Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa
File: 323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier: oJgsBL0QxbxF6j6hJJUDQil7IDOO2vtyeehrgjecmw4=
Subject key identifier: 3D:AA:C5:2C:8A:C2:79:E5:27:F3:FF:28:5E:F6:69:39:AB:26:11:A6
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 66536FC5EFD30179A1D68F91BC5012DD5A5263BC
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:52 +0000
ROA not before: Mon 25 Aug 2025 20:07:52 +0000
ROA not after: Mon 24 Aug 2026 20:12:52 +0000
asID: 272218
IP address blocks: 2804:83c4:801f::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:53:6f:c5:ef:d3:01:79:a1:d6:8f:91:bc:50:12:dd:5a:52:63:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:52 2025 GMT
Not After : Aug 24 20:12:52 2026 GMT
Subject: CN=3DAAC52C8AC279E527F3FF285EF66939AB2611A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:65:6c:36:cc:df:60:3c:20:2d:a5:c0:b5:
3e:1a:43:46:f8:62:08:3e:6e:4f:e0:ef:f1:d1:56:
39:cc:6e:2b:1d:67:ab:38:8e:25:e4:f6:47:c1:35:
1e:36:97:b5:07:fd:46:63:48:80:c6:cb:c5:b2:17:
f3:ed:20:d4:3c:a8:dc:a7:89:98:8e:c0:ef:4c:69:
e4:63:e7:df:33:f8:0b:fc:ae:b6:6e:ae:09:eb:45:
49:82:fd:49:e8:60:5b:00:e7:ce:61:5e:e7:99:0b:
2d:24:1e:7a:c3:ea:8a:c2:5f:53:95:ed:4b:29:31:
91:db:96:d7:a9:28:f6:67:a0:f1:06:d6:5b:83:ad:
31:1e:a3:b4:1c:e7:4d:d3:51:56:6c:8c:fd:ec:cb:
70:b6:98:05:b8:d9:1a:51:5c:ca:72:07:f0:80:04:
20:02:4a:fb:6f:6f:27:d1:8e:6a:2d:2b:21:13:ae:
9b:01:06:cc:fc:e3:c6:93:11:80:5a:ec:54:9c:87:
49:f4:6b:c7:7f:03:56:46:35:88:aa:9e:a9:c9:ae:
03:2c:76:79:0a:a4:e5:16:4d:1b:3c:c1:28:89:d0:
86:6f:ab:2e:7a:d2:50:fb:04:ec:86:63:b7:f3:ce:
58:ad:c0:86:80:a4:66:3e:4c:ba:ff:dd:8c:de:95:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:C5:2C:8A:C2:79:E5:27:F3:FF:28:5E:F6:69:39:AB:26:11:A6
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031663a3a2f34382d3438203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:801f::/48
Signature Algorithm: sha256WithRSAEncryption
2e:7e:3a:42:11:0d:e2:96:a3:2c:a3:6e:ec:36:09:2c:c7:24:
da:b2:e4:d7:f5:46:d6:3a:8c:da:96:f0:aa:da:85:26:d0:4e:
07:21:ff:fb:5b:64:d6:4a:21:39:5c:cf:8e:a3:2e:da:52:b6:
af:87:05:88:fa:7b:a0:c3:24:9d:c5:1a:cc:7b:55:d1:32:9b:
8e:72:8c:3d:af:c8:1f:4a:f8:20:59:c8:d0:35:3b:f7:3a:f9:
7c:92:ff:0e:8b:e5:2b:6c:b0:ad:54:bc:3a:9e:70:e7:5c:c3:
8b:36:1d:e2:e3:eb:24:32:07:72:96:e7:c9:16:69:e4:3c:72:
a4:ea:32:71:1f:2a:86:a7:49:63:6f:be:9c:cf:56:24:ac:0e:
08:4e:b8:36:b2:b0:16:72:0b:58:58:a7:3f:1f:a0:57:5e:49:
81:0a:5a:e5:09:14:78:d2:f2:80:61:31:dd:c5:9e:4b:77:10:
3b:2e:4a:36:01:e6:1e:c7:e3:fc:93:6d:25:b6:2f:98:86:2d:
1c:ad:13:04:c8:62:6d:e1:db:d8:b3:18:ef:26:fc:f3:7b:3a:
34:a8:14:9d:6e:aa:f4:26:3f:5a:c6:2c:a5:14:fe:41:59:b2:
de:ca:a6:a7:a6:19:45:74:92:de:d1:32:80:cf:2a:47:28:80:
2d:00:3e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:22 2025 by rpki-client