Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a613130303a3a2f34302d3438203d3e20323732323138.roa
File: 323830343a383363343a613130303a3a2f34302d3438203d3e20323732323138.roa (raw, json)
Hash identifier: CNq3AZiRWPtqV2LIeE9YNtYz7mAICxV7MKBeT8/yKss=
Subject key identifier: DF:42:69:8F:AD:5A:F8:2E:73:0C:AA:5E:A7:F4:2B:55:BC:F6:FE:AC
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 0D4A1F8404545DCBF6C8CC24C3CD568146352DE8
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a613130303a3a2f34302d3438203d3e20323732323138.roa
Signing time: Mon 22 Sep 2025 14:46:53 +0000
ROA not before: Mon 22 Sep 2025 14:41:53 +0000
ROA not after: Mon 21 Sep 2026 14:46:53 +0000
asID: 272218
IP address blocks: 2804:83c4:a100::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:1f:84:04:54:5d:cb:f6:c8:cc:24:c3:cd:56:81:46:35:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Sep 22 14:41:53 2025 GMT
Not After : Sep 21 14:46:53 2026 GMT
Subject: CN=DF42698FAD5AF82E730CAA5EA7F42B55BCF6FEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:e4:34:22:77:57:1c:66:11:2f:73:28:6e:
a0:8a:0d:f7:35:14:32:1b:a2:87:f4:6c:80:b6:dd:
60:9a:a8:7e:9a:21:53:27:ca:05:d3:af:67:19:1e:
b5:b8:31:31:89:ee:74:c4:d0:ff:75:b4:e2:bb:e0:
ff:e5:c9:a7:5b:d9:51:01:eb:fe:4d:9a:7a:b1:82:
1c:fb:5b:2b:2d:03:00:9f:34:79:f8:28:d8:63:e0:
56:f0:58:c0:0c:92:7e:f8:b1:19:3d:1f:b1:0a:34:
0e:d7:9b:58:8d:88:b7:1c:63:a5:3d:ea:49:ea:61:
53:75:32:df:b0:30:45:d6:d5:62:3b:28:e9:c7:a4:
89:f2:27:29:0f:78:5e:9c:20:f6:35:14:ce:4b:4b:
6d:ab:d4:a2:08:ee:81:2a:ed:08:2d:0f:ad:1a:81:
05:05:b2:c2:43:4a:2f:62:16:2d:08:64:14:16:b4:
d3:21:31:85:e5:59:6a:93:4e:fa:62:6a:21:9d:01:
94:db:59:8a:82:a1:1c:28:03:b9:17:78:68:d8:4e:
8b:32:34:ca:c1:bd:12:17:fd:00:52:10:1b:5d:4e:
9d:f4:37:ee:9a:4c:12:d7:79:0a:a0:40:0a:7d:fa:
72:3c:0a:a2:8c:31:23:de:e6:da:86:48:ba:48:7f:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:69:8F:AD:5A:F8:2E:73:0C:AA:5E:A7:F4:2B:55:BC:F6:FE:AC
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a613130303a3a2f34302d3438203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:a100::/40
Signature Algorithm: sha256WithRSAEncryption
8e:5f:98:0d:d0:5d:06:4c:bd:3e:9c:87:d1:f0:8a:a2:28:e6:
79:bc:20:df:24:f0:e0:0e:ac:a8:ba:82:e3:c8:b2:a1:91:5f:
f3:55:71:48:ce:73:12:ed:4f:b9:e3:af:45:31:cd:47:0f:a2:
58:55:7a:a7:d9:a1:1e:7e:28:74:11:ed:ff:e7:87:db:9b:38:
a4:d6:b5:a0:ae:35:63:95:25:b3:70:56:79:88:93:d5:bb:38:
2c:a6:a4:95:10:e3:f7:57:41:76:b7:72:0f:fa:ec:1e:9c:ce:
d3:5e:c0:ca:df:98:f2:40:c8:4b:d8:19:c9:f1:f9:f3:82:6b:
06:a3:71:af:a1:8f:e5:bb:d0:4c:8e:bf:73:f2:d7:f1:69:16:
91:a3:1a:ca:5d:99:4f:4d:89:38:40:9d:3e:61:b5:72:46:f5:
4b:53:01:cc:fa:39:3c:98:45:3f:85:f1:68:74:49:89:c6:6b:
fd:ce:b9:c5:f3:8a:d6:8f:67:4a:7e:a5:dd:1f:1d:14:89:46:
a5:ba:ea:c8:b5:d5:25:d3:30:af:66:2f:b0:f8:75:dc:6e:0b:
00:60:e3:3b:65:30:e2:0f:c2:d8:9e:de:56:17:08:46:56:85:
c1:7f:9c:91:10:5c:ff:b9:0c:e6:25:d6:bd:f1:81:af:d2:2e:
80:fe:db:4f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDUofhARUXcv2yMwkw81WgUY1LegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU5NDJGOUJFRkQ5ODZBMjNFODNCRjE2QTE5RUE5MjFF
NTlGMDQ2NzAeFw0yNTA5MjIxNDQxNTNaFw0yNjA5MjExNDQ2NTNaMDMxMTAvBgNV
BAMTKERGNDI2OThGQUQ1QUY4MkU3MzBDQUE1RUE3RjQyQjU1QkNGNkZFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuuQ0IndXHGYRL3MobqCKDfc1
FDIboof0bIC23WCaqH6aIVMnygXTr2cZHrW4MTGJ7nTE0P91tOK74P/lyadb2VEB
6/5Nmnqxghz7WystAwCfNHn4KNhj4FbwWMAMkn74sRk9H7EKNA7Xm1iNiLccY6U9
6knqYVN1Mt+wMEXW1WI7KOnHpInyJykPeF6cIPY1FM5LS22r1KII7oEq7QgtD60a
gQUFssJDSi9iFi0IZBQWtNMhMYXlWWqTTvpiaiGdAZTbWYqCoRwoA7kXeGjYTosy
NMrBvRIX/QBSEBtdTp30N+6aTBLXeQqgQAp9+nI8CqKMMSPe5tqGSLpIfzFnAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU30Jpj61a+C5zDKpep/QrVbz2/qwwHwYDVR0j
BBgwFoAULpQvm+/ZhqI+g78WoZ6pIeWfBGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1YblVNVXF3RUdQUnJ4Wkx0VUhCSkRrUkE5Y01VZllpOFJicVJ1VHNT
eGgvMC8yRTk0MkY5QkVGRDk4NkEyM0U4M0JGMTZBMTlFQTkyMUU1OUYwNDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTQyRjlCRUZEOTg2QTIz
RTgzQkYxNkExOUVBOTIxRTU5RjA0NjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtWG5VTVVxd0VHUFJyeFpMdFVIQkpEa1JBOWNNVWZZaThSYnFSdVRzU3hoLzAv
MzIzODMwMzQzYTM4MzM2MzM0M2E2MTMxMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNk
M2UyMDMyMzczMjMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEg8ShMA0GCSqGSIb3DQEBCwUA
A4IBAQCOX5gN0F0GTL0+nIfR8IqiKOZ5vCDfJPDgDqyouoLjyLKhkV/zVXFIznMS
7U+5469FMc1HD6JYVXqn2aEefih0Ee3/54fbmzik1rWgrjVjlSWzcFZ5iJPVuzgs
pqSVEOP3V0F2t3IP+uwenM7TXsDK35jyQMhL2BnJ8fnzgmsGo3GvoY/lu9BMjr9z
8tfxaRaRoxrKXZlPTYk4QJ0+YbVyRvVLUwHM+jk8mEU/hfFodEmJxmv9zrnF84rW
j2dKfqXdHx0UiUaluurItdUl0zCvZi+w+HXcbgsAYOM7ZTDiD8LYnt5WFwhGVoXB
f5yREFz/uQzmJda98YGv0i6A/ttP
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:09:23 2025 by rpki-client