Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa
File: 323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier: UQsNPmCPSgapYTM1Ho+0EbxRLbY7wXxkjB1D/XwZtIM=
Subject key identifier: 3F:DF:8D:0B:46:A2:62:7D:C8:1A:D1:8F:CB:75:55:14:80:18:A1:8E
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 59BE661C6C6C00DDCB523F34C9CCAB6F1D4A45D9
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:51 +0000
ROA not before: Mon 25 Aug 2025 20:07:51 +0000
ROA not after: Mon 24 Aug 2026 20:12:51 +0000
asID: 272218
IP address blocks: 2804:83c4:801c::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:be:66:1c:6c:6c:00:dd:cb:52:3f:34:c9:cc:ab:6f:1d:4a:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:51 2025 GMT
Not After : Aug 24 20:12:51 2026 GMT
Subject: CN=3FDF8D0B46A2627DC81AD18FCB7555148018A18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:2a:45:34:2b:b0:80:36:79:a2:57:78:00:
7f:e5:5e:51:cc:33:55:cc:b4:ee:03:70:18:f3:91:
2a:55:39:cb:f3:a1:ec:19:a4:aa:9f:d3:a5:57:d5:
96:92:18:ba:13:2e:ef:20:29:62:a7:4c:30:59:81:
d2:b4:0c:0a:a8:80:24:e8:c5:3a:84:85:a6:2c:54:
26:e0:e8:dc:bf:90:78:ba:11:11:78:0a:19:31:b5:
74:4f:0d:eb:f3:67:f9:77:a1:1d:45:7d:ce:02:31:
6f:9d:e1:51:3d:a8:62:7b:04:a9:88:8b:ce:1d:c4:
ab:a8:1d:a7:2b:c6:a4:46:d4:27:f6:70:c9:ff:b5:
aa:6b:56:b9:d3:eb:19:6f:da:af:75:8c:51:d3:7c:
93:74:92:49:35:df:04:09:1d:ed:0f:c1:e6:c5:54:
dd:86:da:f9:fd:b3:40:23:fc:86:78:ce:5b:82:5f:
7a:fe:3a:df:be:ef:0f:5a:e1:c2:73:70:97:d4:83:
1c:22:69:8f:55:34:91:26:ea:89:ab:55:06:e6:c1:
7e:50:8a:4e:b0:82:07:8e:d3:2c:fd:b6:44:48:85:
9b:be:a3:2b:03:83:44:d6:a7:bb:6b:04:33:39:d0:
0c:ec:31:52:97:9a:f7:99:a7:b9:e1:ae:c3:5e:77:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:8D:0B:46:A2:62:7D:C8:1A:D1:8F:CB:75:55:14:80:18:A1:8E
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:801c::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ac:5a:3a:bf:fe:5a:55:6a:c3:67:8c:13:36:7b:14:67:16:
9b:d2:49:85:66:96:ac:6e:5d:aa:74:f5:bb:26:48:74:3e:02:
92:a2:5f:9f:0a:15:da:c1:13:92:60:c1:74:98:09:f0:8a:2d:
69:31:73:c1:31:fa:08:ae:c4:85:c2:3d:80:1d:e1:00:41:de:
9f:0d:24:98:11:18:3b:99:f4:d8:01:d2:36:3a:a0:58:e1:96:
8c:12:2e:5a:f6:f5:d7:27:d6:12:2c:d7:7d:a2:e2:7c:a2:4a:
c6:0d:8f:cf:d5:68:ef:e9:d8:c2:4f:81:95:e9:e6:18:27:6f:
64:43:3c:e5:5a:50:77:e0:46:2c:2d:9c:84:96:00:6e:34:5c:
8d:06:e8:f3:4b:30:d3:66:c4:5e:0c:03:84:0f:f9:0d:51:a2:
8a:a3:12:fa:9c:8b:9f:af:3b:61:72:22:ba:c3:50:0c:7d:7b:
55:65:33:be:72:1c:63:c7:4b:9f:28:92:ff:e4:63:24:69:24:
dc:cf:a9:8a:59:a3:cc:8c:f2:ab:98:cc:c4:b3:6d:29:92:18:
7b:a1:57:e6:14:06:8f:af:f6:98:a8:e6:1a:d4:fd:9c:7e:0f:
0e:de:8f:39:c5:dc:44:fd:c3:2a:bc:cd:77:99:e4:11:3b:34:
5f:7e:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:48 2025 by rpki-client