Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa
File: 323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa (raw, json)
Hash identifier: 17Hy3QLf13LD0YIWDCC42bzDNxx0gxO2diqmb917CvM=
Subject key identifier: C7:03:8D:08:BF:C2:E5:51:E2:0D:EC:4C:74:B9:1E:02:12:E6:54:2C
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 725D30C35F7DFF76C54235F4C07F84E3CC462B93
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:42 +0000
ROA not before: Wed 18 Mar 2026 16:40:42 +0000
ROA not after: Wed 17 Mar 2027 16:45:42 +0000
asID: 263866
IP address blocks: 2804:26f4:400::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5d:30:c3:5f:7d:ff:76:c5:42:35:f4:c0:7f:84:e3:cc:46:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:42 2026 GMT
Not After : Mar 17 16:45:42 2027 GMT
Subject: CN=C7038D08BFC2E551E20DEC4C74B91E0212E6542C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:76:32:04:e3:ff:8c:4e:a8:4f:b9:07:90:
0e:ee:24:f2:4e:48:31:78:f2:c0:28:cd:bf:ab:9b:
33:f0:65:ef:a6:1c:f8:af:ea:90:d8:b9:ec:73:eb:
f0:ab:df:d6:25:00:7a:ad:12:15:4c:92:b5:e1:8c:
4c:1e:72:e4:e9:d1:e8:c9:70:3b:81:91:96:55:8f:
3b:31:c9:d7:ca:94:52:b1:0e:28:7f:ec:2d:b8:5e:
e6:8d:4e:65:76:f2:60:8b:08:c4:92:a8:8c:93:0b:
18:03:60:ff:7f:08:8e:80:4e:11:56:7f:cc:39:73:
c0:46:02:41:be:6e:af:8b:40:32:79:9c:03:41:f7:
a6:e6:0a:28:fa:bc:58:02:7b:e7:94:4c:56:9d:79:
56:d9:4e:3a:5b:83:7f:41:ce:a7:3a:ff:24:b0:7e:
73:03:b4:8f:9c:17:58:f4:48:82:e0:2b:30:f4:a4:
03:dd:34:ec:c9:00:57:18:b0:3e:cc:47:50:53:a9:
25:99:13:4b:e1:ef:dd:e8:80:b7:d8:d1:fb:4c:5c:
3d:a9:3f:a0:02:9c:0d:d9:a2:8f:29:1d:c6:e5:b2:
06:e3:74:83:70:07:92:d7:73:8c:1e:07:34:e8:07:
53:aa:1a:1a:b2:73:ff:f0:c0:df:53:01:8d:38:0e:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:8D:08:BF:C2:E5:51:E2:0D:EC:4C:74:B9:1E:02:12:E6:54:2C
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:26f4:400::/48
Signature Algorithm: sha256WithRSAEncryption
08:16:81:0b:67:3b:f4:84:e2:8c:5c:24:22:e2:89:94:0a:6c:
32:61:15:33:9d:1d:36:f3:77:3f:59:f1:c4:cf:7f:fd:34:70:
10:6f:fc:6c:a0:88:6b:43:fc:e9:a1:5d:97:3d:12:bc:00:48:
53:c9:24:d2:1b:fa:d5:b6:b0:5d:1a:44:40:4d:e1:b4:a0:ab:
c6:ce:03:84:43:80:8f:04:50:04:13:e8:9c:0b:bd:29:8e:1d:
3e:51:af:4b:67:0f:be:b4:96:f4:43:37:6a:68:38:18:f1:40:
54:ea:85:67:7d:f2:00:66:39:55:25:70:de:0d:32:48:8f:24:
6d:3a:a6:79:18:c5:dc:c0:80:a5:d3:f9:57:bf:6b:87:4a:04:
fd:52:2d:a4:0c:79:15:0c:6d:8b:a9:7c:a7:52:71:99:80:65:
2c:a3:8f:a0:7d:ee:55:4e:5a:d5:5f:27:69:cb:51:fb:e8:30:
ad:4d:ee:79:99:62:10:24:e6:48:f7:b3:3f:0a:aa:c4:a3:80:
63:07:ca:b6:c6:26:cb:db:c0:96:08:d8:49:0a:d3:60:c0:b7:
82:51:48:81:76:36:61:43:df:a0:d9:b8:ff:0c:03:94:e0:a1:
ce:34:b2:69:69:9b:0d:43:78:7a:63:7b:38:d0:8e:0d:c7:46:
b0:eb:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:57 2026 by rpki-client