Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa
File: 323830343a323666343a3a2f33322d3332203d3e20323633383636.roa (raw, json)
Hash identifier: TppsycyLpTNmcGmVuK1kgdEeR+P9ern+nxPSVfJjHN4=
Subject key identifier: 24:A8:6B:03:53:0C:56:44:39:8C:C0:90:63:11:7D:0D:95:2F:55:44
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 3880579AC0EC0389F4FB391E7B4209730321A081
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:44:55 +0000
ROA not before: Wed 18 Mar 2026 16:39:55 +0000
ROA not after: Wed 17 Mar 2027 16:44:55 +0000
asID: 263866
IP address blocks: 2804:26f4::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:80:57:9a:c0:ec:03:89:f4:fb:39:1e:7b:42:09:73:03:21:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:39:55 2026 GMT
Not After : Mar 17 16:44:55 2027 GMT
Subject: CN=24A86B03530C5644398CC09063117D0D952F5544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:a5:5a:a9:ce:18:cd:60:ec:9e:ae:ed:77:
c9:11:9c:a1:ce:fd:35:6e:ab:6e:f1:ea:73:8b:68:
8d:3c:44:5e:94:e4:e3:ec:f8:2f:e9:fd:02:00:1a:
38:91:d6:0f:e5:ee:94:e5:22:b1:6c:0a:3a:c1:5b:
7e:d1:a0:6d:7d:70:e3:c7:42:8e:fa:3d:e2:72:e6:
a4:5c:00:0f:d0:ac:06:98:f8:3b:88:2f:8b:58:dd:
51:f8:90:bd:98:57:58:b2:eb:2d:0d:1f:39:05:bb:
07:55:10:7f:10:c4:bd:9e:18:19:89:4b:4f:c1:54:
14:1b:c1:1a:aa:52:27:c4:d6:5c:a5:a8:a2:33:01:
d0:03:61:ad:39:c6:18:da:12:5c:ee:2f:05:b0:46:
2b:5d:04:b0:34:e7:7e:12:a7:ad:90:f2:78:34:f4:
16:3e:19:75:fe:86:f9:ac:ac:e5:42:58:9b:bb:81:
d4:bd:56:7c:8b:ae:64:ad:18:58:70:18:33:91:99:
d8:a6:33:b1:87:6f:f6:88:fe:22:1a:3b:31:5c:12:
ec:4c:09:bf:f3:fb:a9:76:9f:05:2d:aa:fe:21:b8:
c4:62:86:76:d4:cc:30:f4:2c:af:1a:a8:d0:9b:b0:
70:04:12:58:ea:a3:4a:c2:a2:d7:d8:b8:0c:26:0d:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:6B:03:53:0C:56:44:39:8C:C0:90:63:11:7D:0D:95:2F:55:44
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:26f4::/32
Signature Algorithm: sha256WithRSAEncryption
20:f0:fb:7f:b1:e4:13:11:94:d4:e0:5e:e6:8a:69:95:93:b4:
91:f7:fb:7e:63:1b:75:56:a6:9c:ea:83:fd:9f:3b:58:30:eb:
bd:c7:fe:dc:e6:c7:64:dd:00:a7:7c:26:4d:1b:f7:44:89:06:
bf:62:0a:d5:e7:7e:bf:fa:b0:30:78:58:70:07:f8:85:c9:c0:
4c:ef:1e:19:8e:30:e9:4e:e1:53:ba:18:86:4f:20:60:8d:9c:
de:9c:a6:4c:47:ef:f0:89:2d:67:9a:64:c1:d1:4e:a4:1b:9a:
af:75:76:c8:cb:21:ee:01:8d:30:cd:76:6d:81:10:c4:42:c8:
14:a6:af:34:f2:80:6f:e7:22:f3:18:2e:58:36:26:11:a0:8e:
2e:09:3e:71:80:9a:84:9f:4e:e9:7f:6a:39:cc:af:f8:42:67:
c7:64:68:5a:71:c7:30:9e:1c:c0:93:66:bf:13:04:f1:af:82:
bf:5e:23:1e:9d:51:ea:43:59:b0:5d:2a:44:6f:9e:c5:64:42:
33:28:63:bd:4e:e9:7a:ed:0f:cb:ab:14:db:33:fe:44:f0:dc:
8b:27:2e:61:85:d5:29:a5:8c:f0:83:c8:a2:d6:ab:9e:e5:6a:
07:6f:ff:bf:38:bf:21:fd:40:3d:7e:ea:15:22:a9:98:e9:2f:
e3:70:90:2f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOIBXmsDsA4n0+zkee0IJcwMhoIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdE
NEQyMDVBNzAeFw0yNjAzMTgxNjM5NTVaFw0yNzAzMTcxNjQ0NTVaMDMxMTAvBgNV
BAMTKDI0QTg2QjAzNTMwQzU2NDQzOThDQzA5MDYzMTE3RDBEOTUyRjU1NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwqVaqc4YzWDsnq7td8kRnKHO
/TVuq27x6nOLaI08RF6U5OPs+C/p/QIAGjiR1g/l7pTlIrFsCjrBW37RoG19cOPH
Qo76PeJy5qRcAA/QrAaY+DuIL4tY3VH4kL2YV1iy6y0NHzkFuwdVEH8QxL2eGBmJ
S0/BVBQbwRqqUifE1lylqKIzAdADYa05xhjaElzuLwWwRitdBLA0534Sp62Q8ng0
9BY+GXX+hvmsrOVCWJu7gdS9VnyLrmStGFhwGDORmdimM7GHb/aI/iIaOzFcEuxM
Cb/z+6l2nwUtqv4huMRihnbUzDD0LK8aqNCbsHAEEljqo0rCotfYuAwmDYmDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUJKhrA1MMVkQ5jMCQYxF9DZUvVUQwHwYDVR0j
BBgwFoAUpZWevU31Hf6P2WKZzs0oR9TSBacwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45
LzAvQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdENEQyMDVBNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTk1OUVCRDRERjUxREZFOEZE
OTYyOTlDRUNEMjg0N0Q0RDIwNUE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9R
SlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45LzAvMzIz
ODMwMzQzYTMyMzY2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzgz
NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQm9DANBgkqhkiG9w0BAQsFAAOCAQEAIPD7f7HkExGU
1OBe5opplZO0kff7fmMbdVamnOqD/Z87WDDrvcf+3ObHZN0Ap3wmTRv3RIkGv2IK
1ed+v/qwMHhYcAf4hcnATO8eGY4w6U7hU7oYhk8gYI2c3pymTEfv8IktZ5pkwdFO
pBuar3V2yMsh7gGNMM12bYEQxELIFKavNPKAb+ci8xguWDYmEaCOLgk+cYCahJ9O
6X9qOcyv+EJnx2RoWnHHMJ4cwJNmvxME8a+Cv14jHp1R6kNZsF0qRG+exWRCMyhj
vU7peu0Py6sU2zP+RPDciycuYYXVKaWM8IPIotarnuVqB2//vzi/If1APX7qFSKp
mOkv43CQLw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:57 2026 by rpki-client