Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a616133303a3a2f34342d3434203d3e20323732323138.roa
File: 323830343a383363343a616133303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier: bxY594U6Nsc5ouay0hFSyLI95orgDj02u+sShJNwNM0=
Subject key identifier: EF:9D:51:F4:9F:FC:F5:31:D0:D0:50:17:32:B1:98:65:F9:33:51:2C
Certificate issuer: /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial: 76D121231D68047C2D98674FE9C524039908F25C
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a616133303a3a2f34342d3434203d3e20323732323138.roa
Signing time: Wed 15 Oct 2025 20:06:06 +0000
ROA not before: Wed 15 Oct 2025 20:01:06 +0000
ROA not after: Wed 14 Oct 2026 20:06:06 +0000
asID: 272218
IP address blocks: 2804:83c4:aa30::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:21:23:1d:68:04:7c:2d:98:67:4f:e9:c5:24:03:99:08:f2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Validity
Not Before: Oct 15 20:01:06 2025 GMT
Not After : Oct 14 20:06:06 2026 GMT
Subject: CN=EF9D51F49FFCF531D0D0501732B19865F933512C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c8:8f:8c:91:9b:27:f0:e7:66:97:5e:f7:78:
a7:56:6b:d9:30:48:89:fd:1b:cc:34:ff:58:9d:cc:
d0:fa:6a:fd:7c:5f:8f:30:36:24:c7:01:7e:c9:2a:
dd:7d:5b:bf:19:d9:af:98:be:26:f3:79:8b:65:4b:
08:1e:a2:97:98:c5:55:72:90:da:6b:04:3f:1b:bb:
43:e9:0b:e1:9c:25:36:34:62:ca:5d:1c:09:ed:8d:
99:52:9e:c2:24:d2:18:c7:e1:d4:99:7e:a8:02:b7:
41:51:9b:b8:81:7f:b0:ee:5b:af:c7:cb:6e:63:20:
a0:75:1f:e9:77:1e:e7:a9:bc:b2:61:03:aa:bb:1e:
fd:0c:aa:a7:79:95:39:a6:7f:68:38:fd:54:71:1c:
83:f6:92:f6:e3:70:6c:ad:0d:3c:9c:30:5a:96:c9:
f8:b6:80:09:66:f4:75:fb:d6:0c:9d:90:31:ed:22:
7e:0d:ed:67:17:c8:10:c1:7b:1a:ad:57:ef:2e:32:
7d:f5:c8:76:2f:f6:8e:81:5d:31:6d:11:6e:02:8d:
e2:07:f1:9b:4c:6e:1a:7b:b3:3b:2c:21:0d:85:0e:
80:1a:b4:5a:9e:42:91:16:84:3b:b9:7a:83:b3:fa:
05:92:80:ec:eb:c6:e1:a4:8d:27:08:28:d8:86:8c:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:51:F4:9F:FC:F5:31:D0:D0:50:17:32:B1:98:65:F9:33:51:2C
X509v3 Authority Key Identifier:
keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a616133303a3a2f34342d3434203d3e20323732323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83c4:aa30::/44
Signature Algorithm: sha256WithRSAEncryption
87:09:fb:7e:6a:90:a5:41:1a:aa:62:6c:b0:bb:7a:21:5c:d0:
32:a0:04:77:3a:24:e0:8e:82:3d:47:b0:ba:96:92:20:57:37:
ad:64:e0:f6:85:a4:74:12:2e:d8:98:60:46:fc:62:74:d8:66:
a5:86:cf:58:37:ab:bc:46:09:96:b4:85:9e:81:d5:da:d8:b0:
18:43:ca:74:b0:08:2c:09:5d:d1:66:00:28:73:cf:c5:ab:29:
84:30:08:20:15:cd:c5:da:1d:21:e2:53:de:17:d0:aa:06:61:
ba:7f:53:db:a6:b0:05:b7:9f:9d:f3:ce:13:19:be:57:c9:74:
b9:20:18:8d:2e:5c:c7:f8:1f:5a:bd:80:0d:30:83:73:37:1a:
74:ba:1f:fe:76:96:28:fe:a1:3e:71:8b:54:e3:30:3f:38:be:
2d:3c:a5:ec:2e:4c:73:07:43:c6:68:a2:96:b5:87:74:e8:83:
0e:eb:f9:6f:30:a5:42:e0:2c:e9:75:bd:e8:cd:a2:1b:cb:78:
38:96:93:f2:ba:f4:9e:f8:bc:94:3d:ed:ac:2b:d1:d8:77:5e:
2f:54:19:bf:30:e0:ee:3d:d8:a9:78:07:e4:e8:ac:9b:d8:89:
44:61:e6:ef:8a:f3:67:b8:3b:f8:0a:0d:af:0b:da:ba:ef:46:
e4:5f:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:57 2025 by rpki-client