Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3333203d3e20323730353833.roa
File: 323830343a366533383a3a2f33322d3333203d3e20323730353833.roa (raw, json)
Hash identifier: klnCrx8h/s0uxEdBZS5OszsV+lRuudzb3RYtZ8fdWyM=
Subject key identifier: 99:22:9C:A8:E9:95:9A:F3:26:F0:C0:CE:96:FD:44:0D:1C:99:BD:DF
Certificate issuer: /CN=1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F
Certificate serial: 5707D55BB2D39116AD7B48898BA5263E982BE18E
Authority key identifier: 1B:3F:F1:7B:9C:86:8B:B2:AD:F3:5F:EC:6C:CC:7C:88:BA:D4:A3:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3333203d3e20323730353833.roa
Signing time: Tue 14 Jul 2026 18:59:52 +0000
ROA not before: Tue 14 Jul 2026 18:54:52 +0000
ROA not after: Tue 13 Jul 2027 18:59:52 +0000
asID: 270583
IP address blocks: 2804:6e38::/32 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:07:d5:5b:b2:d3:91:16:ad:7b:48:89:8b:a5:26:3e:98:2b:e1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F
Validity
Not Before: Jul 14 18:54:52 2026 GMT
Not After : Jul 13 18:59:52 2027 GMT
Subject: CN=99229CA8E9959AF326F0C0CE96FD440D1C99BDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:dc:e9:af:c7:ba:5d:a4:00:c9:11:66:c7:
d6:01:e9:2b:e9:7b:93:3e:10:77:6d:5a:ff:65:87:
5e:28:2f:70:59:19:3e:40:20:81:2c:d4:7b:dc:19:
23:ad:6e:5a:dd:0c:23:69:a6:53:61:27:99:62:80:
27:f7:92:05:d3:5c:b2:e0:05:37:79:27:7f:3d:ca:
90:bb:a4:57:8b:bf:2b:0d:ce:64:0b:33:b9:81:45:
1b:dd:ad:61:72:97:ab:ed:a6:9c:7e:c5:78:10:94:
98:a9:bb:13:cf:b4:97:56:ef:0e:4b:04:a2:2a:ae:
5e:8d:46:2d:95:93:4e:55:39:0a:7f:17:76:74:fa:
ed:19:a2:91:ec:89:4f:48:8f:4b:a1:ed:8f:9f:3f:
5b:b0:01:58:05:76:31:3c:8a:1e:cb:f0:51:f7:bd:
9d:1b:19:e3:73:ac:0a:54:69:f4:7a:a9:d6:fe:56:
90:a1:e3:f8:d7:1e:26:ea:c2:93:d5:b3:ef:e5:5f:
38:ff:86:18:e1:10:a1:e4:fa:40:be:db:16:0a:74:
cf:0f:a2:c4:cb:8d:51:7c:1a:13:29:f6:4f:fb:f0:
cf:ee:01:2e:b9:cf:4b:c2:77:54:9b:75:d7:52:5c:
56:21:05:e4:33:30:b7:5f:de:19:a6:24:1e:fd:70:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:9C:A8:E9:95:9A:F3:26:F0:C0:CE:96:FD:44:0D:1C:99:BD:DF
X509v3 Authority Key Identifier:
keyid:1B:3F:F1:7B:9C:86:8B:B2:AD:F3:5F:EC:6C:CC:7C:88:BA:D4:A3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/323830343a366533383a3a2f33322d3333203d3e20323730353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e38::/32
Signature Algorithm: sha256WithRSAEncryption
07:5e:f9:d0:ab:bf:b7:7f:37:8c:90:b7:99:0f:d8:5c:02:0e:
04:cb:0f:ae:26:91:2a:18:1c:4b:c2:f7:b4:0b:4f:f4:ce:07:
a1:ec:df:c6:f3:aa:e2:ce:6b:c2:96:3c:55:52:69:22:a9:c7:
bf:62:e5:92:d1:18:0c:64:ea:91:cc:55:22:d7:9d:64:a3:1e:
03:66:6c:3c:52:83:32:b8:24:c3:2e:16:fb:b1:fe:9b:76:ae:
c1:86:8b:bc:60:48:1b:04:48:85:c8:1f:4d:be:24:0a:c7:0d:
19:b2:db:fa:e1:eb:d8:a0:c1:85:72:71:7b:8e:ca:f4:6d:8f:
73:d0:69:be:19:e6:1d:64:07:6d:f0:70:22:7c:1e:71:e6:84:
36:9c:12:83:0f:ff:dc:cb:5c:31:41:c4:75:b3:84:d5:96:4b:
f9:21:c0:ef:b9:28:74:cc:c3:a3:2a:e9:eb:50:08:cf:6e:3d:
a5:5b:f0:0d:7f:db:3a:9f:fd:3e:36:a3:a4:cd:e5:ef:c3:6b:
08:48:32:69:fa:e7:e1:22:78:61:b8:0a:43:f5:95:17:ba:cb:
5b:3f:b8:36:06:7e:89:78:ec:7e:3b:e4:a9:37:ab:ab:69:f8:
7a:dc:74:db:52:a1:3d:23:35:43:96:4f:93:8d:8f:ef:6f:3b:
0d:cb:d4:63
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVwfVW7LTkRate0iJi6UmPpgr4Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkYxN0I5Qzg2OEJCMkFERjM1RkVDNkNDQzdDODhC
QUQ0QTMxRjAeFw0yNjA3MTQxODU0NTJaFw0yNzA3MTMxODU5NTJaMDMxMTAvBgNV
BAMTKDk5MjI5Q0E4RTk5NTlBRjMyNkYwQzBDRTk2RkQ0NDBEMUM5OUJEREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu99zpr8e6XaQAyRFmx9YB6Svp
e5M+EHdtWv9lh14oL3BZGT5AIIEs1HvcGSOtblrdDCNpplNhJ5ligCf3kgXTXLLg
BTd5J389ypC7pFeLvysNzmQLM7mBRRvdrWFyl6vtppx+xXgQlJipuxPPtJdW7w5L
BKIqrl6NRi2Vk05VOQp/F3Z0+u0ZopHsiU9Ij0uh7Y+fP1uwAVgFdjE8ih7L8FH3
vZ0bGeNzrApUafR6qdb+VpCh4/jXHibqwpPVs+/lXzj/hhjhEKHk+kC+2xYKdM8P
osTLjVF8GhMp9k/78M/uAS65z0vCd1SbdddSXFYhBeQzMLdf3hmmJB79cEv1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmSKcqOmVmvMm8MDOlv1EDRyZvd8wHwYDVR0j
BBgwFoAUGz/xe5yGi7Kt81/sbMx8iLrUox8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjYxRnFrczVVUzRjTjV2MlE5N2NaUkU2OUx2cWc0djM1em5vMVg2eVFK
eXgvMC8xQjNGRjE3QjlDODY4QkIyQURGMzVGRUM2Q0NDN0M4OEJBRDRBMzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCM0ZGMTdCOUM4NjhCQjJB
REYzNUZFQzZDQ0M3Qzg4QkFENEEzMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2MUZxa3M1VVM0Y041djJROTdjWlJFNjlMdnFnNHYzNXpubzFYNnlRSnl4LzAv
MzIzODMwMzQzYTM2NjUzMzM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNzMw
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARuODANBgkqhkiG9w0BAQsFAAOCAQEAB1750Ku/
t383jJC3mQ/YXAIOBMsPriaRKhgcS8L3tAtP9M4HoezfxvOq4s5rwpY8VVJpIqnH
v2LlktEYDGTqkcxVItedZKMeA2ZsPFKDMrgkwy4W+7H+m3auwYaLvGBIGwRIhcgf
Tb4kCscNGbLb+uHr2KDBhXJxe47K9G2Pc9BpvhnmHWQHbfBwInweceaENpwSgw//
3MtcMUHEdbOE1ZZL+SHA77kodMzDoyrp61AIz249pVvwDX/bOp/9PjajpM3l78Nr
CEgyafrn4SJ4YbgKQ/WVF7rLWz+4NgZ+iXjsfjvkqTerq2n4etx021KhPSM1Q5ZP
k42P7287DcvUYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:56 2026 by rpki-client