Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3333203d3e20323634393637.roa
File: 323830343a333061383a3a2f33322d3333203d3e20323634393637.roa (raw, json)
Hash identifier: gBIXQ4e5r+5UkpBpbeSB2q9z51PeUeHK+KkjGpZW6YA=
Subject key identifier: 18:5F:D0:3A:3E:E0:F6:E2:49:0E:CC:C1:71:74:90:9C:0E:F3:00:9C
Certificate issuer: /CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
Certificate serial: 76A9991BE05A552F509534C410E0A5E724E03451
Authority key identifier: 1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3333203d3e20323634393637.roa
Signing time: Sun 03 May 2026 21:25:11 +0000
ROA not before: Sun 03 May 2026 21:20:11 +0000
ROA not after: Sun 02 May 2027 21:25:11 +0000
asID: 264967
IP address blocks: 2804:30a8::/32 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a9:99:1b:e0:5a:55:2f:50:95:34:c4:10:e0:a5:e7:24:e0:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602
Validity
Not Before: May 3 21:20:11 2026 GMT
Not After : May 2 21:25:11 2027 GMT
Subject: CN=185FD03A3EE0F6E2490ECCC17174909C0EF3009C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:c4:a2:eb:d2:24:5b:ce:6e:78:02:d5:59:
73:34:1d:13:56:3c:22:86:f9:06:ca:92:a3:9c:e5:
31:c0:b4:dc:4f:a8:99:89:d3:37:15:49:63:56:ea:
08:97:76:ad:e3:4c:78:93:4a:65:f2:12:52:5d:8b:
f5:92:9b:5a:f1:13:f2:13:78:d1:3f:a5:a9:b2:af:
7c:18:45:ac:ab:b8:dd:ac:a9:ea:ab:a6:02:f1:1d:
cb:a5:4c:09:58:61:fc:df:f0:ec:ba:ef:79:72:9a:
d6:1b:bc:11:ae:f7:da:8f:2c:e2:58:c4:8a:87:3f:
3b:23:7c:0f:58:f1:4a:38:d2:9e:c7:d8:ab:74:1b:
a3:81:4e:24:f8:bf:5d:d7:e6:35:55:05:9b:bd:d1:
7b:b0:a3:99:8b:4a:1f:a1:86:ea:f7:42:34:8a:70:
8f:9b:2a:71:b9:92:ef:c0:75:08:31:24:62:b5:2c:
f7:53:84:c4:7d:b9:aa:65:4d:3b:f8:f1:ee:f1:e3:
6e:ae:29:c7:1b:c5:84:41:80:45:da:73:43:61:ef:
6c:61:ce:ac:15:fb:55:67:05:a4:9e:9a:2a:06:18:
97:69:2b:65:23:14:9a:d9:d6:7f:ca:e6:26:29:9b:
b2:aa:27:62:d7:1e:d5:c2:72:a7:25:91:8b:0a:d4:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:D0:3A:3E:E0:F6:E2:49:0E:CC:C1:71:74:90:9C:0E:F3:00:9C
X509v3 Authority Key Identifier:
keyid:1A:02:54:8E:37:FE:91:D8:F9:1D:08:E9:CC:34:FE:EB:3F:6F:26:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A02548E37FE91D8F91D08E9CC34FEEB3F6F2602.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3333203d3e20323634393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:30a8::/32
Signature Algorithm: sha256WithRSAEncryption
22:24:05:d6:9e:39:18:40:73:2f:5e:ac:d6:cd:d3:86:d7:42:
f8:a1:90:3a:43:0d:4b:ba:28:bb:12:2f:8b:2d:dc:f4:1a:c9:
25:8e:c3:fc:3b:2b:67:0c:74:39:58:74:92:87:a3:39:57:5f:
6c:f5:db:6d:ec:74:79:f3:00:24:93:41:4e:76:4e:0e:22:ab:
a7:d9:fd:21:b3:49:52:5b:fc:fe:b2:ee:29:49:80:a0:07:8c:
67:8c:f0:0f:76:da:4d:ff:e5:30:68:c3:c0:28:5f:85:a1:5c:
08:0e:f6:1d:01:50:c6:03:02:b9:a7:5c:2a:e6:ff:bd:d8:bb:
ec:fa:8e:b7:6f:50:35:0b:d7:5b:1b:0f:7a:d5:97:d1:4a:b7:
f2:9a:1e:18:fe:e3:c4:a6:f9:fc:74:4c:75:0f:2b:56:4b:5c:
22:18:f2:14:bd:1b:75:99:3f:fb:20:2a:bc:ab:a5:7f:27:be:
7a:a2:2e:07:f1:31:10:a9:ab:97:ba:21:b8:3f:9b:2c:be:e8:
c2:ec:ed:c2:89:5a:c5:e1:d3:cd:1f:cc:1a:aa:87:3f:cb:bd:
0e:52:86:45:74:47:f3:cb:90:9a:03:ec:45:ba:7d:e2:da:63:
a6:71:a5:8e:db:9b:d2:15:e6:a3:fb:c5:a7:34:91:71:62:57:
1a:76:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:11:33 2026 by rpki-client