Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
File: 323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (raw, json)
Hash identifier: JhFgb7ImoIpAkSVfajrl4hHn0pf00C7rjEQlFGfpIwE=
Subject key identifier: 56:A0:8B:DB:9E:1E:EA:3C:03:43:3D:13:04:03:3D:20:E1:6A:61:EF
Certificate issuer: /CN=6D33F51873A4A7C93A27E270462259C9A2B02C59
Certificate serial: 07707C69FBD0755131C6546D090087385A7A87EF
Authority key identifier: 6D:33:F5:18:73:A4:A7:C9:3A:27:E2:70:46:22:59:C9:A2:B0:2C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D33F51873A4A7C93A27E270462259C9A2B02C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
Signing time: Wed 08 Jul 2026 18:41:33 +0000
ROA not before: Wed 08 Jul 2026 18:36:33 +0000
ROA not after: Wed 07 Jul 2027 18:41:33 +0000
asID: 273459
IP address blocks: 2804:8ef8::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:70:7c:69:fb:d0:75:51:31:c6:54:6d:09:00:87:38:5a:7a:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D33F51873A4A7C93A27E270462259C9A2B02C59
Validity
Not Before: Jul 8 18:36:33 2026 GMT
Not After : Jul 7 18:41:33 2027 GMT
Subject: CN=56A08BDB9E1EEA3C03433D1304033D20E16A61EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:50:16:96:7b:fe:e6:34:45:2c:82:50:70:
1d:4c:77:5a:f3:d2:36:1c:20:52:68:e9:19:48:11:
fe:7f:5a:30:b4:1a:bc:4b:71:8c:6d:c4:fb:d4:48:
f1:1c:78:42:83:3e:0b:83:cb:ae:64:85:33:cd:0a:
40:e2:f6:2b:db:c1:fb:23:7f:bf:94:42:00:1c:87:
b1:30:90:fb:cd:6b:f2:ab:d7:43:c5:85:58:87:4e:
6b:6e:bc:19:65:6b:3f:dd:05:db:c4:84:85:80:9a:
e2:13:72:06:eb:fd:b4:4e:5d:37:b0:e1:43:4d:cd:
e9:3e:35:ad:e2:4a:a1:2d:a9:cd:69:0d:69:fc:92:
6c:28:98:76:41:1e:e3:71:59:ae:16:03:fe:1b:b2:
33:f6:c5:67:5c:94:fe:60:e4:a5:ed:2f:5e:14:84:
ac:4c:cf:1d:53:41:fa:ec:f7:8f:86:0f:ac:7d:9a:
ba:77:42:40:db:28:36:81:39:ee:a0:2d:c4:aa:80:
ac:96:63:4d:46:f6:6a:81:27:12:44:ff:be:c2:9d:
d4:3d:33:83:23:cc:a9:93:61:10:6d:18:61:39:a1:
2b:ee:7a:18:94:b9:ab:a3:51:1a:3f:e8:89:43:1f:
ed:83:c7:d8:d3:71:d2:b6:00:04:de:df:28:a3:b1:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:8B:DB:9E:1E:EA:3C:03:43:3D:13:04:03:3D:20:E1:6A:61:EF
X509v3 Authority Key Identifier:
keyid:6D:33:F5:18:73:A4:A7:C9:3A:27:E2:70:46:22:59:C9:A2:B0:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/6D33F51873A4A7C93A27E270462259C9A2B02C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D33F51873A4A7C93A27E270462259C9A2B02C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ef8::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8e:25:3a:c1:0a:a8:75:40:fe:ae:db:69:a7:23:c5:a4:fd:
e1:60:11:7c:c8:21:dd:c4:4a:b2:58:70:c5:cf:4e:18:25:4f:
83:10:37:71:fb:18:c1:9d:42:4f:f2:c0:0f:06:1a:27:88:8b:
40:f7:47:48:25:e5:40:8e:7b:54:fc:31:3d:97:c4:e7:44:8c:
19:cf:4a:6e:1f:bc:1a:c7:bc:c1:cf:0f:7e:19:db:75:b1:e1:
82:e9:dc:c4:1d:63:00:e8:b9:25:4a:cb:88:f3:03:f1:4b:49:
a9:c7:36:f0:0b:93:90:4e:f0:ad:98:b1:37:55:a1:ad:7f:99:
2f:53:66:1d:2c:f1:3e:58:ea:09:48:d2:bf:9e:5c:dc:07:8b:
62:7f:36:fe:ca:7e:24:2a:18:63:74:ca:36:38:35:eb:5f:e2:
19:67:1d:d5:9f:bb:38:73:da:37:13:6a:ae:6c:2c:5d:81:57:
69:67:7c:47:bf:16:bc:ee:a4:64:cc:f5:31:7c:04:50:d1:96:
0e:8e:82:a1:18:0f:0b:3e:57:d3:2e:a5:ec:07:19:2e:6c:f1:
b8:e8:ab:22:d0:23:c1:db:df:f3:c1:d0:94:2d:c1:36:ee:1f:
54:95:6d:c3:c3:ff:33:7c:91:cd:2e:3a:ef:fa:ae:ee:49:ce:
8a:0c:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:35:19 2026 by rpki-client