Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa
File: 323830343a373763633a3a2f33322d313238203d3e20323731323030.roa (raw, json)
Hash identifier: iQkp0Q+++nqJuJTpNZfHB4OaHnNki/DPyCS7kTN0Wcs=
Subject key identifier: 6E:2A:C5:A8:6A:43:DB:14:14:F0:79:B7:7F:ED:EC:09:D5:A8:EF:B7
Certificate issuer: /CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Certificate serial: 1C0AC63F1FAE5D03A620372A34BEB7766314D48D
Authority key identifier: 05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa
Signing time: Sun 21 Sep 2025 22:43:07 +0000
ROA not before: Sun 21 Sep 2025 22:38:07 +0000
ROA not after: Sun 20 Sep 2026 22:43:07 +0000
asID: 271200
IP address blocks: 2804:77cc::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0a:c6:3f:1f:ae:5d:03:a6:20:37:2a:34:be:b7:76:63:14:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052E1FD3B34D2D94C83980528B60B11DFB854B57
Validity
Not Before: Sep 21 22:38:07 2025 GMT
Not After : Sep 20 22:43:07 2026 GMT
Subject: CN=6E2AC5A86A43DB1414F079B77FEDEC09D5A8EFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:79:6b:75:b0:df:b9:2f:d4:02:49:cc:f8:
20:6c:dd:a0:58:09:70:12:cc:18:6b:74:82:c7:b9:
14:66:4f:bf:4a:4a:de:10:92:4b:a7:0b:fd:d7:cd:
9c:77:91:b3:58:9e:79:55:06:8d:f3:fd:87:af:7e:
fb:a2:dc:cd:21:2c:5e:a6:94:b5:ea:4c:b5:11:a6:
bb:9b:9d:5b:0c:87:35:ad:b3:8f:84:38:47:8a:87:
04:cf:d0:5d:72:42:93:0a:cc:dc:af:1b:6d:14:ad:
8d:f5:8c:80:46:cd:86:7e:b0:73:17:18:87:00:94:
ac:4d:54:0a:bc:46:52:09:91:68:18:06:cc:45:26:
ba:55:72:b5:49:f7:0a:ec:a5:a5:72:c7:c2:94:79:
eb:9e:2c:29:85:b7:91:b2:d1:c4:2d:84:d1:fc:74:
9d:a3:ff:c5:8d:91:af:d4:f5:f3:9f:2e:58:d7:c3:
af:f6:5c:ba:98:4b:0f:69:c9:6f:c4:76:a3:cf:88:
e3:81:dc:1c:7f:91:97:69:1a:ad:76:20:64:05:aa:
f2:a6:7b:96:8f:86:ca:a0:ac:3d:0d:7d:ae:2c:1c:
1f:d9:8b:e1:6d:59:50:b8:1d:f8:fb:8f:17:6d:c2:
6f:1a:25:d7:49:c8:32:7b:5c:aa:e5:e4:67:a3:55:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:C5:A8:6A:43:DB:14:14:F0:79:B7:7F:ED:EC:09:D5:A8:EF:B7
X509v3 Authority Key Identifier:
keyid:05:2E:1F:D3:B3:4D:2D:94:C8:39:80:52:8B:60:B1:1D:FB:85:4B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/052E1FD3B34D2D94C83980528B60B11DFB854B57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052E1FD3B34D2D94C83980528B60B11DFB854B57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/323830343a373763633a3a2f33322d313238203d3e20323731323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77cc::/32
Signature Algorithm: sha256WithRSAEncryption
84:7f:be:0b:7e:1c:ba:41:73:19:93:5a:00:98:de:9e:5b:48:
89:9e:00:de:37:44:f1:f1:c2:d6:36:67:39:6d:76:49:7b:85:
95:3f:e4:a4:bf:f4:e5:9c:87:4e:98:00:ed:7a:1e:f2:fb:62:
49:0f:92:35:12:99:78:ca:50:56:e3:91:71:cd:3f:31:1a:2b:
0f:bc:32:da:57:db:aa:59:72:a8:d5:fe:66:0a:c0:5a:b6:4a:
3c:31:55:90:34:7e:a4:f7:3e:4e:66:a8:4c:08:cf:d9:58:5a:
7e:d5:40:c4:76:39:71:c1:af:aa:5a:42:bf:79:e6:4c:47:30:
a1:79:9e:59:c7:1e:e4:b3:24:a4:3d:22:13:64:26:08:31:54:
8f:f2:bf:75:39:ae:0b:43:17:6c:51:63:e2:d9:a5:ee:0a:44:
26:4d:b6:7a:0e:82:16:83:ba:bf:67:f8:c0:f4:bb:77:a0:f2:
5e:23:70:59:16:41:0a:5a:40:58:72:99:33:73:d9:46:ba:dc:
71:c8:f5:8c:e3:84:df:78:d1:20:ff:fe:0e:d9:87:60:4a:2b:
19:b9:42:69:f1:82:b9:69:66:f8:32:97:b0:0b:d4:8b:28:6e:
a9:e7:66:40:91:62:6e:cd:57:8b:e7:d3:c4:c1:6a:50:61:5e:
d2:53:94:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHArGPx+uXQOmIDcqNL63dmMU1I0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUyRTFGRDNCMzREMkQ5NEM4Mzk4MDUyOEI2MEIxMURG
Qjg1NEI1NzAeFw0yNTA5MjEyMjM4MDdaFw0yNjA5MjAyMjQzMDdaMDMxMTAvBgNV
BAMTKDZFMkFDNUE4NkE0M0RCMTQxNEYwNzlCNzdGRURFQzA5RDVBOEVGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb0XlrdbDfuS/UAknM+CBs3aBY
CXASzBhrdILHuRRmT79KSt4QkkunC/3XzZx3kbNYnnlVBo3z/Yevfvui3M0hLF6m
lLXqTLURprubnVsMhzWts4+EOEeKhwTP0F1yQpMKzNyvG20UrY31jIBGzYZ+sHMX
GIcAlKxNVAq8RlIJkWgYBsxFJrpVcrVJ9wrspaVyx8KUeeueLCmFt5Gy0cQthNH8
dJ2j/8WNka/U9fOfLljXw6/2XLqYSw9pyW/EdqPPiOOB3Bx/kZdpGq12IGQFqvKm
e5aPhsqgrD0Nfa4sHB/Zi+FtWVC4Hfj7jxdtwm8aJddJyDJ7XKrl5GejVUZjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbirFqGpD2xQU8Hm3f+3sCdWo77cwHwYDVR0j
BBgwFoAUBS4f07NNLZTIOYBSi2CxHfuFS1cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YQXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5V
LzAvMDUyRTFGRDNCMzREMkQ5NEM4Mzk4MDUyOEI2MEIxMURGQjg1NEI1Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wNTJFMUZEM0IzNEQyRDk0Qzgz
OTgwNTI4QjYwQjExREZCODU0QjU3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
QXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5VLzAvMzIz
ODMwMzQzYTM3Mzc2MzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3MzEz
MjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBHfMMA0GCSqGSIb3DQEBCwUAA4IBAQCEf74Lfhy6
QXMZk1oAmN6eW0iJngDeN0Tx8cLWNmc5bXZJe4WVP+Skv/TlnIdOmADteh7y+2JJ
D5I1Epl4ylBW45FxzT8xGisPvDLaV9uqWXKo1f5mCsBatko8MVWQNH6k9z5OZqhM
CM/ZWFp+1UDEdjlxwa+qWkK/eeZMRzCheZ5Zxx7ksySkPSITZCYIMVSP8r91Oa4L
QxdsUWPi2aXuCkQmTbZ6DoIWg7q/Z/jA9Lt3oPJeI3BZFkEKWkBYcpkzc9lGutxx
yPWM44TfeNEg//4O2YdgSisZuUJp8YK5aWb4MpewC9SLKG6p52ZAkWJuzVeL59PE
wWpQYV7SU5Qh
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:58 2025 by rpki-client