Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
File: 323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier: D34aDv/hip4AlB+AaZiVT/4Rj0SFFpW3IIXYqHtgo1U=
Subject key identifier: C7:41:53:65:5A:88:8A:C7:83:0E:45:A1:D3:D6:E8:18:5F:F4:96:BA
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 64A6F0C1DAD5630BA14D6912A2C0C8DEE8766C33
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:51 +0000
ROA not before: Mon 25 Aug 2025 20:07:51 +0000
ROA not after: Mon 24 Aug 2026 20:12:51 +0000
asID: 272218
IP address blocks: 2804:83c4:100::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a6:f0:c1:da:d5:63:0b:a1:4d:69:12:a2:c0:c8:de:e8:76:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:51 2025 GMT
Not After : Aug 24 20:12:51 2026 GMT
Subject: CN=C74153655A888AC7830E45A1D3D6E8185FF496BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:a4:bb:ed:ab:ae:06:db:f0:dc:fb:9d:36:
ae:47:3f:d9:89:68:f9:ca:be:d1:7a:ea:63:64:23:
d8:8e:8e:6f:94:0b:8c:12:7f:6e:6c:46:f1:42:e2:
1e:06:b6:3f:a9:5b:28:90:18:c6:c2:ee:16:4d:d5:
07:77:78:12:0f:ca:02:88:49:62:cf:33:b2:08:b5:
0e:ed:1f:5b:90:77:e1:11:a5:dc:5c:7d:8a:ba:74:
87:9b:18:3d:ad:9d:2e:74:91:0d:18:92:0e:8d:37:
c3:de:74:28:40:89:a2:6d:e3:3c:57:95:92:99:dd:
af:bc:af:55:06:ec:0f:79:4a:01:a4:25:66:38:90:
91:80:df:b5:b5:9f:63:39:9f:1e:67:af:25:9c:85:
6a:00:56:85:d0:c7:77:31:be:11:76:f7:9e:f3:b9:
4a:90:f7:6c:69:c7:96:e1:9f:43:eb:df:c9:9a:9e:
98:82:3b:4f:e6:e1:0b:97:6b:dc:02:db:f0:4f:44:
7e:ba:e6:84:c7:d2:66:3f:ed:26:f7:7b:a7:14:41:
40:6e:96:67:c6:4a:47:2e:1a:df:4c:77:33:82:19:
c0:7d:18:07:6d:ac:6d:42:5a:39:f8:66:09:71:5a:
b4:cb:e9:00:b5:18:07:60:5c:03:cb:e0:ee:20:d0:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:53:65:5A:88:8A:C7:83:0E:45:A1:D3:D6:E8:18:5F:F4:96:BA
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:100::/44
Signature Algorithm: sha256WithRSAEncryption
4a:9e:e3:80:85:0e:f3:95:8a:c1:07:0c:c8:37:9a:ed:7a:1b:
02:87:c2:df:03:a7:d3:7b:9b:eb:31:0b:8f:6e:a4:6a:c6:2a:
48:80:88:e5:6b:10:02:2f:61:fb:e9:89:02:4c:61:99:bf:96:
7d:2c:07:9a:1f:71:4e:60:08:a0:77:9d:12:22:b6:df:cf:11:
c6:eb:76:e5:25:ca:a6:fb:dc:20:11:53:d4:7b:bc:5f:6f:34:
86:0c:52:e4:ac:af:ee:a8:c3:97:fc:ef:17:1f:be:50:d7:f7:
d9:79:0e:a4:04:58:dc:fc:8c:ab:e6:96:c9:96:99:ec:dd:d1:
d2:71:77:4c:f6:82:e1:6c:70:f3:59:a1:10:7b:68:47:68:dc:
1d:b8:79:d1:af:60:4c:43:7e:4f:32:25:5c:d6:03:a4:c4:0d:
a9:db:df:41:2b:0b:3e:6d:ef:3a:36:2a:37:33:f6:96:8e:e5:
83:24:d1:d2:90:7b:4b:bf:e3:77:c9:c6:b9:66:68:f8:dc:89:
f6:bb:6d:56:8b:03:04:00:e5:ab:b0:04:ef:2c:4d:45:25:bb:
36:00:a0:e0:5a:ba:11:12:6e:e5:a5:61:81:06:ab:4c:ab:0d:
9a:44:12:39:00:3a:0a:d9:fd:0a:eb:7e:f3:cf:5d:5f:0c:7a:
7f:c3:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:29 2025 by rpki-client