Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3430303a3a2f34302d3430203d3e20323638343235.roa
File: 323830343a353130343a3430303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier: lAa+v8EsJcs7R+UClsWWcb0a3WILUnqFmuIZz8oH5YI=
Subject key identifier: AE:3D:3C:52:CE:34:8A:B2:F1:75:DB:69:1E:80:48:33:36:77:A0:D3
Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial: 7209EB505326E9C14A6FCB3F18D27D94F23EDD8F
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3430303a3a2f34302d3430203d3e20323638343235.roa
Signing time: Tue 22 Sep 2026 11:44:22 +0000
ROA not before: Tue 22 Sep 2026 11:39:22 +0000
ROA not after: Tue 21 Sep 2027 11:44:22 +0000
asID: 268425
IP address blocks: 2804:5104:400::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:09:eb:50:53:26:e9:c1:4a:6f:cb:3f:18:d2:7d:94:f2:3e:dd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Validity
Not Before: Sep 22 11:39:22 2026 GMT
Not After : Sep 21 11:44:22 2027 GMT
Subject: CN=AE3D3C52CE348AB2F175DB691E8048333677A0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:e7:71:81:38:e3:4a:13:76:f9:31:80:01:
e9:a7:12:d3:52:cb:79:c7:75:11:dd:e1:85:33:89:
9c:f5:1b:91:91:d5:93:7c:1d:99:55:f7:41:32:e6:
81:51:60:72:25:73:96:24:b0:12:a3:07:58:6d:7e:
30:f6:f0:fe:ec:f2:5f:cb:90:d5:40:61:96:a0:aa:
ab:b4:6a:39:c1:aa:ed:48:e8:47:c2:18:65:c7:04:
46:62:7c:d0:88:c3:08:56:b5:42:96:49:63:65:7c:
50:ea:10:c9:10:17:51:cf:81:cf:c6:0b:06:f5:9c:
2c:07:cb:9d:44:cd:9d:75:93:2e:3b:ea:18:4c:f3:
fd:05:7a:da:cb:26:09:d3:ed:c3:d4:ff:70:97:47:
77:22:a6:4e:26:f3:d5:7c:a5:3e:49:ff:1b:1d:27:
12:ba:73:59:1a:bc:80:e4:14:fe:74:1b:da:56:03:
b5:a2:03:71:03:39:a5:87:f5:4b:00:ca:49:f7:4e:
24:de:37:e4:47:ad:b6:d6:68:11:7f:17:8f:5f:e2:
01:18:32:1d:10:56:ad:57:34:fb:4b:93:cd:cf:74:
f3:20:41:77:eb:dd:85:d4:a9:4e:69:79:03:e5:1c:
06:a2:8b:4c:8c:28:8c:91:ef:87:4c:c4:5f:dc:97:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:3C:52:CE:34:8A:B2:F1:75:DB:69:1E:80:48:33:36:77:A0:D3
X509v3 Authority Key Identifier:
keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a3430303a3a2f34302d3430203d3e20323638343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5104:400::/40
Signature Algorithm: sha256WithRSAEncryption
34:cb:6b:c1:28:f9:0e:f3:42:7e:86:b3:39:09:4e:94:82:dd:
4f:cc:dd:b4:77:70:50:6c:6e:97:35:76:51:02:e4:58:be:c1:
43:1b:a8:c8:87:0e:ca:63:91:b7:2a:8a:00:3f:ce:54:b1:cf:
9c:dd:c4:a5:82:71:f8:2a:4e:43:83:36:52:73:0b:f8:b0:cb:
e1:a7:0d:a4:69:5e:8f:fe:aa:57:e4:47:8f:8c:43:b3:33:f4:
05:bd:70:4a:f0:53:50:ca:3f:c2:eb:e4:ff:3c:05:e3:d3:59:
0c:af:ac:c3:ab:bc:d7:00:55:ae:40:6e:da:ad:92:c8:5f:2d:
38:49:7e:82:d1:6f:97:08:49:f6:e5:fd:e2:7f:ca:be:53:ff:
7e:9d:34:bc:85:11:31:bd:d8:fc:3a:71:38:15:c9:4c:fe:7b:
0b:eb:20:14:d7:40:de:e9:40:47:da:00:f0:03:34:f6:a8:6c:
1d:6b:9b:64:04:2e:db:9b:18:d4:aa:f5:75:93:17:7b:0a:f7:
5d:ff:fd:ec:0e:e5:06:5d:5d:16:d1:4d:00:c5:68:73:5b:5f:
b0:39:5a:64:2a:77:b6:cf:a5:69:96:71:72:37:b7:a6:e5:c1:
6f:ed:37:1d:e2:76:51:70:2e:18:df:78:99:84:a1:70:86:ff:
c3:d0:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:33:04 2026 by rpki-client