Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a636130303a3a2f34302d3430203d3e20323638343235.roa
File: 323830343a353130343a636130303a3a2f34302d3430203d3e20323638343235.roa (raw, json)
Hash identifier: 2iAKL6MO0oMmil0JopEzj2XYVluJhZ3eJJKAZm8Lhjs=
Subject key identifier: 8D:12:50:BE:E7:3E:17:BA:E7:BD:4A:54:F6:B9:4B:82:01:51:98:CE
Certificate issuer: /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial: 25E83AE8D709D4349DF524455510E1621B036442
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a636130303a3a2f34302d3430203d3e20323638343235.roa
Signing time: Tue 22 Sep 2026 11:44:22 +0000
ROA not before: Tue 22 Sep 2026 11:39:22 +0000
ROA not after: Tue 21 Sep 2027 11:44:22 +0000
asID: 268425
IP address blocks: 2804:5104:ca00::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e8:3a:e8:d7:09:d4:34:9d:f5:24:45:55:10:e1:62:1b:03:64:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Validity
Not Before: Sep 22 11:39:22 2026 GMT
Not After : Sep 21 11:44:22 2027 GMT
Subject: CN=8D1250BEE73E17BAE7BD4A54F6B94B82015198CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:49:27:d8:07:08:3d:a7:46:d6:0b:f0:c0:
4f:9c:eb:f7:d5:ca:d5:5c:27:73:66:54:78:36:82:
5c:b3:18:60:5e:17:73:8e:88:cf:9f:fa:4d:2d:24:
4b:9b:11:14:18:ca:0d:7c:73:50:d5:c1:91:04:67:
4f:14:1c:0b:2b:ca:12:a8:1d:b4:ff:75:09:1f:c7:
55:b5:29:39:04:4d:61:d1:a4:17:1d:e7:ae:58:f8:
6e:c1:0d:14:61:b8:f0:20:cc:e1:61:be:14:56:b2:
8f:a0:06:dd:9a:df:f1:96:37:30:ae:db:fc:77:98:
87:34:59:d9:96:0c:d1:fd:95:06:17:0b:dd:de:af:
d3:50:77:26:6b:cd:c7:60:be:92:30:0d:d2:90:3a:
2c:ae:1b:67:43:db:0b:69:1a:38:06:42:6e:a3:4d:
97:68:ea:94:72:51:02:1a:d3:2f:cf:c9:95:58:e8:
0f:95:71:06:9d:cd:38:38:3c:b8:1f:11:53:e3:d7:
fa:bd:dc:f5:74:93:95:ca:cd:0e:89:71:7c:12:dc:
7d:4e:c6:12:61:e8:ea:96:3b:94:02:17:3c:50:3f:
13:a5:fa:ae:de:c0:9b:0f:30:b3:1d:db:0c:c2:03:
4f:1c:f5:18:3a:94:70:93:75:db:10:88:43:f3:bb:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:50:BE:E7:3E:17:BA:E7:BD:4A:54:F6:B9:4B:82:01:51:98:CE
X509v3 Authority Key Identifier:
keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a636130303a3a2f34302d3430203d3e20323638343235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5104:ca00::/40
Signature Algorithm: sha256WithRSAEncryption
5a:b9:4b:53:de:17:a4:a5:25:c1:f8:99:76:8d:df:93:fd:1e:
e6:a3:de:7f:7d:3a:a2:94:b7:c7:bf:34:7b:ba:bd:67:e0:bc:
90:4b:8d:16:71:ca:42:78:c5:50:dd:aa:20:ee:cc:eb:02:12:
11:01:d3:d7:d1:dd:7b:4b:d2:0d:72:06:f4:d4:aa:31:8c:fa:
e1:ae:1f:04:8a:02:6b:67:68:ad:cf:2c:ec:8e:be:e1:bc:95:
f8:12:99:0e:2f:bc:e9:20:42:39:a0:1b:22:26:e7:d6:36:29:
88:86:e3:9e:94:f1:e9:8f:ec:f6:85:94:27:0f:3e:fe:8a:52:
6e:de:09:8d:c7:6e:75:f3:a0:09:0e:18:ad:54:ce:c0:99:7a:
d9:81:3a:ab:26:35:78:68:fb:c8:8c:ef:c0:eb:da:76:f3:5c:
2b:28:a2:a1:a1:dd:73:99:20:01:01:bc:92:ea:43:42:20:f1:
92:76:77:c6:49:35:52:94:9b:da:75:26:de:9b:d5:19:b7:84:
11:e4:83:f8:8d:3d:62:aa:95:12:45:cc:08:e4:54:53:49:ce:
14:78:2d:87:4d:ac:b8:5c:76:f5:35:9a:c9:02:c3:20:9e:31:
17:a8:b8:9b:dc:19:66:d0:97:96:d3:2e:d1:1b:f0:08:93:12:
69:7d:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:42:53 2026 by rpki-client