Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa
File: 323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier: FEdDZ808oKI0UvjJitVSxbNPnsQA/X/HjwhnLMS63U0=
Subject key identifier: 5B:38:8B:B6:46:D9:DA:C2:FB:5F:F1:81:7D:52:43:4F:71:EA:03:DF
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 730F761C2D97E64F2E66C6079EF08AA6C368B4CF
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:53 +0000
ROA not before: Mon 25 Aug 2025 20:07:53 +0000
ROA not after: Mon 24 Aug 2026 20:12:53 +0000
asID: 272218
IP address blocks: 2804:83c4:8011::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:0f:76:1c:2d:97:e6:4f:2e:66:c6:07:9e:f0:8a:a6:c3:68:b4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:53 2025 GMT
Not After : Aug 24 20:12:53 2026 GMT
Subject: CN=5B388BB646D9DAC2FB5FF1817D52434F71EA03DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:2f:81:d0:af:57:64:f3:5d:a5:a9:5f:38:
89:d4:00:24:9f:b6:ef:e8:ae:eb:c3:55:34:58:95:
e3:89:cc:56:f7:1a:fb:00:f7:08:13:48:d1:a1:17:
7e:0f:b5:10:03:d5:e7:66:95:26:60:0d:d4:13:dd:
8b:1f:e1:5d:c6:45:46:54:f9:a1:74:dc:ae:0a:2c:
97:38:f8:58:4b:d8:3c:17:2b:57:6d:45:1e:e3:54:
e0:57:43:02:43:e0:e9:d1:8f:39:33:2d:f3:e2:df:
26:cc:2f:d0:13:b4:9f:73:80:e5:6d:f3:d7:75:4e:
8b:29:d7:77:f0:73:f1:7f:42:f0:be:e4:2e:77:0c:
59:ff:67:d5:4d:f6:31:db:c0:f6:f1:a6:4f:ce:d3:
53:74:0a:18:cf:cc:cb:a2:e6:be:b2:38:92:b7:67:
8f:1b:25:ca:da:e8:09:31:1d:b1:7d:ad:bb:5e:17:
99:65:72:e8:c3:ac:f5:aa:c6:8b:f3:f6:c1:c8:41:
92:4a:fc:da:e2:82:6b:1b:15:8a:45:f9:15:c6:1f:
69:8e:a0:c0:5d:b1:fd:51:43:eb:c7:82:d4:51:bc:
dc:10:23:53:c0:65:90:db:99:57:90:f3:eb:33:cc:
eb:85:91:3d:8f:69:94:ef:dd:77:7a:6f:15:c1:8b:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:8B:B6:46:D9:DA:C2:FB:5F:F1:81:7D:52:43:4F:71:EA:03:DF
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031313a3a2f34382d3438203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:8011::/48
Signature Algorithm: sha256WithRSAEncryption
35:95:81:2c:75:c3:64:3c:5b:8d:b7:36:39:f2:5a:03:1b:37:
78:45:ae:eb:6c:97:34:14:6e:95:a9:20:0e:c0:e5:2b:18:8c:
5f:3d:6f:e6:1c:e0:2c:a9:fe:a9:43:76:b6:78:72:a3:30:f6:
c5:7c:99:98:42:99:4e:c4:3d:fe:f4:cc:0d:f2:e9:29:9a:62:
d9:ea:e0:e6:62:72:2e:25:92:a6:d2:e0:ca:c4:a3:87:e3:24:
fc:7c:47:65:9b:51:c7:20:86:f2:c0:6c:fd:77:5f:63:38:c5:
9e:55:b7:5f:0b:3f:93:58:e0:29:c3:72:86:d8:a9:f9:af:8e:
9d:a2:8a:e3:e1:6e:7b:2a:1e:4e:e3:a6:db:91:91:a6:21:2c:
e8:bb:09:be:02:a0:ee:12:62:7a:0a:8c:f8:ee:f6:bc:23:6c:
64:9a:af:93:1f:06:d7:84:cb:16:db:e2:aa:83:a0:57:0c:28:
42:88:35:01:67:54:6b:6e:c4:5c:d5:8d:6b:53:3c:5e:f6:5b:
b1:e6:18:20:5c:f3:5b:a0:a1:4f:18:67:55:01:03:22:75:c1:
84:81:72:51:ba:d4:0d:f6:33:d0:b4:84:08:22:07:10:5b:87:
d9:e1:f9:17:97:9c:05:e2:09:d6:28:73:4e:ac:d5:fd:c2:ad:
a5:58:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:41 2025 by rpki-client