Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
File: 323830343a316436383a3a2f33322d3438203d3e20323634333637.roa (raw, json)
Hash identifier: 44XpNmjnR96SJtAg/sxXGi1/9vbJyV/KlaJUDesQByg=
Subject key identifier: 86:9A:25:48:AA:8F:D4:6D:A4:9C:2F:AA:25:D3:D7:92:80:2F:06:0F
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 26DE7EBCBB302DCEBB0513C4F47CEDB59BA77AA3
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
Signing time: Fri 16 Jan 2026 02:01:55 +0000
ROA not before: Fri 16 Jan 2026 01:56:55 +0000
ROA not after: Fri 15 Jan 2027 02:01:55 +0000
asID: 264367
IP address blocks: 2804:1d68::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:de:7e:bc:bb:30:2d:ce:bb:05:13:c4:f4:7c:ed:b5:9b:a7:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 16 01:56:55 2026 GMT
Not After : Jan 15 02:01:55 2027 GMT
Subject: CN=869A2548AA8FD46DA49C2FAA25D3D792802F060F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:41:12:92:a5:39:dc:0e:8a:81:03:60:54:
23:0e:4f:41:6b:57:6b:97:ab:98:a4:be:d0:1d:0b:
bf:0b:ab:06:95:bb:63:5b:d4:4f:b0:c3:4f:16:1f:
44:2b:e1:ef:6a:f5:a5:2c:1d:93:7d:ad:e9:81:ac:
39:ae:89:1f:6e:0f:30:6c:57:cf:8d:32:33:eb:26:
ad:39:76:6e:b5:ef:13:55:c8:b0:60:90:9a:1c:69:
8e:f5:03:cd:ea:1d:6f:fc:f2:c4:7e:88:d0:7d:e5:
b4:4c:b3:84:fd:f3:c9:54:b3:67:6d:7a:e1:8a:da:
b1:3b:ff:3b:19:81:25:a9:b0:af:79:56:73:96:75:
de:cd:62:73:f8:7d:10:7e:b2:30:93:fa:7b:1f:5b:
4b:5f:95:71:8d:56:30:b9:44:44:c7:13:36:a4:84:
a4:e6:d2:8c:0c:d0:19:d4:ba:77:74:2b:b0:ee:d2:
4b:9d:59:47:b1:11:af:74:a2:47:8c:29:ad:49:b8:
a2:f1:20:31:18:3e:1d:f5:78:a8:0a:0f:97:7a:77:
66:5c:85:09:51:c6:16:50:f2:b0:0e:de:f4:af:76:
99:ee:12:c2:0d:d4:a0:e5:ba:31:6e:6a:6e:e2:0b:
79:cf:a3:6b:4f:87:34:9e:f6:78:77:97:65:30:da:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:25:48:AA:8F:D4:6D:A4:9C:2F:AA:25:D3:D7:92:80:2F:06:0F
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a316436383a3a2f33322d3438203d3e20323634333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1d68::/32
Signature Algorithm: sha256WithRSAEncryption
56:f8:0c:31:1e:52:4b:fb:82:e8:7b:db:ca:48:b9:bf:b4:d2:
dd:50:09:12:a1:f8:58:50:f1:95:4e:d2:83:92:0b:86:c4:31:
23:91:1c:cd:9c:8d:38:d3:ec:31:36:30:6a:c1:1b:17:99:15:
88:98:6c:8f:2b:e3:06:d5:c7:7d:49:05:3b:cd:e9:7c:b0:da:
af:17:ad:c8:a2:49:17:1d:5d:30:40:fc:01:6b:2c:51:33:bc:
b0:aa:be:36:88:ff:96:bb:02:a5:83:11:87:e0:d2:e0:18:4a:
f7:d6:23:a5:e7:8b:c1:e7:b2:43:b6:88:ed:3d:6c:e0:ed:31:
76:31:4a:af:5c:56:51:08:b4:a5:8b:76:5d:97:30:b3:df:c2:
57:5a:b9:93:3b:b2:cf:33:05:89:06:c5:d6:a2:62:22:08:cc:
3f:32:fb:7f:9c:4c:19:d4:eb:ee:ce:a0:52:2b:fc:52:d3:45:
de:d2:f1:a0:5b:3c:ec:e7:1b:69:30:2d:f2:da:2f:22:09:99:
d8:d5:83:64:36:81:15:83:2a:a9:70:50:6b:8e:04:6c:22:bf:
08:01:53:52:be:77:11:a4:dd:35:b2:9c:18:35:0e:13:c6:94:
b8:92:40:93:ac:23:e8:dd:44:a0:39:02:0f:32:65:36:67:1e:
f2:71:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:20 2026 by rpki-client