Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3234203d3e20323632353537.roa
File:                     3136382e302e3130342e302f32322d3234203d3e20323632353537.roa (raw, json)
Hash identifier:          1PoSiu06GCukkr9G7sO+Kqg6ljtX0f2r4krjONT3GKY=
Subject key identifier:   7C:86:39:0C:70:BB:11:99:32:B7:0B:FF:5A:FC:32:E8:AC:9D:C3:4B
Certificate issuer:       /CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
Certificate serial:       52DA7F8DBE64FC34B9060630B9B623B1703F0CFF
Authority key identifier: C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3234203d3e20323632353537.roa
Signing time:             Mon 05 Oct 2026 17:05:45 +0000
ROA not before:           Mon 05 Oct 2026 17:00:45 +0000
ROA not after:            Mon 04 Oct 2027 17:05:45 +0000
asID:                     262557
IP address blocks:        168.0.104.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:da:7f:8d:be:64:fc:34:b9:06:06:30:b9:b6:23:b1:70:3f:0c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
        Validity
            Not Before: Oct  5 17:00:45 2026 GMT
            Not After : Oct  4 17:05:45 2027 GMT
        Subject: CN=7C86390C70BB119932B70BFF5AFC32E8AC9DC34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:fc:7a:c7:76:fe:cf:61:ef:a7:5f:00:2e:
                    ca:e3:6e:87:c0:13:11:43:89:e0:c6:4d:bd:16:2f:
                    91:97:c3:99:27:dd:81:66:63:d1:68:35:85:d4:81:
                    5c:78:fa:42:ac:70:eb:78:67:8c:30:9e:dd:05:88:
                    dc:4e:e7:59:93:3f:a6:f0:d9:34:6b:97:7b:f8:81:
                    87:3a:96:1c:01:2f:1b:3c:61:bb:be:a4:a0:8a:bf:
                    9c:2c:af:b9:74:86:78:63:81:7a:49:65:18:21:fa:
                    73:78:47:99:3c:e3:f6:c0:32:49:6f:f5:70:a2:1e:
                    c8:b8:92:79:1b:bf:b6:5b:1b:8d:c0:8c:d8:1f:23:
                    7f:b0:6b:7e:df:ec:d1:c9:38:84:8d:48:62:57:75:
                    49:16:0e:5b:c6:0c:b3:c1:31:ba:ea:fc:bf:e0:a6:
                    03:9d:9e:ef:26:ed:64:a6:aa:fc:69:c4:77:87:02:
                    93:14:9b:41:95:54:23:e3:9e:43:83:31:fd:dc:85:
                    bc:2d:8d:f0:18:6b:6c:57:c4:45:34:6e:57:3c:4c:
                    02:da:94:10:1f:d8:94:21:ae:c4:7b:44:47:c9:30:
                    33:71:87:77:09:ef:cf:ca:6a:ec:51:8b:8c:03:a4:
                    a8:bb:f9:c7:8c:85:08:4f:b4:56:57:24:79:f3:68:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:39:0C:70:BB:11:99:32:B7:0B:FF:5A:FC:32:E8:AC:9D:C3:4B
            X509v3 Authority Key Identifier:
                keyid:C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3136382e302e3130342e302f32322d3234203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:68:c9:f4:8f:09:e0:b1:ba:20:b0:3b:32:b7:88:80:7c:
         36:e7:9b:71:66:9e:ab:e4:3e:40:fe:f9:85:50:e8:fe:98:d2:
         53:41:d9:e9:bb:91:e3:e7:5c:2a:12:06:d6:2c:1d:30:e2:db:
         53:08:4b:ee:e1:31:f6:30:05:ba:54:b2:a9:21:3e:89:41:55:
         59:2c:a6:00:a4:ae:be:65:70:dd:cc:ea:0f:39:9e:5c:88:19:
         9b:b6:d7:cd:18:56:31:b5:63:45:66:06:56:4e:e1:19:b9:c0:
         46:d9:4e:ef:5a:98:e9:1d:ca:58:14:a8:eb:85:76:0d:25:b4:
         4d:44:34:83:f5:f8:1a:50:dc:5d:e2:dd:17:0e:be:17:79:52:
         d0:c2:fb:ff:8c:f0:ed:3e:5a:0e:6d:51:e0:9d:f2:53:1a:21:
         a9:26:c6:e6:2c:5e:07:8e:eb:47:ca:81:84:f1:50:52:dd:17:
         b0:6b:98:04:61:18:6b:16:16:0a:89:90:d8:ff:ea:ff:87:ae:
         2c:82:3b:f5:8a:aa:8e:8a:2d:8e:c5:27:a7:c0:6c:db:32:2f:
         72:6b:f9:2e:72:d8:1f:2d:8d:ca:b2:4e:9f:b5:69:12:8c:69:
         12:2f:e6:0c:a1:12:5f:18:d8:12:4b:92:a5:63:68:2e:4c:76:
         8e:03:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:13:24 2026 by rpki-client