Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33342d3334203d3e20323633383430.roa
File: 323830343a323639343a3a2f33342d3334203d3e20323633383430.roa (raw, json)
Hash identifier: TkNA8BqN1sWxw6TzmP2jDSBEJTWQicNwKf35A4GnKJQ=
Subject key identifier: C4:AA:FE:D9:85:AC:CC:0D:C0:3C:50:2A:34:20:A0:DA:7C:22:DB:D8
Certificate issuer: /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial: 062326DE5AAA5F2CF1842749DB9E041698C296F3
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33342d3334203d3e20323633383430.roa
Signing time: Thu 01 Oct 2026 21:00:32 +0000
ROA not before: Thu 01 Oct 2026 20:55:32 +0000
ROA not after: Thu 30 Sep 2027 21:00:32 +0000
asID: 263840
IP address blocks: 2804:2694::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:23:26:de:5a:aa:5f:2c:f1:84:27:49:db:9e:04:16:98:c2:96:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Validity
Not Before: Oct 1 20:55:32 2026 GMT
Not After : Sep 30 21:00:32 2027 GMT
Subject: CN=C4AAFED985ACCC0DC03C502A3420A0DA7C22DBD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:55:c2:56:1c:70:ef:6e:90:96:8a:29:dc:
20:aa:4a:5a:47:3b:69:87:2c:10:bd:4c:90:1d:da:
da:77:7c:a5:f3:62:23:54:84:75:0f:98:07:fa:2f:
6a:8d:0d:6d:d1:65:b8:05:8d:9c:06:9e:a9:37:d7:
96:e7:ad:21:49:7c:5b:73:2a:b7:e7:28:73:08:9d:
b6:46:f5:32:a2:07:87:38:14:58:5a:56:7e:3b:76:
33:96:b5:e7:4f:cd:43:13:69:a5:cf:a9:4f:ad:c2:
d2:83:f0:58:b3:e0:7b:5d:89:2f:71:f3:f1:16:35:
43:77:54:56:41:b1:ae:9b:e7:64:f9:ac:44:56:2f:
e5:ca:0c:b0:55:fa:e3:5b:a6:99:ed:69:21:27:fe:
da:a5:4e:89:b5:ef:04:c1:c5:28:64:2b:e8:f0:8e:
b0:39:23:80:32:c1:77:8c:b4:56:43:74:e6:12:98:
89:6d:6e:69:26:3d:67:8f:aa:d2:0f:5a:c8:2c:d9:
ba:67:8d:70:08:e1:8a:d3:cc:42:05:07:bd:84:f1:
bb:82:c1:92:de:f0:63:ca:ac:43:5e:7a:30:36:05:
8c:6b:a4:d7:d4:84:b3:a4:ce:bb:a5:1c:4c:4c:df:
5d:c7:26:92:cc:b7:c3:2e:56:d8:eb:87:f9:a3:0c:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:FE:D9:85:AC:CC:0D:C0:3C:50:2A:34:20:A0:DA:7C:22:DB:D8
X509v3 Authority Key Identifier:
keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33342d3334203d3e20323633383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2694::/34
Signature Algorithm: sha256WithRSAEncryption
9c:be:ce:aa:e2:d5:fb:53:28:63:08:e6:f4:14:1b:b2:66:e5:
08:4c:ce:b3:75:9a:c5:f8:74:94:1a:df:1f:75:8e:d3:56:a6:
a6:02:c9:d8:94:be:4c:89:b5:2a:67:b0:49:3b:f1:2a:b0:50:
16:1c:21:16:56:03:31:34:13:c5:eb:55:a0:98:1d:10:32:d7:
a5:ef:aa:f5:50:05:4b:68:14:de:14:a7:58:ac:35:45:cb:0d:
d7:e5:34:7a:4a:3b:09:bd:3b:a1:21:fb:65:10:78:95:d5:6f:
e7:18:a1:07:f0:9b:be:78:51:dc:55:40:d1:7e:64:11:79:11:
aa:7d:9d:c6:59:90:05:9f:22:d7:09:05:f8:b2:b0:c7:fa:7d:
25:ef:97:09:df:ae:89:6c:12:57:54:ab:c2:76:a7:c3:b6:7f:
0c:b1:25:f3:6f:4a:7e:3f:5a:8c:76:66:5a:aa:36:6a:46:6a:
0a:68:49:ef:27:08:2d:e4:a5:fd:24:61:2b:4b:cc:d6:53:13:
d6:70:b1:22:dd:62:b6:9c:46:cb:5f:cd:b9:a5:f5:85:cb:90:
3b:b9:f8:6d:4f:dc:81:b0:95:bb:1b:2b:5c:fd:84:9c:d3:25:
9c:1f:8b:f1:fe:ca:b1:99:2c:6e:5a:20:38:25:19:0a:19:2c:
d5:02:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:43:49 2026 by rpki-client