Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
File: 323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier: PQM1xNbxkSXmmCqzVDvH0nws6tb2KtTSsA+4ybVivmU=
Subject key identifier: 2D:16:0D:F9:8E:E0:B6:5B:8E:16:8D:C3:0F:DD:0A:12:A3:13:A0:44
Certificate issuer: /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial: 48F5FFBA6D2E521E8FDE164CED91716EF98E5AC9
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
Signing time: Mon 28 Sep 2026 15:07:46 +0000
ROA not before: Mon 28 Sep 2026 15:02:46 +0000
ROA not after: Mon 27 Sep 2027 15:07:46 +0000
asID: 268296
IP address blocks: 2804:4efc:3000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f5:ff:ba:6d:2e:52:1e:8f:de:16:4c:ed:91:71:6e:f9:8e:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Validity
Not Before: Sep 28 15:02:46 2026 GMT
Not After : Sep 27 15:07:46 2027 GMT
Subject: CN=2D160DF98EE0B65B8E168DC30FDD0A12A313A044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:b6:27:9e:38:ad:6d:d5:37:84:5e:74:fd:
23:93:ad:ff:e6:69:00:7c:58:85:b5:6e:46:3b:a1:
20:96:63:42:42:65:38:26:fc:fa:04:3c:71:df:51:
c8:a1:13:c5:a8:e7:2d:0f:fa:a7:3b:e9:7a:99:f1:
ff:f4:8e:7e:b4:e3:e8:89:19:97:2c:ac:d8:c6:16:
ff:2d:8b:3f:da:d1:b4:37:36:81:68:3b:87:6e:53:
54:aa:a8:d1:50:0a:5e:2a:6a:74:f2:e4:a8:d9:df:
bf:b5:cd:f3:e8:f0:ff:a8:8c:81:d0:f6:48:ec:01:
e7:34:19:b1:68:3c:38:58:7e:36:34:09:20:e7:3a:
e0:3e:5e:ed:d6:a7:0a:18:35:09:e6:35:31:4a:1c:
ec:70:7e:18:7a:ac:08:82:9c:6b:03:2e:6d:c9:37:
ae:50:a2:74:c3:ba:de:fb:4b:33:0c:a8:01:db:70:
d2:aa:33:d1:96:ab:b8:c6:1b:39:9c:af:f6:e6:ab:
ed:42:33:f0:2f:2e:57:35:84:6d:c8:ee:f3:1b:8a:
5d:ed:14:d6:d3:df:05:cb:79:23:5f:60:84:95:05:
aa:06:3d:b9:1e:6c:33:05:78:14:5e:d3:37:f4:d1:
ae:38:a9:87:9b:7a:70:35:18:af:48:92:80:41:d5:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:16:0D:F9:8E:E0:B6:5B:8E:16:8D:C3:0F:DD:0A:12:A3:13:A0:44
X509v3 Authority Key Identifier:
keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4efc:3000::/36
Signature Algorithm: sha256WithRSAEncryption
26:76:da:11:42:2b:f0:f1:90:f5:09:48:7e:8f:fb:a7:33:a0:
de:b9:22:ba:71:e2:03:bb:46:af:61:79:c1:3b:73:04:df:cd:
1f:f3:34:c1:13:1d:5d:d5:2f:b0:ae:ba:05:b5:5f:b2:e6:57:
6a:e7:6c:74:0b:36:bd:23:b7:1e:32:37:42:26:39:27:67:0e:
ae:bd:fd:66:34:98:14:d4:82:86:85:23:6c:d3:40:0b:fd:a2:
c7:76:e2:a9:37:3f:57:f2:c6:cb:cc:88:65:93:ab:dc:90:74:
2e:90:de:2b:0b:a2:76:c3:65:24:81:86:ad:04:1d:6d:34:f0:
4a:d2:94:0c:27:fe:f4:b8:6a:18:82:ff:ee:aa:d0:70:c3:3a:
45:ef:63:95:3f:6a:ba:3b:04:fa:54:39:45:b8:61:1c:82:6f:
53:ab:d0:6a:8a:96:fc:c3:ca:c0:d8:8d:df:0b:0c:5c:e7:a6:
ef:50:18:2a:43:64:e6:ea:99:8b:b8:4f:95:70:c5:b9:0c:f7:
25:5f:47:44:15:7f:55:57:20:f3:c1:e8:66:05:9c:a2:5c:16:
95:85:2d:dc:cc:e8:cd:28:65:b5:0a:7b:b8:14:8b:36:34:07:
7f:cb:d5:35:80:5e:62:81:c0:76:76:86:23:f1:be:79:30:eb:
4b:44:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:39:25 2026 by rpki-client