Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3630303a3a2f34342d3434203d3e20323732323138.roa
File: 323830343a383363343a3630303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier: h1wllMiRB11RCaByZptscWdKqWoKvYfI/fmAlRmqEbM=
Subject key identifier: 90:41:64:A3:92:C3:4C:9B:54:2B:AB:93:39:AA:3E:0A:2C:07:EC:57
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 11F0BF143E5F4EE0BCF89098D505D800B2226B75
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3630303a3a2f34342d3434203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:51 +0000
ROA not before: Mon 25 Aug 2025 20:07:51 +0000
ROA not after: Mon 24 Aug 2026 20:12:51 +0000
asID: 272218
IP address blocks: 2804:83c4:600::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f0:bf:14:3e:5f:4e:e0:bc:f8:90:98:d5:05:d8:00:b2:22:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:51 2025 GMT
Not After : Aug 24 20:12:51 2026 GMT
Subject: CN=904164A392C34C9B542BAB9339AA3E0A2C07EC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:25:79:11:b4:6f:26:0e:da:ab:6d:32:7b:
36:d8:08:ca:45:a4:a9:9d:4a:e9:4f:e1:ad:38:71:
ca:da:6a:cf:4b:8f:f0:78:f5:b9:39:b3:7d:11:1a:
0a:e9:6f:30:bb:e3:78:e1:5e:3a:49:99:ca:0f:20:
ec:bb:77:0f:a6:ad:73:ca:28:31:8b:3f:11:05:74:
5c:38:3a:4e:26:10:16:0e:51:c3:5a:43:05:e3:e3:
db:13:ac:ed:cc:06:f1:8f:e2:5e:af:ef:d5:d1:9d:
86:c9:31:ec:14:a1:a4:46:19:36:8b:7f:a6:de:d4:
2d:54:4b:7c:97:81:7b:09:2d:9f:4b:9e:59:d8:8d:
02:07:77:76:ba:89:39:a4:b1:7a:84:fd:a3:65:48:
68:9e:22:be:ef:a1:5f:fd:6d:0b:aa:78:18:1a:66:
11:61:a9:26:c0:3a:fe:cd:ac:ed:5d:a9:ca:c4:e7:
31:45:9c:2e:76:ba:d4:7f:49:f4:2c:b4:19:13:39:
78:71:5e:a2:d0:a8:eb:4f:52:b7:3a:86:d9:3a:b6:
90:75:7a:54:f7:86:2f:f1:d1:41:b4:8c:2b:a9:2f:
71:b4:7d:d9:80:67:cf:72:6b:c0:cb:cf:a7:3c:a3:
77:cd:7b:c4:1d:16:f3:3b:bc:b0:ba:b4:ae:12:36:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:64:A3:92:C3:4C:9B:54:2B:AB:93:39:AA:3E:0A:2C:07:EC:57
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3630303a3a2f34342d3434203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:600::/44
Signature Algorithm: sha256WithRSAEncryption
10:e0:35:09:59:e3:c2:f4:de:ef:c4:0a:80:41:2d:c8:a4:5e:
de:97:ad:b7:35:60:06:e7:28:52:69:11:29:6d:b1:33:d5:38:
23:9c:b6:b5:99:ba:ed:56:a8:75:c4:56:3a:57:fb:3b:29:df:
a4:72:9e:81:e0:21:1e:07:0b:59:78:9a:3a:55:d7:a8:0c:df:
b8:29:4f:aa:d2:ed:5c:ff:b9:a7:4e:af:85:61:09:1a:f1:05:
9d:3b:9e:18:ac:b3:e5:92:d3:4d:ca:c0:38:18:de:ae:b7:81:
93:c8:48:6c:ae:ad:ea:30:a5:50:cd:83:32:d5:45:ac:d3:36:
4b:4a:83:13:bd:a3:05:bf:09:a0:47:2c:41:e6:df:73:c4:f8:
1b:1f:1f:36:23:0e:a5:c7:07:e4:8e:e3:be:99:17:80:29:9d:
59:e7:62:02:78:b2:87:cc:e2:81:cf:76:c4:92:09:85:76:c0:
2d:09:e7:14:1e:8e:99:09:61:96:3d:e0:c9:fd:1e:ab:a2:27:
b4:8a:63:3e:60:d1:95:15:de:40:26:d5:eb:b8:a9:06:55:84:
f0:f7:f9:35:63:5c:62:53:7c:d5:a9:10:09:2b:cf:79:24:1d:
60:64:97:97:ba:3c:71:04:83:e5:0c:6e:8d:63:e6:0d:0c:ff:
54:ea:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:43 2025 by rpki-client