Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
File: 323830343a3363303a3a2f33322d3438203d3e203238363035.roa (raw, json)
Hash identifier: P/kh4G/rsmsLfkFsR4tU3uWouZ7zlc4hMIFsbSPcMWw=
Subject key identifier: C9:34:21:13:9E:4C:55:EB:1B:7A:0E:48:3F:AE:04:F2:62:76:E9:0E
Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial: 7C793DEC32322A1B0A78746193C94547ABB997E2
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
Signing time: Tue 10 Mar 2026 19:30:10 +0000
ROA not before: Tue 10 Mar 2026 19:25:10 +0000
ROA not after: Tue 09 Mar 2027 19:30:10 +0000
asID: 28605
IP address blocks: 2804:3c0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:79:3d:ec:32:32:2a:1b:0a:78:74:61:93:c9:45:47:ab:b9:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Validity
Not Before: Mar 10 19:25:10 2026 GMT
Not After : Mar 9 19:30:10 2027 GMT
Subject: CN=C93421139E4C55EB1B7A0E483FAE04F26276E90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:a4:51:0c:3b:29:0e:7b:03:bd:44:7e:76:
94:2c:22:7c:90:1f:3f:8d:5c:c4:44:cf:bd:9b:3b:
08:7c:a7:ff:1a:e0:aa:7f:7f:c1:50:66:52:d7:32:
af:b6:d0:e0:ae:11:d4:6f:75:08:0e:d2:69:be:32:
92:4e:2e:71:e7:04:ae:ef:83:30:1c:23:4d:e7:01:
38:68:9a:08:da:cc:f7:28:48:a6:c3:6d:56:e9:d1:
59:33:d0:3e:27:eb:46:56:a4:52:ef:fd:1e:b7:f7:
da:af:86:e6:0c:a6:a7:7a:6c:82:a2:02:12:ed:db:
f2:39:c0:02:75:53:ef:15:c0:f9:75:7a:cd:b3:b9:
62:56:0e:0c:f7:a9:de:61:55:ff:91:5f:76:19:00:
63:6e:cf:e2:a5:e5:a6:00:f2:d4:d9:87:28:8b:d1:
63:00:af:9b:40:2e:e7:7d:c2:a3:d3:2d:bb:eb:38:
8b:67:7d:17:8d:2b:53:43:25:6f:2b:94:64:08:60:
a1:a5:19:49:5d:68:92:d8:38:a8:70:f4:24:a9:f3:
26:21:7c:4e:a8:29:ce:50:55:c0:74:b3:3b:0e:8b:
52:22:9e:0c:d9:40:a7:55:4e:74:a9:62:e0:43:20:
f6:26:0c:75:52:d1:d2:95:7c:50:3a:1f:ed:df:92:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:21:13:9E:4C:55:EB:1B:7A:0E:48:3F:AE:04:F2:62:76:E9:0E
X509v3 Authority Key Identifier:
keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/323830343a3363303a3a2f33322d3438203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3c0::/32
Signature Algorithm: sha256WithRSAEncryption
77:eb:77:a6:e7:0d:04:7d:ee:b7:7c:30:48:f4:0d:8a:3b:ad:
b9:0e:4b:da:a2:ce:3e:d3:cb:28:05:6c:5d:6d:29:fa:1b:ef:
dd:88:af:44:e7:dd:de:b2:0e:33:c1:09:83:48:44:63:8f:5f:
fa:1b:92:ca:a8:3d:b7:36:0b:a8:ac:c6:42:0d:9c:56:85:77:
d6:25:80:4d:db:e8:62:f7:13:32:47:5f:f3:35:85:bc:f2:80:
07:6d:a6:23:26:2c:09:97:22:a0:bb:38:02:33:b0:85:a8:c8:
3e:5d:e2:ac:97:86:ea:30:42:51:21:1b:9e:94:2c:18:93:e3:
f7:ee:97:e5:8c:f0:5c:54:41:fe:ea:6c:76:7b:b2:15:e3:c8:
c6:ac:b3:31:3d:2a:f4:5c:b3:9c:03:b5:ab:c7:c4:59:a7:c7:
9b:bf:26:6f:04:91:13:65:f3:79:b0:02:65:3f:5a:9d:9a:c6:
50:e0:4f:71:66:ae:53:d9:b4:a6:ad:5c:ad:ae:13:ee:70:18:
06:ac:31:e5:ba:10:fd:dc:93:b3:46:27:cf:b4:fd:94:08:58:
c0:26:b6:9c:07:6b:81:88:61:33:cb:d5:7f:a8:05:86:ee:7a:
7f:2c:6e:28:83:b2:83:03:1b:62:0e:0f:e3:d4:3f:bb:de:54:
46:b0:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:05 2026 by rpki-client