Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa
File: 323830343a393464343a3a2f33322d3438203d3e20323734343831.roa (raw, json)
Hash identifier: VqwiBukmemLhKBOVO+sGCfiCMPHkGIazXuhy/tQ3Mu8=
Subject key identifier: 74:AA:48:A3:91:54:64:B8:C9:A2:20:01:BF:C9:DB:9F:19:62:A9:FF
Certificate issuer: /CN=C485B6448087BFF26A3332A8B6595450265165E6
Certificate serial: 0242DDF2339BFC5D306CA2292D0D022F3D2BFF3B
Authority key identifier: C4:85:B6:44:80:87:BF:F2:6A:33:32:A8:B6:59:54:50:26:51:65:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C485B6448087BFF26A3332A8B6595450265165E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa
Signing time: Tue 28 Apr 2026 18:56:50 +0000
ROA not before: Tue 28 Apr 2026 18:51:50 +0000
ROA not after: Tue 27 Apr 2027 18:56:50 +0000
asID: 274481
IP address blocks: 2804:94d4::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:42:dd:f2:33:9b:fc:5d:30:6c:a2:29:2d:0d:02:2f:3d:2b:ff:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C485B6448087BFF26A3332A8B6595450265165E6
Validity
Not Before: Apr 28 18:51:50 2026 GMT
Not After : Apr 27 18:56:50 2027 GMT
Subject: CN=74AA48A3915464B8C9A22001BFC9DB9F1962A9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:9c:a5:35:91:fd:ec:55:68:e3:e9:55:45:
38:ce:7d:0b:dc:25:ca:0e:66:59:a6:0e:6c:ea:08:
f1:62:21:a1:a6:1e:5d:83:31:23:58:9b:9f:6d:a7:
88:63:1e:4f:9e:18:1a:40:46:cb:fb:05:6c:ea:8f:
e0:a8:33:4f:ce:7a:59:1d:b2:24:e6:8f:85:3d:46:
5c:30:a9:ee:78:05:d0:a3:7c:ac:2a:ad:f6:34:67:
de:22:e3:78:c4:cd:f5:53:27:82:ad:90:02:8b:a6:
4c:c1:db:34:d1:7e:e3:7e:99:6b:c4:2e:31:6d:1b:
b4:c3:a3:a4:08:2a:aa:72:ef:9c:f9:17:38:d9:13:
24:da:54:4a:7a:33:81:da:6f:34:c1:f0:b2:f1:30:
aa:5e:56:32:38:be:c4:bc:15:24:92:db:42:28:e9:
ae:13:5b:07:52:3d:4c:bc:1b:7a:7b:78:ac:6b:cd:
ba:e9:52:bc:f4:70:bd:c3:9d:ab:e1:bb:f5:51:e3:
5f:f7:30:62:66:5f:4d:b0:bb:7e:e7:35:bf:ca:63:
9b:fd:01:a5:ea:72:a8:cb:b5:b0:8c:1f:99:9b:65:
25:1e:04:78:e7:e9:c8:be:bc:f1:9d:87:e1:bf:83:
4d:53:09:1f:31:84:bf:73:22:3f:37:08:8a:11:37:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:48:A3:91:54:64:B8:C9:A2:20:01:BF:C9:DB:9F:19:62:A9:FF
X509v3 Authority Key Identifier:
keyid:C4:85:B6:44:80:87:BF:F2:6A:33:32:A8:B6:59:54:50:26:51:65:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/C485B6448087BFF26A3332A8B6595450265165E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C485B6448087BFF26A3332A8B6595450265165E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:94d4::/32
Signature Algorithm: sha256WithRSAEncryption
6e:0f:65:fa:e6:76:b4:8c:72:be:c7:9b:c1:8a:84:3b:4a:cd:
5a:63:2b:94:eb:d4:b7:bc:cf:2c:27:1e:06:51:99:5a:63:39:
04:2b:d1:76:91:2d:d5:f6:6f:27:ab:00:99:5f:e6:c5:14:04:
9d:f8:20:91:35:bf:e6:b0:1e:28:3f:63:67:49:27:72:a2:33:
68:c5:d9:d8:74:40:5d:a5:3f:b0:cd:b8:24:77:80:01:42:de:
dc:8a:7c:2f:2f:4a:5b:38:96:5e:7c:5d:89:79:6d:41:65:79:
75:86:b4:08:5c:7f:c0:5d:6e:53:dc:11:b9:02:6e:17:75:28:
af:78:0a:d3:ae:61:eb:1b:83:e7:82:20:46:ec:e1:43:91:b1:
5b:21:50:6a:44:ff:6d:83:b1:70:d2:99:3d:5c:10:a9:fa:df:
49:bd:ce:73:a5:1d:db:dc:33:9c:99:fb:80:43:ba:78:97:91:
0c:64:ef:49:05:82:bd:d7:00:9d:65:9d:10:32:73:0c:03:6b:
bd:13:45:93:86:ab:a5:79:cc:df:cd:15:26:4e:2d:16:82:55:
25:bc:ca:95:79:f7:1b:af:24:7c:29:33:13:fa:e9:7e:c9:de:
bf:c9:0b:8d:a4:6f:9d:2d:17:61:df:86:7b:ba:bd:2d:f2:5a:
16:4a:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:28:37 2026 by rpki-client