Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa
File: 323830343a323636343a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier: xql+DVfG37vczeNNJpV/HBqbHoMk5vQKoO2rDEeLe8w=
Subject key identifier: 81:D8:38:9D:1E:B7:99:B0:6C:67:4E:27:C7:44:96:28:3D:D8:32:02
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 31780A4908797C69C43B431C62B6954FD488D578
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:57 +0000
ROA not before: Tue 22 Sep 2026 17:06:57 +0000
ROA not after: Tue 21 Sep 2027 17:11:57 +0000
asID: 52721
IP address blocks: 2804:2664::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:78:0a:49:08:79:7c:69:c4:3b:43:1c:62:b6:95:4f:d4:88:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:57 2026 GMT
Not After : Sep 21 17:11:57 2027 GMT
Subject: CN=81D8389D1EB799B06C674E27C74496283DD83202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:61:86:aa:e6:af:c1:51:b9:7e:e5:67:95:
e2:95:07:04:53:88:9d:31:97:87:b5:c8:c8:fc:84:
73:03:5a:40:e2:68:81:96:5c:4b:5d:e0:6d:79:99:
03:30:e2:55:88:d9:9d:4b:d1:23:55:fe:55:7f:ed:
97:14:94:23:03:4a:20:cc:41:d6:79:c0:48:94:e6:
0e:54:60:5b:4b:4b:b8:68:16:dc:f1:e3:0b:00:19:
83:e9:2f:7f:b1:87:9e:34:96:8d:49:75:eb:3a:a9:
cd:5c:90:5c:27:29:ad:97:79:89:23:48:89:f0:7b:
f1:fa:37:4a:eb:ff:9e:3c:bc:9e:6e:2f:d6:43:21:
86:53:fd:df:e7:6d:11:f0:8f:a4:94:8c:54:c7:5d:
f8:ac:de:ea:d7:13:bd:f2:29:17:9c:d0:03:be:34:
94:33:5e:d2:3b:66:bb:c8:a0:9a:c9:c9:db:4d:15:
4d:48:ac:78:e1:15:f4:73:4f:0c:9a:8f:27:aa:c5:
dc:ff:eb:e4:c2:0b:44:03:e0:93:2f:51:1f:d8:30:
37:ad:70:5b:cd:7c:5c:f4:50:30:b8:e1:41:33:c2:
ce:4f:d5:7c:c2:bd:ad:0f:dd:bd:c5:84:39:06:45:
0e:5d:4e:60:31:d7:e5:b1:dd:ed:a4:dd:d2:1f:5d:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:38:9D:1E:B7:99:B0:6C:67:4E:27:C7:44:96:28:3D:D8:32:02
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664::/34
Signature Algorithm: sha256WithRSAEncryption
61:bf:bd:4f:66:3d:5e:1d:03:93:41:2e:d7:be:f3:f2:01:d8:
87:bf:c6:b7:07:1b:7d:7d:6a:5b:73:18:2a:5a:92:87:b1:d6:
5d:4e:5a:23:f3:5b:4c:53:75:bc:00:2e:29:41:bc:47:80:23:
ec:41:9d:8d:a2:8e:05:6f:73:ef:18:94:57:9a:34:b0:3f:4f:
95:85:98:97:e2:1e:05:43:d4:22:2b:26:4f:78:5e:59:a7:7e:
17:15:c4:5d:78:ad:c0:1a:47:8c:dc:49:34:48:1b:6a:b8:b0:
d0:0a:2a:13:8e:b8:2d:4d:b7:fc:1a:43:11:25:f9:96:4d:4e:
91:2f:40:e9:fa:4c:67:61:93:26:a1:67:73:83:a9:69:66:32:
e2:f2:5c:81:60:58:a4:06:16:6c:5c:2c:62:a4:67:86:56:b4:
a4:cb:b3:48:04:93:7b:19:dc:45:6f:51:b4:4d:e1:96:f3:bb:
07:b3:da:ca:c5:91:97:4b:15:9d:62:09:13:20:04:06:67:64:
ee:23:4d:8a:fc:07:2e:28:de:79:5c:f8:21:69:86:e5:c0:23:
39:e3:a6:e7:13:af:7f:17:d9:bd:88:db:c1:8c:c4:4d:a7:dd:
3a:d4:c9:a3:03:76:6b:87:11:f3:53:8d:f1:0e:d7:e8:9b:18:
2e:dc:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:08:20 2026 by rpki-client