:62:27:7d:
         0c:f2:ca:db:e2:3a:48:3f:4e:4e:cb:77:94:67:2a:8b:41:dc:
         36:dc:57:c6:36:88:f1:89:93:57:1c:f3:f8:1b:2a:92:8a:01:
         2f:43:c5:20:ab:76:6e:98:84:2d:1c:44:ac:a7:b5:66:fc:67:
         de:7b:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----