Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
File: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (raw, json)
Hash identifier: TkjalB8zGJIV/+SLxdxkV1/bSnCLmlLwPPX+DesPkVI=
Subject key identifier: CA:4C:9A:05:BB:16:0B:A2:07:31:DD:CD:93:14:4E:CC:85:65:C0:01
Certificate issuer: /CN=5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C
Certificate serial: 7B2910E019C84B5B27283A93B628F0F4E19EF5A9
Authority key identifier: 5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
Signing time: Tue 24 Mar 2026 16:25:23 +0000
ROA not before: Tue 24 Mar 2026 16:20:23 +0000
ROA not after: Tue 23 Mar 2027 16:25:23 +0000
asID: 61756
IP address blocks: 2804:1be8::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:29:10:e0:19:c8:4b:5b:27:28:3a:93:b6:28:f0:f4:e1:9e:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C
Validity
Not Before: Mar 24 16:20:23 2026 GMT
Not After : Mar 23 16:25:23 2027 GMT
Subject: CN=CA4C9A05BB160BA20731DDCD93144ECC8565C001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:33:99:40:c5:e8:29:38:ac:df:72:a2:09:
88:3d:5e:22:33:e1:07:0e:aa:c8:0a:c2:0a:16:05:
92:48:d0:dc:06:42:61:f2:dc:08:22:15:80:cd:be:
0d:5b:cb:d3:3d:2b:1b:c8:9e:96:8f:97:52:d2:87:
02:53:e3:82:4a:04:75:30:3e:cc:f6:cf:8f:07:be:
3a:b9:24:00:10:87:5d:f4:7f:21:03:4e:88:04:fe:
b0:2c:b4:e3:33:a6:22:f8:03:7f:a3:51:26:e8:37:
28:cf:75:47:64:f2:62:25:60:4e:dc:9e:1b:a9:15:
27:c3:ca:d6:08:7f:f4:17:f5:a8:f8:0a:29:60:b7:
56:76:cc:c7:91:25:39:b2:55:f2:e1:72:bb:45:ca:
b1:1d:56:cf:93:d5:f1:f4:4d:7a:d5:45:c8:97:13:
6a:cd:f4:92:ef:5a:25:f1:c2:29:61:1b:af:07:35:
85:bc:2d:5f:af:69:85:e6:36:a5:8c:08:0f:ed:11:
8b:47:19:9b:91:22:80:64:4c:5b:18:81:38:98:da:
95:4d:83:8d:e6:30:85:bc:6c:65:6a:f7:54:82:6f:
6f:20:93:2f:02:3e:f6:98:f7:dc:3b:42:02:d0:49:
27:d2:be:42:57:64:09:d6:cc:b2:5a:db:32:f4:04:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:9A:05:BB:16:0B:A2:07:31:DD:CD:93:14:4E:CC:85:65:C0:01
X509v3 Authority Key Identifier:
keyid:5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1be8::/32
Signature Algorithm: sha256WithRSAEncryption
7d:57:62:8f:21:fb:0f:aa:7e:98:dc:8d:dd:87:fe:c8:d1:e1:
22:10:a3:61:9b:dc:9a:4d:a5:bd:97:a5:ca:ee:74:87:2e:84:
ce:e6:ff:1c:5a:82:b8:2b:30:12:49:91:90:eb:94:82:51:17:
f0:dd:2e:db:1a:c1:e7:05:6c:fd:28:a4:cb:20:ec:a0:57:3b:
35:51:fb:78:27:3f:3f:91:e3:27:65:f8:eb:49:dc:dd:ca:84:
d3:c4:62:f3:2c:a0:92:e5:f9:13:f0:91:f3:80:44:f7:38:77:
ec:b8:1c:7b:f8:28:bd:25:51:08:2c:b2:fc:be:6a:55:69:16:
69:42:a5:97:47:e5:e9:0f:7d:7d:e1:85:b7:fb:0f:e8:67:e3:
65:b9:35:60:83:9e:c8:b8:61:cd:71:a9:46:29:ce:eb:2a:02:
ed:dd:5e:60:bc:c1:d0:30:e5:0d:9a:8b:83:6c:3f:12:01:96:
d3:ed:29:43:57:1e:5d:78:52:9a:f6:b2:a2:b1:ba:07:83:ab:
93:d6:4f:10:bb:c7:2d:4a:12:10:57:f6:6d:89:07:0f:82:e7:
bc:9c:17:ef:a0:7e:6d:d1:d7:b3:9b:91:6a:70:44:3c:5f:fa:
ba:6f:20:47:8d:24:b0:e2:96:0b:cd:b0:8c:2a:ac:a1:c9:6a:
08:2c:92:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:21 2026 by rpki-client