Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa
File: 323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier: n1xQ09nyKWFR3doCDdf6KB4naI8UPKaJt4xZpwQc9Y0=
Subject key identifier: 8F:87:A2:5C:AC:77:50:88:CA:09:52:39:E6:F3:3E:D7:CA:66:DE:6D
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 62E5ABF701DF192A4BF318C691E751F9FFB0D955
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:59 +0000
ROA not before: Tue 22 Sep 2026 17:06:59 +0000
ROA not after: Tue 21 Sep 2027 17:11:59 +0000
asID: 52721
IP address blocks: 2804:2664:c000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e5:ab:f7:01:df:19:2a:4b:f3:18:c6:91:e7:51:f9:ff:b0:d9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:59 2026 GMT
Not After : Sep 21 17:11:59 2027 GMT
Subject: CN=8F87A25CAC775088CA095239E6F33ED7CA66DE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:19:a5:de:c7:ca:2b:d4:b5:58:73:2e:0e:
f0:96:2f:b2:ee:30:22:14:77:55:a4:e9:94:b1:cf:
4b:43:4a:53:02:9d:bd:4d:2d:69:ab:fa:ed:ec:97:
01:37:17:e9:d6:6d:09:f5:17:b6:48:78:2b:c2:f9:
d7:17:39:cf:ab:95:81:ba:a2:55:36:37:42:36:b2:
c3:4b:61:89:3a:bb:1b:75:bd:89:c5:74:60:10:0d:
e1:35:45:cc:60:d5:15:e5:e9:b4:0a:22:b3:13:2a:
3a:3c:27:f9:98:e7:68:f0:b9:87:06:15:16:76:e9:
ba:ab:a0:91:10:b3:a2:ee:ce:66:87:2e:45:23:47:
a1:0c:e6:80:fa:b9:86:ac:08:82:3b:8f:e5:2f:df:
fc:75:7f:42:03:b6:48:01:02:b6:bb:10:c5:bb:d9:
89:15:8c:d2:64:13:11:bd:2c:ce:39:e6:b6:11:a2:
7a:f0:77:57:7f:f9:40:72:ef:94:c0:44:c4:5d:4e:
e0:c0:8e:0b:09:c5:87:b7:92:e2:c5:05:7e:f4:23:
c0:ea:62:e3:4c:2d:96:e5:fe:68:94:cf:10:b2:fe:
12:f1:bc:61:2d:6b:6f:76:a1:75:08:4b:41:c4:4d:
da:4b:7b:1a:ec:e8:b1:a0:4d:3d:95:c6:08:be:4b:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:87:A2:5C:AC:77:50:88:CA:09:52:39:E6:F3:3E:D7:CA:66:DE:6D
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664:c000::/34
Signature Algorithm: sha256WithRSAEncryption
6c:58:9d:77:05:e2:75:0f:5e:40:ad:9b:b0:a0:38:4d:2c:dd:
ee:34:dd:6e:50:85:4a:dc:53:44:a8:37:73:34:72:00:7e:80:
65:17:d0:36:46:f0:05:64:11:d2:d3:ea:ff:20:91:96:10:b4:
60:38:18:7d:4a:d7:39:e5:26:74:34:f4:ae:49:50:12:a5:4c:
06:36:51:d5:21:ff:c2:27:d1:47:09:42:42:3d:7e:78:d6:0a:
80:8a:25:02:b0:31:d9:c0:8d:1a:c0:af:13:60:6f:6d:10:82:
fe:c7:1b:d3:6d:8d:3b:c9:53:78:24:00:10:c3:21:ce:53:b0:
55:63:82:5f:97:f8:10:4d:9c:a6:79:07:9c:1f:8e:89:e1:fb:
cf:b2:4c:44:85:b1:1a:85:a3:62:50:5b:44:59:ab:8b:8d:c1:
ec:f0:c4:8c:fe:1e:e4:69:9a:64:02:a6:86:81:a2:5d:e6:e9:
88:86:51:3f:1b:53:d8:c2:49:b6:75:92:6e:bf:92:27:06:58:
89:86:aa:51:c3:a2:2e:14:8d:7f:c9:f7:97:b7:8f:30:ce:a3:
c5:2b:d0:39:0e:79:53:c4:f5:e4:dc:97:77:f9:64:1b:12:1b:
53:b2:32:80:0c:57:3f:73:4d:c4:a5:a0:5b:ee:22:a9:c0:5a:
91:03:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:34:50 2026 by rpki-client