Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/323830343a333832633a3a2f33322d313238203d3e20323636343632.roa
File: 323830343a333832633a3a2f33322d313238203d3e20323636343632.roa (raw, json)
Hash identifier: XgBlpZ2YWGl10rtXvXfEPslvjzYnNUY6N7Y1fE4i87A=
Subject key identifier: 64:C7:4A:32:3A:17:F1:BB:06:A7:9D:95:DE:84:BE:48:51:FF:15:55
Certificate issuer: /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial: 08B0CF67B4E6D81F316D441C111251D38EEA185F
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/323830343a333832633a3a2f33322d313238203d3e20323636343632.roa
Signing time: Tue 24 Mar 2026 14:09:03 +0000
ROA not before: Tue 24 Mar 2026 14:04:03 +0000
ROA not after: Tue 23 Mar 2027 14:09:03 +0000
asID: 266462
IP address blocks: 2804:382c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b0:cf:67:b4:e6:d8:1f:31:6d:44:1c:11:12:51:d3:8e:ea:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Validity
Not Before: Mar 24 14:04:03 2026 GMT
Not After : Mar 23 14:09:03 2027 GMT
Subject: CN=64C74A323A17F1BB06A79D95DE84BE4851FF1555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:e5:db:4e:73:e7:9f:4c:88:b1:65:d3:09:
d8:f0:9c:09:4e:39:28:23:76:16:27:13:ee:d1:6d:
a8:51:cc:bd:cd:7a:2d:84:10:cc:27:8e:41:04:2d:
37:4d:a3:ba:c2:54:fd:ac:ba:98:86:77:0f:30:a1:
20:98:99:39:3d:d5:65:ab:0b:8d:2d:51:47:8e:20:
b9:31:33:d6:ec:bb:a6:0d:29:28:44:4f:b8:e3:6c:
81:1a:4f:ec:55:2c:1d:b9:07:7a:2c:78:f2:fa:fe:
92:91:64:78:5c:eb:41:0b:cc:fb:b2:20:bf:11:11:
97:66:f4:d0:b2:f9:65:91:97:17:1d:5f:1e:bf:d0:
24:ab:ff:19:f7:6e:8a:93:b2:48:05:83:e2:e8:7f:
49:6b:f8:8f:03:35:ce:6e:70:95:a0:fa:59:92:3b:
e2:42:66:55:12:ba:dc:38:7e:49:9f:58:85:2c:4a:
b8:6b:2c:3f:3b:da:5b:d4:0a:41:f4:75:81:ee:bd:
03:5a:fa:d5:63:2a:ed:ae:48:41:90:c5:d3:07:47:
34:5b:fd:e4:ad:44:01:8a:b0:1b:a7:74:39:23:26:
bd:53:bf:15:d4:2f:f5:3f:7e:07:de:47:0a:ac:19:
bc:eb:19:11:17:71:64:8a:b8:06:71:f5:ea:1f:c8:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:4A:32:3A:17:F1:BB:06:A7:9D:95:DE:84:BE:48:51:FF:15:55
X509v3 Authority Key Identifier:
keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/323830343a333832633a3a2f33322d313238203d3e20323636343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:382c::/32
Signature Algorithm: sha256WithRSAEncryption
06:b1:d1:af:ea:99:88:20:ac:c9:67:c1:f2:56:76:47:64:54:
1d:4b:54:d8:e9:d9:c1:7f:05:66:af:06:11:12:af:ae:df:63:
78:a9:f4:89:3e:d3:6f:52:47:bd:8f:e7:79:18:2a:c4:e5:8d:
4d:04:5e:49:d2:6f:1e:09:7e:4c:cc:a3:50:2e:09:65:16:d6:
56:3b:87:0f:af:8c:29:98:9e:7b:34:42:e1:ec:cd:f4:dc:50:
6f:ba:82:ae:45:5d:46:40:3a:8a:cd:b7:1e:8b:4a:7c:bf:4c:
6e:df:d4:9a:31:d0:7d:81:59:c9:41:a6:0b:f3:68:e6:b0:39:
9d:86:72:bb:be:6e:1a:c9:c6:cd:b7:e7:ca:2c:03:2d:b0:d4:
e8:bb:7f:99:41:33:a4:8c:41:1f:cd:93:10:d0:ea:9c:7d:cc:
7c:3b:54:00:7b:a4:0f:ea:2a:c1:10:ab:05:11:10:fe:8f:21:
8e:4f:6b:1d:4a:6f:af:85:9d:24:ef:44:e0:9f:0b:a0:5b:aa:
22:b6:6c:90:48:40:1b:e2:e7:fc:ac:c3:b7:31:bd:19:b0:23:
9f:0c:f0:96:61:de:30:dd:c6:04:02:6e:ef:3f:6b:2c:f4:67:
d8:7e:0a:06:9a:2b:18:ad:a5:db:6a:c7:30:d1:c2:b8:f2:7d:
61:b7:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:33 2026 by rpki-client