Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323638333030.roa
File: 323830343a383363343a316530303a3a2f34312d3431203d3e20323638333030.roa (raw, json)
Hash identifier: XUw41lxvW5sKsKSICFcgqhWtwSQMFdMFxQTKYufNJu4=
Subject key identifier: C0:F7:79:51:35:60:2D:FF:0C:4F:9B:A7:46:42:1F:4E:AA:78:FB:8A
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 407431AA24A08560013CDD6EC4C968CFC6BC4205
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323638333030.roa
Signing time: Wed 03 Sep 2025 13:15:09 +0000
ROA not before: Wed 03 Sep 2025 13:10:09 +0000
ROA not after: Wed 02 Sep 2026 13:15:09 +0000
asID: 268300
IP address blocks: 2804:83c4:1e00::/41 maxlen: 41
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:74:31:aa:24:a0:85:60:01:3c:dd:6e:c4:c9:68:cf:c6:bc:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Sep 3 13:10:09 2025 GMT
Not After : Sep 2 13:15:09 2026 GMT
Subject: CN=C0F7795135602DFF0C4F9BA746421F4EAA78FB8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:c4:9b:0c:11:b9:31:1e:82:84:d6:d0:e6:
ff:b0:a2:65:9e:6e:82:50:33:ae:18:66:8d:7f:53:
1f:b9:55:59:25:af:c8:bd:21:0c:45:e3:1b:f5:7d:
9a:2d:fa:17:3a:8c:c5:a5:5c:38:57:37:8d:b2:f8:
cf:bb:20:6c:e2:b7:d3:a3:d6:3f:8b:db:6c:17:b8:
bc:f4:de:ba:7f:18:6b:cc:ae:72:62:97:9e:bc:66:
05:69:28:e7:b2:d4:c4:f7:65:fa:92:c8:ba:fa:6c:
41:13:45:73:c6:06:20:89:80:ce:6e:40:05:20:3d:
27:fd:71:05:e9:c6:0c:61:11:e3:7d:9d:5c:2c:27:
ba:39:33:b5:80:2a:5f:40:7b:c7:5e:ba:23:f2:e3:
f4:55:25:e6:1b:06:c6:4d:38:79:36:ee:9c:c6:a4:
98:fe:95:fb:a5:fa:98:46:0e:2b:e2:51:41:78:b0:
72:ce:b1:be:06:86:1f:65:c9:3a:f7:d4:1c:57:4a:
c5:f3:5c:49:ef:b2:d5:27:45:f0:f5:c4:e8:73:fc:
9e:71:a5:c1:2b:c6:a0:86:46:8b:27:ad:83:24:c4:
82:98:18:a5:96:c1:83:93:ab:00:bf:cf:6b:8b:95:
9f:2a:27:b8:fd:56:b9:a2:d4:61:d7:2d:58:a5:7a:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:79:51:35:60:2D:FF:0C:4F:9B:A7:46:42:1F:4E:AA:78:FB:8A
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323638333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:1e00::/41
Signature Algorithm: sha256WithRSAEncryption
0e:0a:b8:b3:1c:05:aa:34:bd:f4:28:c0:b2:48:a6:84:f2:ac:
53:49:e6:a7:0b:a5:fc:6f:c1:70:26:e1:5a:13:7e:43:1a:f6:
d1:90:88:d9:05:7e:85:7b:57:e0:c8:fd:61:20:7f:7c:c5:7c:
cb:1f:73:c5:e3:74:29:c8:3d:08:ed:a2:be:5f:6f:1a:65:02:
9e:a7:a7:71:00:ed:c2:c4:e9:9d:37:95:81:c8:a9:4c:32:0b:
69:94:8a:0a:06:91:8a:b9:3e:67:6c:db:b8:12:1f:ee:fd:d3:
3f:f9:a2:10:10:be:77:d8:30:73:20:6f:86:27:81:09:d1:45:
fe:33:83:1a:63:e2:89:77:94:4f:39:7f:57:29:cb:5f:4d:b3:
15:68:8d:20:2f:2a:bf:e3:ee:0c:b5:5d:40:27:df:ee:81:3c:
9b:f3:7e:2b:5c:83:1d:ef:04:b2:b5:b4:7b:fb:14:eb:44:f7:
c0:43:35:b5:db:02:af:d2:9e:49:72:04:6a:36:57:6d:a9:3a:
eb:9c:a5:3a:36:11:c6:50:79:d3:76:1c:ec:79:06:78:40:07:
ea:58:10:fb:d8:2f:c5:9c:18:2e:21:a3:7a:1e:b3:9b:e2:da:
23:6c:fb:62:73:89:0c:12:a7:f4:c6:66:77:bc:1e:8c:14:bf:
47:2c:66:30
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUQHQxqiSghWABPN1uxMloz8a8QgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNTA5MDMxMzEwMDlaFw0yNjA5MDIxMzE1MDlaMDMxMTAvBgNV
BAMTKEMwRjc3OTUxMzU2MDJERkYwQzRGOUJBNzQ2NDIxRjRFQUE3OEZCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8e8SbDBG5MR6ChNbQ5v+womWe
boJQM64YZo1/Ux+5VVklr8i9IQxF4xv1fZot+hc6jMWlXDhXN42y+M+7IGzit9Oj
1j+L22wXuLz03rp/GGvMrnJil568ZgVpKOey1MT3ZfqSyLr6bEETRXPGBiCJgM5u
QAUgPSf9cQXpxgxhEeN9nVwsJ7o5M7WAKl9Ae8deuiPy4/RVJeYbBsZNOHk27pzG
pJj+lful+phGDiviUUF4sHLOsb4Ghh9lyTr31BxXSsXzXEnvstUnRfD1xOhz/J5x
pcErxqCGRosnrYMkxIKYGKWWwYOTqwC/z2uLlZ8qJ7j9Vrmi1GHXLVilet8jAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUwPd5UTVgLf8MT5unRkIfTqp4+4owHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2EzMTY1MzAzMDNhM2EyZjM0MzEyZDM0MzEyMDNk
M2UyMDMyMzYzODMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygEg8QeADANBgkqhkiG9w0BAQsF
AAOCAQEADgq4sxwFqjS99CjAskimhPKsU0nmpwul/G/BcCbhWhN+Qxr20ZCI2QV+
hXtX4Mj9YSB/fMV8yx9zxeN0Kcg9CO2ivl9vGmUCnqencQDtwsTpnTeVgcipTDIL
aZSKCgaRirk+Z2zbuBIf7v3TP/miEBC+d9gwcyBvhieBCdFF/jODGmPiiXeUTzl/
VynLX02zFWiNIC8qv+PuDLVdQCff7oE8m/N+K1yDHe8EsrW0e/sU60T3wEM1tdsC
r9KeSXIEajZXbak665ylOjYRxlB503Yc7HkGeEAH6lgQ+9gvxZwYLiGjeh6zm+La
I2z7YnOJDBKn9MZmd7wejBS/RyxmMA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:45:01 2025 by rpki-client