Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
File: 323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (raw, json)
Hash identifier: lVfLYa9exGTBMWPM0C6EYN/qFUrJQeHshgQSX5HI/cc=
Subject key identifier: 88:98:A5:52:E3:74:6A:33:0D:9B:03:5D:55:9F:B3:0A:30:17:EF:2A
Certificate issuer: /CN=C49747C27C98A297404D420CA83A51FA4EF6FF68
Certificate serial: 1BCAE21A315BD4171009270A6C973899085A93C3
Authority key identifier: C4:97:47:C2:7C:98:A2:97:40:4D:42:0C:A8:3A:51:FA:4E:F6:FF:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C49747C27C98A297404D420CA83A51FA4EF6FF68.cer
Subject info access: rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
Signing time: Thu 09 Oct 2025 12:53:45 +0000
ROA not before: Thu 09 Oct 2025 12:48:45 +0000
ROA not after: Thu 08 Oct 2026 12:53:45 +0000
asID: 269248
IP address blocks: 2804:61a8::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ca:e2:1a:31:5b:d4:17:10:09:27:0a:6c:97:38:99:08:5a:93:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49747C27C98A297404D420CA83A51FA4EF6FF68
Validity
Not Before: Oct 9 12:48:45 2025 GMT
Not After : Oct 8 12:53:45 2026 GMT
Subject: CN=8898A552E3746A330D9B035D559FB30A3017EF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:e7:f0:70:14:5a:48:8a:96:f1:bb:a9:a7:
fd:ee:e5:87:f9:1e:de:af:a7:51:a2:db:ce:60:c2:
19:06:ce:67:05:2e:84:b5:af:51:00:04:c9:59:50:
72:58:1c:71:1c:ee:f5:7f:ee:fa:d8:ed:e2:57:7a:
5c:a6:3b:c4:a2:6f:76:06:be:78:a0:cb:fd:40:77:
b5:ab:a9:06:60:29:c0:f0:35:73:b8:70:b1:c3:d5:
f2:dc:d0:9f:28:33:4a:e3:7b:03:e8:87:04:df:f0:
96:5f:97:8f:ee:a1:a8:66:55:cc:f7:bb:e6:73:21:
ab:cd:24:6f:76:2e:6d:db:1f:23:68:26:04:39:5b:
12:9a:02:cb:16:14:d6:27:ce:7f:0e:5c:3b:3f:ff:
ea:e2:4f:f4:72:3f:b0:7f:fe:77:af:b9:19:6d:6a:
b6:e0:b5:17:ee:f1:3b:05:c9:5f:7c:5b:c6:79:97:
e1:e5:72:64:45:7f:04:d9:a3:61:9a:1d:f6:cd:21:
06:aa:36:90:65:90:df:d8:54:b5:23:e8:7a:e1:62:
2c:10:82:1d:aa:eb:3b:ee:e4:ed:bd:22:49:d4:00:
21:1a:0a:75:75:44:08:d0:21:d4:bb:e5:11:92:03:
07:47:84:1e:0e:d4:68:20:68:da:a1:9c:44:78:86:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:A5:52:E3:74:6A:33:0D:9B:03:5D:55:9F:B3:0A:30:17:EF:2A
X509v3 Authority Key Identifier:
keyid:C4:97:47:C2:7C:98:A2:97:40:4D:42:0C:A8:3A:51:FA:4E:F6:FF:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/C49747C27C98A297404D420CA83A51FA4EF6FF68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C49747C27C98A297404D420CA83A51FA4EF6FF68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:61a8::/32
Signature Algorithm: sha256WithRSAEncryption
00:08:5b:fa:b6:9b:9e:5d:e8:35:3e:da:a3:a4:83:42:69:3a:
b1:8b:5f:79:ca:ab:3d:29:f4:2b:e5:3e:8d:3c:48:cd:b9:2b:
f6:15:c8:cd:35:8f:3a:0b:b9:07:b8:2d:eb:fb:aa:ab:48:1d:
bf:9f:08:82:31:41:93:eb:01:23:99:b2:41:56:4a:80:d1:88:
ba:87:48:0f:c1:08:09:9f:b0:df:25:3c:47:d1:70:10:91:b4:
00:2f:d8:6e:a3:b6:23:b5:9b:4b:33:3e:6b:32:0f:b3:51:44:
37:a1:4a:08:a0:1d:13:ba:4e:42:aa:34:49:0a:be:3c:f2:9f:
2a:91:d1:97:4a:f9:82:93:5b:29:3b:cd:77:67:21:d9:13:ee:
e8:97:5e:9c:a6:92:52:2b:92:35:37:a9:e9:94:47:a9:66:7b:
a0:c9:0a:e5:03:62:6d:93:db:7f:41:6e:fe:a9:5b:c0:a2:a9:
87:f4:de:3e:f2:00:59:db:4b:6d:60:f3:df:dd:9e:62:26:fd:
98:fc:4b:aa:23:50:ea:2f:cc:87:26:48:8c:ca:5f:32:ee:e2:
5d:03:b2:19:5b:38:24:5c:c7:50:26:1c:bd:c8:1b:9d:79:41:
99:b5:14:a0:9b:e6:f0:03:1f:f6:47:42:75:b0:ac:23:14:b7:
fc:0b:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:41 2025 by rpki-client