Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
File: 323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (raw, json)
Hash identifier: whp/BD+wi9XYnIXQaoAxbgPYxul9G7VU+PRWIyVk3sY=
Subject key identifier: C3:BD:40:EA:12:6A:CA:8D:DC:76:03:55:3C:91:10:2B:9A:75:A8:64
Certificate issuer: /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial: 39AB0D7AC7DD132465A1FF0A308966A99492D361
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
Signing time: Thu 14 Aug 2025 12:44:12 +0000
ROA not before: Thu 14 Aug 2025 12:39:12 +0000
ROA not after: Thu 13 Aug 2026 12:44:12 +0000
asID: 268993
IP address blocks: 2804:5dcc::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ab:0d:7a:c7:dd:13:24:65:a1:ff:0a:30:89:66:a9:94:92:d3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Validity
Not Before: Aug 14 12:39:12 2025 GMT
Not After : Aug 13 12:44:12 2026 GMT
Subject: CN=C3BD40EA126ACA8DDC7603553C91102B9A75A864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:e2:25:39:02:e2:90:49:79:a7:f0:74:f6:
89:59:f3:aa:03:c9:5e:05:30:10:c6:73:40:96:e2:
34:7a:b3:7e:01:ce:fa:c5:eb:90:63:c1:3e:78:28:
64:89:a8:84:86:98:ab:28:9d:20:51:ef:ab:0f:12:
0d:2b:1c:6e:57:4e:44:27:0d:0a:03:b9:51:47:31:
f2:be:8e:2a:04:49:36:29:0d:94:fe:63:3c:e3:2f:
59:58:e9:95:7d:73:19:aa:e3:72:37:aa:6f:39:07:
91:16:37:0b:aa:c6:19:5c:7c:49:26:2f:b5:e5:12:
e2:da:f8:38:27:47:ae:de:bf:fd:8a:85:82:9b:60:
db:9b:1b:27:de:12:95:70:09:3f:52:d7:c3:90:23:
c7:b5:83:0c:12:cc:81:d1:87:65:f5:38:77:c8:d4:
d3:ff:e9:c3:48:fa:79:4f:44:24:b6:40:22:52:a6:
cc:9f:6f:1f:66:b2:ae:e5:de:32:9d:ef:a8:a8:a0:
fe:08:9c:83:c8:70:22:a8:bf:95:38:8b:2e:25:2f:
cd:80:ff:52:18:92:27:50:e0:ab:67:f3:10:33:c1:
77:2f:0f:d5:d4:9c:17:46:4d:21:f0:86:c8:20:e6:
d2:8b:22:68:5d:30:cf:1d:0a:a5:34:a3:f5:0f:01:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:40:EA:12:6A:CA:8D:DC:76:03:55:3C:91:10:2B:9A:75:A8:64
X509v3 Authority Key Identifier:
keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dcc::/32
Signature Algorithm: sha256WithRSAEncryption
62:9b:e8:c6:8f:9a:54:88:a6:69:f8:bd:91:8f:9b:b8:25:0e:
88:b3:27:88:b5:aa:4d:ae:21:f0:31:a1:0c:ce:b1:bd:31:4e:
cb:f0:03:4a:64:7b:bb:78:f4:61:7e:07:ee:5c:23:01:35:1f:
77:a9:05:31:45:4b:ad:16:e8:7a:7a:95:00:c9:45:2f:82:3f:
fb:6b:48:a2:17:4a:9a:03:df:47:9d:f2:f1:06:4c:5a:ae:4f:
b7:7f:6f:a6:cd:27:ec:52:c6:f1:24:e4:b0:ae:3e:cc:b9:d0:
8f:3b:ff:7f:6c:14:8f:36:fa:65:6d:e2:cb:04:09:fe:a1:b2:
ea:8b:eb:72:59:4b:03:4f:35:1f:40:3e:7d:50:a7:75:55:be:
97:ee:0d:a3:ef:75:02:c3:d7:dd:ab:eb:84:cf:1e:ed:89:d4:
bd:e3:2d:75:e8:6a:2b:b9:67:5f:77:e8:08:c4:31:32:80:35:
32:39:1d:ca:fc:26:08:9f:13:74:98:f2:8d:17:a8:d3:42:95:
33:6f:81:01:8d:a9:58:fd:7f:a1:4a:7c:b2:49:21:89:68:d7:
94:a0:2d:e1:df:88:e9:18:76:28:c1:b5:f7:8d:08:9a:19:c4:
b1:77:a3:74:de:3a:fd:7b:b7:89:ea:63:c5:10:ef:34:bd:46:
14:46:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:55:31 2025 by rpki-client