Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
File: 323830343a3933343a3a2f33322d3332203d3e20323633303539.roa (raw, json)
Hash identifier: h4Q5RNwzeGEOCcf2ulj+E5YJ89xgTzKLw3TuQieBe+Q=
Subject key identifier: CB:8B:32:29:4C:19:CF:FE:92:92:1B:F2:EA:9E:19:B7:9B:77:BC:F6
Certificate issuer: /CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Certificate serial: 6E5B16DFED1FEF4CEC642A72728C61752121A2D9
Authority key identifier: 87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
Signing time: Thu 17 Jul 2025 18:35:48 +0000
ROA not before: Thu 17 Jul 2025 18:30:48 +0000
ROA not after: Thu 16 Jul 2026 18:35:48 +0000
asID: 263059
IP address blocks: 2804:934::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5b:16:df:ed:1f:ef:4c:ec:64:2a:72:72:8c:61:75:21:21:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8752E2BE0DA98EED464854CDB48A23E70D97DF55
Validity
Not Before: Jul 17 18:30:48 2025 GMT
Not After : Jul 16 18:35:48 2026 GMT
Subject: CN=CB8B32294C19CFFE92921BF2EA9E19B79B77BCF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:80:a3:10:af:ba:a3:19:66:49:72:a2:6b:
52:75:a3:4e:39:1a:00:8b:b2:76:c1:2f:17:36:16:
a5:61:a3:f4:15:50:aa:9b:42:a1:ab:5e:06:a1:b8:
77:88:a3:69:7f:a4:5d:c3:8c:2c:47:48:14:8d:f3:
2a:50:c5:c3:b2:af:1c:85:25:82:de:18:b8:52:80:
b1:16:c9:35:cb:ed:b4:76:0d:d0:a9:12:b2:52:d1:
b4:8d:88:a8:ba:66:81:3e:d5:21:32:29:9f:48:b7:
ce:04:29:45:4f:2f:b0:3e:b9:8a:c4:93:4b:61:f1:
46:bf:e4:46:8a:9f:ed:67:c8:8f:5c:16:e6:9d:b1:
90:d4:5a:c1:82:d2:2f:79:b9:25:73:cb:a7:cc:e3:
e1:a8:8d:1a:11:b2:a0:49:c5:ed:c0:e0:45:44:e5:
d1:c0:68:20:59:df:9a:5d:cd:d8:a8:0b:51:81:11:
6d:8a:e2:52:75:dd:5e:9d:94:8a:13:bf:c1:9d:d5:
2e:ce:af:78:43:ff:5b:12:df:7a:e2:ee:d6:6c:d4:
8d:d4:9c:1a:36:30:7b:cb:63:e4:df:7f:00:ff:ae:
a4:a5:a8:2f:28:37:12:95:83:b7:fb:de:e4:f5:92:
27:cf:7c:81:99:62:37:27:ea:49:d7:f5:94:b6:bd:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:32:29:4C:19:CF:FE:92:92:1B:F2:EA:9E:19:B7:9B:77:BC:F6
X509v3 Authority Key Identifier:
keyid:87:52:E2:BE:0D:A9:8E:ED:46:48:54:CD:B4:8A:23:E7:0D:97:DF:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/8752E2BE0DA98EED464854CDB48A23E70D97DF55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8752E2BE0DA98EED464854CDB48A23E70D97DF55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/323830343a3933343a3a2f33322d3332203d3e20323633303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:934::/32
Signature Algorithm: sha256WithRSAEncryption
2d:fa:a4:6c:73:77:bc:81:e5:7e:b3:94:bd:c3:09:73:4d:46:
d7:ed:b0:34:d8:7c:00:bf:d0:a5:a2:29:cf:88:a5:1b:3d:8d:
d3:a7:e3:41:85:bf:83:07:e9:a7:4a:b5:77:cb:cd:c7:ec:7d:
0d:8f:74:83:f8:09:8e:4a:b9:50:5d:25:b8:c6:2b:a2:40:b6:
e2:b2:0e:43:24:f2:6a:2a:8e:7a:27:42:b9:88:ca:6c:57:69:
e2:94:da:9c:89:0e:92:8d:92:fb:35:52:d3:79:2e:73:41:0b:
d4:88:91:e2:a6:d1:a8:f4:31:ed:f5:7d:ed:66:9b:a1:ee:40:
9f:19:8c:9b:56:19:a8:3f:27:6b:9a:04:9f:e8:5d:32:0c:f8:
79:21:28:6f:b7:68:32:90:04:a4:ea:cc:f9:26:ed:a0:c0:45:
aa:cd:4c:8f:5e:1f:40:5a:6c:11:bd:86:cd:39:76:11:01:1b:
6f:4d:0c:f5:c4:95:df:e2:63:e6:dd:b6:fd:18:2f:74:11:98:
b6:49:c0:4b:62:16:48:86:85:f4:51:92:12:a8:78:0d:26:6f:
dc:88:25:c9:38:59:a2:35:df:05:e4:dd:26:2c:91:19:78:05:
c2:28:1b:6a:83:41:35:ae:46:75:5f:12:b4:fb:52:87:ac:1a:
07:5a:5d:70
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUblsW3+0f70zsZCpycoxhdSEhotkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1MkUyQkUwREE5OEVFRDQ2NDg1NENEQjQ4QTIzRTcw
RDk3REY1NTAeFw0yNTA3MTcxODMwNDhaFw0yNjA3MTYxODM1NDhaMDMxMTAvBgNV
BAMTKENCOEIzMjI5NEMxOUNGRkU5MjkyMUJGMkVBOUUxOUI3OUI3N0JDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FoCjEK+6oxlmSXKia1J1o045
GgCLsnbBLxc2FqVho/QVUKqbQqGrXgahuHeIo2l/pF3DjCxHSBSN8ypQxcOyrxyF
JYLeGLhSgLEWyTXL7bR2DdCpErJS0bSNiKi6ZoE+1SEyKZ9It84EKUVPL7A+uYrE
k0th8Ua/5EaKn+1nyI9cFuadsZDUWsGC0i95uSVzy6fM4+GojRoRsqBJxe3A4EVE
5dHAaCBZ35pdzdioC1GBEW2K4lJ13V6dlIoTv8Gd1S7Or3hD/1sS33ri7tZs1I3U
nBo2MHvLY+TffwD/rqSlqC8oNxKVg7f73uT1kifPfIGZYjcn6knX9ZS2vV25AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUy4syKUwZz/6Skhvy6p4Zt5t3vPYwHwYDVR0j
BBgwFoAUh1Livg2pju1GSFTNtIoj5w2X31UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC84NzUyRTJCRTBEQTk4RUVENDY0ODU0Q0RCNDhBMjNFNzBEOTdERjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NTJFMkJFMERBOThFRUQ0
NjQ4NTRDREI0OEEyM0U3MEQ5N0RGNTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzIzODMwMzQzYTM5MzMzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECTQwDQYJKoZIhvcNAQELBQADggEBAC36pGxzd7yB
5X6zlL3DCXNNRtftsDTYfAC/0KWiKc+IpRs9jdOn40GFv4MH6adKtXfLzcfsfQ2P
dIP4CY5KuVBdJbjGK6JAtuKyDkMk8moqjnonQrmIymxXaeKU2pyJDpKNkvs1UtN5
LnNBC9SIkeKm0aj0Me31fe1mm6HuQJ8ZjJtWGag/J2uaBJ/oXTIM+HkhKG+3aDKQ
BKTqzPkm7aDARarNTI9eH0BabBG9hs05dhEBG29NDPXEld/iY+bdtv0YL3QRmLZJ
wEtiFkiGhfRRkhKoeA0mb9yIJck4WaI13wXk3SYskRl4BcIoG2qDQTWuRnVfErT7
UoesGgdaXXA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:13 2025 by rpki-client