Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3334203d3e20323732373234.roa
File: 323830343a383761383a3a2f33322d3334203d3e20323732373234.roa (raw, json)
Hash identifier: qrMfEHo3kth+XzhpxPWzSc0v7zpyllQBgczBBI1WYcQ=
Subject key identifier: 0C:4F:1F:98:23:13:6E:AE:80:6A:4B:7D:20:3B:EC:38:27:6B:F0:EA
Certificate issuer: /CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
Certificate serial: 6F96C6197331EDC8213A4982B14EED01C3EB6EE6
Authority key identifier: DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3334203d3e20323732373234.roa
Signing time: Mon 20 Oct 2025 17:47:20 +0000
ROA not before: Mon 20 Oct 2025 17:42:20 +0000
ROA not after: Mon 19 Oct 2026 17:47:20 +0000
asID: 272724
IP address blocks: 2804:87a8::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:96:c6:19:73:31:ed:c8:21:3a:49:82:b1:4e:ed:01:c3:eb:6e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5
Validity
Not Before: Oct 20 17:42:20 2025 GMT
Not After : Oct 19 17:47:20 2026 GMT
Subject: CN=0C4F1F9823136EAE806A4B7D203BEC38276BF0EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:d5:55:e9:31:ac:79:cf:aa:4c:85:55:92:
55:5d:82:7a:dd:68:fd:8b:52:9a:a2:fc:a5:90:45:
b5:3a:53:79:ad:f1:5f:62:dd:4d:d5:37:83:2e:6c:
96:97:89:b5:4d:b2:48:ba:4c:72:e2:92:c1:6f:b8:
5e:21:cc:fa:bf:4a:29:66:16:92:a2:e0:0c:d2:bb:
1c:57:b6:c3:45:f9:69:27:4a:8f:05:45:b2:67:f9:
e3:89:ef:68:c8:e8:3d:c7:4b:8b:1d:45:6a:7c:19:
8d:94:99:4f:6a:24:4d:95:d3:44:77:9c:8f:7c:4a:
68:0f:98:c2:97:db:c3:f7:c0:fd:ca:73:bd:e6:41:
f0:05:42:cf:d0:a5:e7:cd:d7:3a:ae:72:1c:27:1f:
4f:1a:aa:90:19:6f:aa:8f:84:02:de:2e:fe:1f:cb:
c3:18:85:3f:78:03:c4:2c:58:17:de:71:14:e0:11:
96:4e:2b:19:e5:1f:49:8a:fb:ee:bb:5f:62:fa:4d:
2e:b9:81:7d:1f:92:70:bf:9b:dd:05:51:f4:08:e5:
c9:7d:6f:ae:21:6b:18:fa:05:6a:bd:15:ca:5b:a5:
a1:a3:0e:b1:6a:ca:9a:ea:eb:2f:31:0a:f9:80:6f:
52:05:dd:10:97:83:df:13:7f:f2:2e:07:07:aa:ad:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:1F:98:23:13:6E:AE:80:6A:4B:7D:20:3B:EC:38:27:6B:F0:EA
X509v3 Authority Key Identifier:
keyid:DB:1D:0A:6C:41:C0:67:48:85:89:E1:C9:7B:C4:0C:F6:F7:F7:C4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1D0A6C41C067488589E1C97BC40CF6F7F7C4C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/323830343a383761383a3a2f33322d3334203d3e20323732373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:87a8::/32
Signature Algorithm: sha256WithRSAEncryption
6b:ac:35:6b:32:ec:9f:b9:0c:9e:b7:20:3e:c3:62:5b:c8:bf:
66:7a:2e:c2:e4:0d:27:4e:b2:92:58:83:7e:f1:8d:ef:93:40:
13:89:69:92:6f:e8:4c:74:93:12:b8:22:2c:8b:b5:83:3c:4c:
88:51:c3:94:56:50:55:2d:5a:8f:50:fc:c8:92:c0:5d:a7:19:
a5:96:74:57:97:f8:83:54:cb:f9:bc:1a:ba:a3:93:d3:38:88:
ee:d3:5b:66:9d:6e:3f:db:c1:a8:1a:f7:0a:86:07:0d:ac:dc:
32:92:be:73:4d:0f:21:c2:bc:9a:36:ac:29:38:94:12:a6:59:
aa:f0:d8:37:d2:85:c5:b1:7e:5f:9e:f5:8c:58:82:49:c4:f1:
cf:aa:cc:e0:34:31:05:8e:2c:55:32:aa:b3:01:51:20:9b:7a:
e2:81:d2:72:7e:4f:66:cb:7e:54:99:d7:c3:fe:1d:be:da:10:
5e:25:1f:31:62:30:0f:91:44:bd:ac:de:6f:11:38:50:eb:11:
2e:9b:97:77:a5:e3:e8:79:a0:7d:0f:5b:2b:0d:77:e4:d2:47:
a7:ac:67:34:e3:11:c1:2d:a0:76:03:86:9b:bb:34:15:99:b4:
b3:8e:dd:49:55:ba:13:b1:43:82:51:ad:e5:ea:0e:7c:d8:fd:
39:22:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:43 2025 by rpki-client