Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa
File: 323830343a383363343a3a2f33322d3430203d3e20323732323138.roa (raw, json)
Hash identifier: hvTqVot/FcnhtGdqdp3KdUeDmiqtecjAdD6j+uHVpfo=
Subject key identifier: 8F:04:20:0E:49:67:1C:1A:DF:1B:7B:BC:35:88:12:34:7B:E7:6C:62
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 4DB85F839327B2BA914F4161F26E6EF2AD6B2D1D
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa
Signing time: Mon 25 Aug 2025 20:12:52 +0000
ROA not before: Mon 25 Aug 2025 20:07:52 +0000
ROA not after: Mon 24 Aug 2026 20:12:52 +0000
asID: 272218
IP address blocks: 2804:83c4::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b8:5f:83:93:27:b2:ba:91:4f:41:61:f2:6e:6e:f2:ad:6b:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Aug 25 20:07:52 2025 GMT
Not After : Aug 24 20:12:52 2026 GMT
Subject: CN=8F04200E49671C1ADF1B7BBC358812347BE76C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:cc:ad:01:df:8e:51:44:ea:20:4d:7a:56:
5d:16:33:99:c0:54:6c:1a:70:f6:3d:59:f1:11:88:
3c:18:2b:27:33:b1:a3:3c:b9:2a:10:4e:cf:e1:0c:
e7:24:fb:eb:e8:f5:1b:7a:83:9d:6b:71:31:f1:c9:
ec:1a:b3:24:08:24:ca:ae:44:ba:b1:97:fd:9c:62:
7a:ae:32:1a:a2:e6:64:40:5e:8d:75:88:b7:84:a0:
3d:94:15:2e:f3:ac:a3:0d:c3:ed:35:e1:a2:1e:c5:
55:78:f3:df:8a:ef:28:ca:87:24:8b:c9:c2:82:50:
00:25:8c:28:71:cf:4c:dc:69:78:a4:a1:fa:6b:3e:
9c:39:64:33:a0:29:c3:e7:2f:31:7f:21:40:1c:b0:
c6:6e:9b:73:3a:e3:ce:cd:50:ae:13:fe:5b:7a:34:
f3:2e:5a:72:d9:e8:3a:22:6c:8a:76:72:34:31:69:
9c:60:50:c9:00:10:c4:d5:20:b9:3f:f6:a1:5b:b3:
07:f7:ad:c3:98:4e:b8:b6:f4:dd:1f:89:82:bc:85:
32:50:94:cd:a0:16:6a:81:c6:45:a0:80:ef:5d:9d:
50:0f:09:2f:e4:dd:33:cb:69:e6:77:5f:c5:5a:cb:
1d:bf:fc:ea:d7:cc:6c:c6:15:33:41:01:a5:19:29:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:04:20:0E:49:67:1C:1A:DF:1B:7B:BC:35:88:12:34:7B:E7:6C:62
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4::/32
Signature Algorithm: sha256WithRSAEncryption
c5:ff:fa:e7:19:a8:19:be:17:87:09:6c:5a:f2:09:00:a9:69:
cc:f7:8b:e2:21:e6:d8:64:44:d4:d4:f1:0d:15:e4:67:d4:c6:
ef:90:7f:a4:86:24:ea:f2:16:62:d3:05:b4:b7:5d:17:d9:60:
bd:07:0f:92:26:37:cb:30:64:16:ac:2b:f1:8d:da:54:13:d4:
1c:49:5c:0e:00:e0:c9:96:32:ac:0e:3c:f5:6b:d7:d1:25:21:
19:06:99:bb:87:e8:e4:e9:d2:98:ef:23:3c:4d:f5:21:f6:bc:
4a:d8:82:10:a8:26:b6:51:4d:48:20:a1:81:d9:92:30:dc:38:
62:8b:dd:c3:1f:63:f5:c6:d5:08:f0:30:2f:5f:11:6b:f8:fd:
5f:d7:4e:21:7f:c3:ad:da:2b:db:75:1e:cb:35:40:e8:52:19:
a4:3e:a9:49:5f:f1:1b:46:73:49:94:b4:69:89:db:7c:80:ae:
fd:9f:c1:2f:7f:57:4f:dc:a3:11:82:1a:60:d4:8c:1f:43:30:
85:fb:4b:a1:3a:95:b8:a5:6e:c3:80:af:85:b0:79:d0:40:b0:
43:68:43:45:e6:41:39:75:2f:ec:d6:03:72:98:11:27:a6:81:
48:fb:3f:6b:75:b2:e2:ea:fc:11:df:6a:75:14:c1:67:b1:f0:
07:e9:f5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:38 2025 by rpki-client