Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a6532383a3231303a3a2f34342d3434203d3e20323732313537.roa
File: 323830343a6532383a3231303a3a2f34342d3434203d3e20323732313537.roa (raw, json)
Hash identifier: G67dcSwiWEPPVhnqpKVjntPvXl762FArC150rDutiP0=
Subject key identifier: 02:1D:96:F6:CC:02:BD:57:D5:90:C3:E5:3F:F9:F5:91:67:2C:25:AC
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 6A783678C40EE88BF828C4B8A3CC21E8E41D6594
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a6532383a3231303a3a2f34342d3434203d3e20323732313537.roa
Signing time: Mon 19 Jan 2026 17:48:31 +0000
ROA not before: Mon 19 Jan 2026 17:43:31 +0000
ROA not after: Mon 18 Jan 2027 17:48:31 +0000
asID: 272157
IP address blocks: 2804:e28:210::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:78:36:78:c4:0e:e8:8b:f8:28:c4:b8:a3:cc:21:e8:e4:1d:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 19 17:43:31 2026 GMT
Not After : Jan 18 17:48:31 2027 GMT
Subject: CN=021D96F6CC02BD57D590C3E53FF9F591672C25AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:d9:72:3e:6e:73:a7:e0:fe:5a:aa:d2:f4:
0c:1d:c3:df:88:b9:ea:85:cb:85:1c:04:c1:ab:5f:
e4:99:21:6e:3f:62:87:65:29:57:52:c3:5e:06:9b:
78:59:42:83:bd:63:d6:8f:1a:f5:73:76:3e:d6:e1:
b1:50:0f:b4:af:e9:3c:bd:ca:25:b2:f3:0f:90:58:
d9:81:f9:b3:df:62:8a:c4:1e:16:07:8e:c2:33:75:
cb:6e:c8:c0:73:dc:2b:e4:eb:44:6e:6e:9d:cc:72:
77:63:57:b3:9d:9d:25:6b:ba:6c:b0:a3:be:83:48:
c1:53:ae:3a:e0:bb:2d:b8:15:23:03:a8:e3:06:03:
b2:5d:54:55:23:22:50:c6:96:7c:af:a3:9a:a2:8f:
b4:3e:db:36:3f:56:40:f8:88:6b:4a:a2:da:59:e1:
4a:49:fa:a6:db:6f:53:8b:c3:b8:d2:10:a1:b6:f6:
a8:b7:03:7e:80:c9:f2:f1:e5:31:b9:9b:9e:b3:84:
1e:66:da:37:26:97:79:d3:d1:6b:24:63:9d:2b:06:
ba:3e:11:2d:ed:94:3d:c0:87:1b:1b:54:b1:fe:81:
c9:b1:a8:35:d0:67:74:5f:26:55:07:1b:87:f4:cf:
70:a8:85:82:7b:42:86:e6:3e:d3:b5:b8:82:a8:e6:
3e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:96:F6:CC:02:BD:57:D5:90:C3:E5:3F:F9:F5:91:67:2C:25:AC
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a6532383a3231303a3a2f34342d3434203d3e20323732313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e28:210::/44
Signature Algorithm: sha256WithRSAEncryption
51:22:05:0a:81:57:e3:a1:26:ae:d6:bd:d4:76:5c:5a:5d:8c:
c9:7a:17:e6:bf:31:e4:a4:49:39:d9:55:93:6f:49:94:ea:0d:
cd:40:c0:88:2b:ed:d2:47:00:be:7b:58:09:44:0e:47:de:b3:
fe:06:e0:2a:0f:f8:6a:49:21:95:24:97:67:b9:54:33:92:00:
4a:f0:97:3f:5e:83:51:e3:ea:10:34:b8:26:fd:44:ec:f5:8b:
17:6a:34:b2:c0:0c:09:64:60:0d:01:21:e7:66:2c:23:d0:b6:
53:5e:e0:70:a8:ef:bf:65:16:73:13:7c:49:28:23:81:72:5c:
88:b1:df:6c:60:1d:ff:48:64:4e:94:e5:34:39:b0:d7:c0:e0:
4e:2b:fc:85:6c:2b:dd:ff:57:1e:16:f1:65:d9:88:05:b4:d5:
92:a9:6f:53:a6:0c:82:ce:43:0f:97:14:4c:38:e8:ce:12:e7:
13:41:01:b9:4a:ed:de:67:04:b2:45:40:0e:cc:2c:6e:8c:17:
75:3e:e0:de:11:df:b6:2f:3d:82:7f:13:c8:ff:d1:c2:b7:ba:
90:fa:81:16:11:6e:9f:a3:ef:8e:84:8a:4d:bb:e5:c9:d5:f4:
e5:7c:90:1a:54:bf:ff:a6:be:a8:8a:30:2e:e6:e2:7c:67:d4:
51:cd:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:19:52 2026 by rpki-client