Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa
File: 3134332e3230382e362e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier: IMJ8DY6Q1HgYZ4DERnLwIe4NUsQge9l91NQAmpsJhHw=
Subject key identifier: 60:EE:A1:20:6D:A3:CB:63:82:10:99:6E:1E:09:A1:B6:9F:A7:EF:12
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 141DEE5D89C4E37F15C43A30A5F300F74C3336AE
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa
Signing time: Tue 22 Sep 2026 17:12:03 +0000
ROA not before: Tue 22 Sep 2026 17:07:03 +0000
ROA not after: Tue 21 Sep 2027 17:12:03 +0000
asID: 264088
IP address blocks: 143.208.6.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1d:ee:5d:89:c4:e3:7f:15:c4:3a:30:a5:f3:00:f7:4c:33:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:03 2026 GMT
Not After : Sep 21 17:12:03 2027 GMT
Subject: CN=60EEA1206DA3CB638210996E1E09A1B69FA7EF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:88:46:df:3f:d2:ad:f0:de:e4:aa:3e:20:
b6:8b:94:dd:59:a1:07:fb:eb:53:44:3a:21:22:7a:
78:c1:62:a3:6b:d7:49:bd:92:a2:6a:8b:4f:ed:63:
85:c0:c4:12:60:46:14:06:4b:92:53:0e:b0:3d:26:
07:28:9b:a5:e4:5c:43:34:91:de:2d:3d:5a:42:24:
7f:c5:5f:17:17:99:68:86:a2:71:f8:1b:49:bd:e7:
02:65:f1:94:00:fa:68:1c:17:f6:36:60:b3:bb:5d:
12:db:b5:10:17:51:65:f6:33:01:23:01:0f:98:bc:
9d:26:e2:a1:b4:3f:81:1d:30:42:2e:bc:cf:4d:77:
00:c1:68:be:95:11:ab:fc:0d:5c:12:8b:eb:74:d9:
41:db:3b:e9:5d:00:a7:a4:c1:62:e2:0e:e7:0e:d6:
b5:32:82:1d:3a:8c:8d:94:d3:a8:7d:03:e8:39:96:
fe:b9:d3:b7:b9:cf:32:5c:44:2d:61:ab:a3:2a:c1:
f2:f9:50:9f:9d:e6:5e:56:11:d8:7c:7c:f5:1a:29:
cc:71:b2:52:83:7e:9f:42:d6:a3:17:6a:61:7f:99:
24:82:fc:24:36:b7:ca:e5:87:a0:71:e1:43:29:a3:
39:8e:a8:02:0b:b9:c4:2c:16:84:ad:9a:59:db:93:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:A1:20:6D:A3:CB:63:82:10:99:6E:1E:09:A1:B6:9F:A7:EF:12
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32342d3234203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:14:8a:50:c1:10:ec:1b:dc:a0:0e:a0:11:9a:2e:f5:08:b8:
f0:be:78:92:32:ba:f4:f4:29:1e:e8:67:dd:38:22:43:ee:48:
97:d7:3f:86:eb:c9:9a:f8:f3:9d:75:fa:f7:0d:65:2a:2b:8d:
6e:96:04:45:e4:83:de:ef:fe:ab:a0:3e:ad:b1:bf:93:67:f8:
3a:6d:71:b2:2d:00:40:70:f2:e7:45:06:55:68:1b:00:57:bb:
52:82:ed:74:ac:4e:03:00:e6:cd:77:fd:99:0c:93:10:bd:cf:
d5:61:32:fe:9c:47:0d:51:68:55:74:4f:e5:f2:9c:d0:25:ab:
74:10:71:2d:b5:87:bb:6d:9e:ed:47:09:1f:6d:04:3f:05:e5:
11:dd:ea:14:7d:5b:cc:32:76:d2:59:20:60:0b:7b:50:44:bd:
24:f6:97:d3:af:2f:09:d4:14:0c:9c:f2:18:b8:92:f2:9f:7f:
9e:20:38:fc:2e:b0:6e:70:2f:59:4d:53:3e:55:5f:76:e4:ff:
c3:4a:69:f5:65:8b:8f:b1:00:1d:9e:b2:f8:07:60:26:b7:07:
c3:34:44:00:66:1b:1b:f2:82:c3:47:ce:b0:c4:6d:56:73:a4:
27:cd:02:f2:60:b2:78:78:e4:a8:1d:5e:61:6f:58:4a:d8:d5:
be:ad:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:03:57 2026 by rpki-client