Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
File: 323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier: quAW2ghV2ABI67w2Gjqfe4LAN7R7YiLP56G+wFvogZc=
Subject key identifier: 0B:29:0E:3E:A7:2B:75:15:0A:1D:DC:31:D0:66:58:EF:95:32:1C:FD
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 10E303DE39CBAA6B7AB87AE7CA3FC4E5A21F2597
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:52 +0000
ROA not before: Mon 25 Aug 2025 20:07:52 +0000
ROA not after: Mon 24 Aug 2026 20:12:52 +0000
asID: 272218
IP address blocks: 2804:83c4:801b::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:03:de:39:cb:aa:6b:7a:b8:7a:e7:ca:3f:c4:e5:a2:1f:25:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:52 2025 GMT
Not After : Aug 24 20:12:52 2026 GMT
Subject: CN=0B290E3EA72B75150A1DDC31D06658EF95321CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:78:bd:55:3a:99:49:34:b2:d4:4d:5d:e7:
37:2b:4f:c4:db:c9:03:ca:a4:a1:1e:49:e7:40:7a:
12:ee:e4:62:99:07:b7:84:18:4d:e7:34:cc:af:d8:
b2:75:7c:41:03:bc:5f:09:b6:0c:5c:7d:ed:a2:37:
56:42:6b:f5:df:15:62:05:2e:d8:c0:8c:0d:48:25:
2c:97:69:28:77:22:e1:4e:b6:3e:69:19:0b:ef:a5:
d1:fe:96:09:1c:98:32:95:db:a8:bc:a8:d2:94:72:
9a:8f:e5:e9:73:59:85:2a:7e:7b:f4:8d:f1:68:d2:
07:c2:93:31:86:e2:9f:21:12:70:e2:b6:9a:86:2c:
03:13:d1:a9:d1:e4:7f:2e:06:e9:af:ba:56:15:20:
af:47:ab:0a:6f:3a:f8:81:4a:d9:ef:ac:6b:80:07:
e8:97:2d:25:0a:6d:aa:81:5b:81:ad:40:ee:ae:dc:
37:46:89:78:25:75:d2:e4:93:ca:7c:03:13:c1:2b:
aa:20:d5:e7:85:f6:64:55:d3:67:44:ce:ea:9a:7a:
85:de:7e:97:3d:cd:06:d7:bd:ea:96:46:e9:18:c1:
cc:dd:b1:d4:a2:0a:ae:37:46:c7:ed:13:8c:92:e7:
37:f4:24:cb:e9:ce:b7:c7:15:aa:cd:f4:22:55:c2:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:0E:3E:A7:2B:75:15:0A:1D:DC:31:D0:66:58:EF:95:32:1C:FD
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:801b::/48
Signature Algorithm: sha256WithRSAEncryption
a4:de:a2:fe:08:ae:29:d7:e1:2a:7e:c7:6f:81:1d:35:8f:2f:
00:90:36:cb:8a:88:9e:59:bf:6a:d2:92:6d:a4:70:59:0c:59:
51:c0:9b:4f:8c:07:52:7c:fb:4f:dd:de:6b:a2:d7:ec:f2:10:
00:37:c5:c2:b8:69:0b:31:a6:a1:a7:03:16:65:7b:2a:41:d6:
55:86:91:3a:26:de:41:f3:2f:a9:f0:a6:47:eb:1f:d6:3f:07:
b3:2c:0e:7a:5e:d0:3a:57:eb:23:5d:d1:d1:5b:2d:08:4e:d8:
4b:ca:a3:b9:0a:42:ef:5a:85:8c:a4:99:ba:44:51:c3:75:ef:
c4:86:ac:31:f0:89:7b:56:f6:7a:08:e6:a6:f3:69:76:c9:9c:
bf:0b:9b:ea:cf:d6:d8:c3:6a:12:7b:82:6d:bc:15:14:80:d0:
b1:8d:10:0a:d5:7f:03:14:3b:f4:02:29:1b:56:cf:3e:64:3c:
4e:21:86:8f:40:6c:c9:ef:f7:a7:2c:98:c2:9c:4e:16:0a:3b:
e0:51:d5:b7:c2:c3:2c:55:02:7d:32:a8:58:21:3f:39:66:18:
3a:e7:1b:4d:2b:71:23:98:a2:b9:8a:d9:75:38:c6:70:8b:30:
dc:77:2f:ff:7f:b1:3d:48:37:ae:ef:48:91:f2:4c:01:8c:b5:
25:97:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:27 2025 by rpki-client