Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa
File: 3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa (raw, json)
Hash identifier: 9y/NSqUtiTtJbxMaabMIbfkLQKzUPsVg6EGi3zifqrg=
Subject key identifier: 65:2D:C9:95:A0:1C:C2:2B:FE:C3:F6:4E:2F:B7:BA:9E:53:7D:B2:41
Certificate issuer: /CN=7B06178DA5AF99E7C93038A0510D55AD498F6300
Certificate serial: 282FB42D7AFA1E8800BA195937FBE91EC1BE2829
Authority key identifier: 7B:06:17:8D:A5:AF:99:E7:C9:30:38:A0:51:0D:55:AD:49:8F:63:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B06178DA5AF99E7C93038A0510D55AD498F6300.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa
Signing time: Tue 28 Jul 2026 17:00:28 +0000
ROA not before: Tue 28 Jul 2026 16:55:28 +0000
ROA not after: Tue 27 Jul 2027 17:00:28 +0000
asID: 270271
IP address blocks: 200.124.64.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2f:b4:2d:7a:fa:1e:88:00:ba:19:59:37:fb:e9:1e:c1:be:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B06178DA5AF99E7C93038A0510D55AD498F6300
Validity
Not Before: Jul 28 16:55:28 2026 GMT
Not After : Jul 27 17:00:28 2027 GMT
Subject: CN=652DC995A01CC22BFEC3F64E2FB7BA9E537DB241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:9b:ad:53:19:f0:4b:8b:51:95:09:82:c5:
d3:eb:f3:81:23:ce:ea:f7:04:60:f9:d2:da:67:bd:
0e:42:62:7e:a2:9e:5b:ac:84:f4:f9:ce:f6:50:a5:
90:c3:80:5a:c7:ee:0d:88:6d:10:d1:c6:b3:80:92:
de:34:50:45:7c:a0:b2:73:53:51:bb:22:a5:2c:8b:
df:79:75:c4:e4:92:bb:f8:ef:04:6f:85:74:ff:75:
97:25:0a:ad:d0:e2:d2:0c:81:5b:53:6a:bf:15:64:
ac:a1:14:df:0d:e9:20:b9:65:ba:a7:29:01:b3:f9:
f0:79:ec:35:c1:a9:e7:35:85:f2:ce:cb:6c:a3:0e:
5c:aa:74:a8:42:c2:70:56:21:23:34:5c:b1:1d:60:
16:d1:09:44:26:c7:8e:28:29:8e:18:fb:8f:3b:a6:
11:53:96:4d:8b:ed:b8:4e:e4:64:b9:6f:18:17:08:
73:c0:d4:54:67:7c:2d:4e:23:5f:15:d6:aa:d1:b3:
27:74:4c:2c:30:3d:53:fe:27:54:ed:e9:74:d1:0f:
4a:6b:e3:2e:84:a6:d6:d8:19:93:7b:9a:be:c3:09:
28:5b:f6:fd:2c:a6:6a:f8:ac:df:58:70:ed:5f:91:
31:70:ea:14:31:d4:46:68:28:ed:13:e0:c7:a6:e3:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:C9:95:A0:1C:C2:2B:FE:C3:F6:4E:2F:B7:BA:9E:53:7D:B2:41
X509v3 Authority Key Identifier:
keyid:7B:06:17:8D:A5:AF:99:E7:C9:30:38:A0:51:0D:55:AD:49:8F:63:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/7B06178DA5AF99E7C93038A0510D55AD498F6300.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B06178DA5AF99E7C93038A0510D55AD498F6300.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2i3pNdkQrPYH4cT4Vpn46Yvpaz4tsbhdQ6ozruAFNQxq/0/3230302e3132342e36342e302f32322d3234203d3e20323730323731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.64.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d7:a5:0c:05:45:68:69:3a:52:1a:b5:95:96:47:e6:86:78:
c8:84:7d:0b:b1:d2:f4:06:e1:39:c4:74:a1:31:73:0e:72:fc:
49:63:6c:da:dd:10:8f:bd:4f:bc:05:c1:79:df:4f:7c:a1:6e:
af:d5:c1:91:ac:5d:fc:1a:a8:b9:56:c8:9c:71:86:d6:93:6e:
78:d2:6c:03:1e:fa:95:78:bd:33:9f:2b:af:15:7d:88:31:ed:
b1:74:e2:c8:3a:74:61:8c:cf:e8:48:82:76:e3:3f:d7:8b:d8:
31:1a:1e:de:ca:a5:d1:ec:ed:eb:c8:e4:f6:d3:18:2f:33:df:
92:93:ba:ee:80:bb:46:a3:11:7e:84:05:bb:12:29:50:33:1b:
66:5e:e3:60:90:c4:6d:b2:59:98:e0:55:b9:b8:61:0a:8b:54:
11:9b:6c:f2:64:2a:b1:1f:c6:5e:c3:46:6d:5b:15:53:eb:49:
96:a8:f2:52:5e:4a:42:92:72:4f:3b:6e:e5:30:f2:f0:54:f4:
ef:69:b1:14:88:67:6a:64:8e:42:d6:f7:2c:f0:16:bc:bd:41:
68:d8:7a:d9:f3:77:c9:99:74:b7:cb:30:ee:2c:80:93:b9:d2:
10:60:c3:ce:7e:d1:12:9f:3f:18:b3:b8:b0:eb:24:b5:10:1f:
5a:5c:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:25:20 2026 by rpki-client