Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/323830343a393162343a3a2f33322d3438203d3e20323734363539.roa
File: 323830343a393162343a3a2f33322d3438203d3e20323734363539.roa (raw, json)
Hash identifier: uvSAltv/Jj6WVeodKxdFunP37vDnMnIoNGu0s+B8Jkg=
Subject key identifier: 32:18:22:B9:76:B9:F4:C8:E6:7A:80:E7:BA:5A:7D:6B:C6:8E:56:F7
Certificate issuer: /CN=5031048E66B9F861ACEBD6E8C134A691F49C37E8
Certificate serial: 04C20BE2AAD1E2E968D78670F54D421CB3FD8099
Authority key identifier: 50:31:04:8E:66:B9:F8:61:AC:EB:D6:E8:C1:34:A6:91:F4:9C:37:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5031048E66B9F861ACEBD6E8C134A691F49C37E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/323830343a393162343a3a2f33322d3438203d3e20323734363539.roa
Signing time: Fri 20 Mar 2026 18:03:17 +0000
ROA not before: Fri 20 Mar 2026 17:58:17 +0000
ROA not after: Fri 19 Mar 2027 18:03:17 +0000
asID: 274659
IP address blocks: 2804:91b4::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c2:0b:e2:aa:d1:e2:e9:68:d7:86:70:f5:4d:42:1c:b3:fd:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5031048E66B9F861ACEBD6E8C134A691F49C37E8
Validity
Not Before: Mar 20 17:58:17 2026 GMT
Not After : Mar 19 18:03:17 2027 GMT
Subject: CN=321822B976B9F4C8E67A80E7BA5A7D6BC68E56F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:0d:36:0d:84:41:4d:6a:2b:a2:36:81:32:
c8:c6:a4:c8:bf:25:5a:7c:60:0f:d9:58:9f:5f:e4:
8a:01:f6:6d:32:1c:16:2c:a6:1f:8b:86:21:b0:e0:
1f:05:3e:87:82:3d:4e:14:61:37:8a:46:94:58:6a:
ae:74:05:0b:88:36:e4:c9:4c:9b:a4:b6:ff:d7:bf:
bc:7c:b1:78:e3:15:f1:d5:b7:8d:70:f3:ae:26:b4:
f6:fb:e1:ee:f3:42:50:0f:d8:82:3a:e0:b5:88:9f:
36:71:5f:6b:dc:0e:67:88:18:a1:ed:32:32:9a:bb:
30:d8:e5:95:40:d1:ba:0e:68:58:df:cc:4e:5c:d9:
5a:d8:c6:09:e3:a1:cc:ed:7b:e0:91:20:a8:6d:79:
9d:d6:d0:25:91:05:0e:8d:6a:96:f0:a8:34:ec:b6:
75:fd:fb:5d:48:3f:89:ee:00:21:09:9c:bf:8f:26:
e9:63:2c:bb:8e:d3:af:68:9a:ac:4f:46:3c:67:07:
4a:c1:d3:2f:03:1b:39:4a:45:17:a3:2e:b5:44:83:
74:a9:e7:29:49:0c:23:07:80:7f:4f:a0:c5:77:5f:
1f:de:9d:90:6a:84:39:e0:c2:2a:bd:4e:dd:e1:a5:
92:f1:d9:0c:89:1a:f4:d4:e2:23:59:50:45:52:ba:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:22:B9:76:B9:F4:C8:E6:7A:80:E7:BA:5A:7D:6B:C6:8E:56:F7
X509v3 Authority Key Identifier:
keyid:50:31:04:8E:66:B9:F8:61:AC:EB:D6:E8:C1:34:A6:91:F4:9C:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/5031048E66B9F861ACEBD6E8C134A691F49C37E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5031048E66B9F861ACEBD6E8C134A691F49C37E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9KrbDNgvpJup8nf3rVbU4UCT961ts9gDQWV5CB9R1Pw3/0/323830343a393162343a3a2f33322d3438203d3e20323734363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:91b4::/32
Signature Algorithm: sha256WithRSAEncryption
78:ac:9c:8d:5b:94:a4:f5:c1:6e:11:4c:ef:7b:2d:42:82:a9:
e7:5a:4c:a1:7b:b9:b9:da:b4:9c:a0:ac:7f:75:26:48:03:5e:
f8:83:41:f0:14:b2:fa:cf:11:89:e8:53:42:a0:54:62:97:66:
ca:cd:da:29:81:bd:ac:de:8f:e3:d3:a8:aa:9a:6c:77:6d:4e:
e5:60:2f:43:4a:e7:49:73:b5:3d:d2:84:2f:24:8b:a6:ff:ee:
2b:88:c0:50:2c:3a:a2:34:6f:39:85:ad:43:bd:25:3e:fb:36:
2b:fb:ba:85:1c:5d:cc:b8:87:83:a6:85:eb:63:a8:1d:6c:ad:
81:c2:d0:22:b1:27:fa:88:75:ba:f0:72:17:87:0a:74:63:36:
a8:47:12:14:e4:1c:23:12:a1:24:a5:82:5f:ae:71:af:7c:88:
ae:5a:50:cb:24:ad:bc:fa:8b:21:d2:f7:fd:87:c4:e6:14:ca:
16:dc:6d:0b:dc:0b:6f:b3:d6:84:ab:7d:a6:02:ef:e1:2a:35:
d3:08:11:03:ef:ce:39:2a:b8:85:c0:9e:3f:93:f2:a7:1c:aa:
33:21:b8:62:19:26:8c:66:65:dd:5a:9f:a7:9d:e1:b5:bb:a1:
8b:94:ed:07:76:80:44:20:f1:7e:42:52:09:77:29:25:8b:c3:
a1:03:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:20 2026 by rpki-client