Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa
File: 323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier: zAFfa0jMc9OULkmDT6sfSWRB0eLUBMDoGHKKtEOY9bM=
Subject key identifier: 46:89:69:46:1D:73:2D:49:7D:C3:77:11:BC:75:10:7B:DE:EF:DC:BB
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 0668804EEBB43EE9615EC9805125AC89456F7B75
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:51 +0000
ROA not before: Mon 25 Aug 2025 20:07:51 +0000
ROA not after: Mon 24 Aug 2026 20:12:51 +0000
asID: 272218
IP address blocks: 2804:83c4:1e80::/41 maxlen: 41
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:68:80:4e:eb:b4:3e:e9:61:5e:c9:80:51:25:ac:89:45:6f:7b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:51 2025 GMT
Not After : Aug 24 20:12:51 2026 GMT
Subject: CN=468969461D732D497DC37711BC75107BDEEFDCBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:73:1d:1e:f7:25:58:2d:b2:d4:8f:29:42:
ff:8b:6d:af:e9:f6:a7:66:f7:6a:94:05:31:52:55:
3c:c1:a6:58:3a:56:51:4f:87:cd:f8:4c:bb:07:07:
fc:5f:03:29:17:8d:ed:c7:a4:5a:ce:f1:27:5c:ad:
6e:51:39:ba:c8:2b:86:01:9e:75:0e:5a:e3:2c:4c:
79:c2:1b:87:19:cc:a6:f3:be:29:26:f1:18:79:48:
71:78:77:16:df:e3:da:ad:4f:5e:45:5f:7c:23:fa:
02:49:c1:4c:5a:e2:e3:d7:4a:00:88:b5:e3:a9:8b:
f3:0d:96:76:cc:60:e4:de:3f:a1:60:23:0c:18:a7:
ad:38:6b:e9:fb:66:b4:ac:d9:6a:0d:bb:61:cf:3a:
1d:a6:2f:1d:a6:ea:f4:fd:31:44:43:06:d4:e2:53:
b5:19:72:86:aa:c3:f1:85:ba:4a:cb:a5:b3:3a:7a:
f2:f2:91:bd:c7:1a:cf:43:5f:7a:ad:83:6c:71:75:
44:73:58:95:f5:e2:82:bb:a5:09:ca:76:49:09:55:
93:b8:0b:55:e9:1d:cd:ad:3d:9f:bd:57:1d:bf:84:
2d:0e:74:a8:5b:a5:4c:b3:85:d2:ff:88:63:0b:5f:
68:48:b5:44:e5:7f:3a:82:80:80:92:53:72:b1:6b:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:69:46:1D:73:2D:49:7D:C3:77:11:BC:75:10:7B:DE:EF:DC:BB
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316538303a3a2f34312d3431203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:1e80::/41
Signature Algorithm: sha256WithRSAEncryption
0c:a9:ed:cc:a3:f5:32:b3:a5:02:a3:f7:7c:ce:d1:d0:c0:3b:
9f:2e:da:5b:bc:8e:16:f7:17:bf:ae:52:cd:3d:99:99:9b:83:
ba:bb:6c:f7:00:1b:d0:8a:4e:5d:11:79:60:82:ab:c8:95:9d:
41:46:2b:a7:c6:5f:a3:74:6d:74:c6:b9:69:b0:25:68:09:46:
26:e3:1e:4d:00:cf:46:b1:cc:23:45:bd:14:ea:52:91:d3:4d:
07:2b:31:45:23:b6:14:03:9c:51:f2:24:5e:95:6e:03:a9:91:
af:8b:ea:f1:12:14:e3:04:9e:ca:12:12:3f:60:09:57:4f:1b:
8a:fe:94:75:0c:5c:c9:f5:00:20:2a:75:46:76:a5:ea:81:fa:
00:a5:00:53:68:86:14:00:4b:eb:96:dc:17:a4:4d:91:3c:d6:
e4:f1:db:9e:27:d9:61:c0:46:ad:50:4a:08:ab:fa:a1:0d:7c:
db:cd:6e:b4:95:42:f6:b5:8c:0e:ce:93:74:12:07:27:35:fb:
79:b3:9e:3c:32:62:ff:62:1e:97:39:9d:b1:89:3b:6c:ee:fb:
50:c4:c9:47:c8:81:96:06:53:5c:b9:e3:92:3c:60:71:f7:40:
62:9a:44:55:38:5e:8e:d1:ae:0d:8b:4f:f1:a7:65:a7:43:d4:
44:ad:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:24:50 2025 by rpki-client