Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
File: 323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (raw, json)
Hash identifier: Sul6Ubc90jWOvTXxX2UnsBlfg/RY4jycpSaU/dFJvb4=
Subject key identifier: 9D:35:A7:5E:3C:B5:BB:C2:CE:DE:95:0B:01:3D:46:BE:03:B9:8C:69
Certificate issuer: /CN=DBFB5B14FE52FD99D231D815C08ABF45E15373D0
Certificate serial: 29F4723D31E45537BB4E2FB379ED98098647DE21
Authority key identifier: DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
Signing time: Tue 30 Jun 2026 13:34:10 +0000
ROA not before: Tue 30 Jun 2026 13:29:10 +0000
ROA not after: Tue 29 Jun 2027 13:34:10 +0000
asID: 267048
IP address blocks: 2804:475c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f4:72:3d:31:e4:55:37:bb:4e:2f:b3:79:ed:98:09:86:47:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBFB5B14FE52FD99D231D815C08ABF45E15373D0
Validity
Not Before: Jun 30 13:29:10 2026 GMT
Not After : Jun 29 13:34:10 2027 GMT
Subject: CN=9D35A75E3CB5BBC2CEDE950B013D46BE03B98C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:8e:4b:13:40:66:66:9f:72:26:e7:ca:45:
96:bb:50:0a:b2:e3:1b:0e:77:9b:b1:6d:b9:22:59:
9d:82:d6:30:0d:79:07:38:a1:d1:e5:87:d3:dd:28:
00:d8:73:dc:cc:0b:4c:b7:8c:09:17:bd:f8:8a:d1:
08:3b:21:54:ea:d2:ab:ee:be:1f:fd:c1:11:d9:89:
77:76:58:9c:9c:c3:ef:72:42:21:8c:0e:90:1e:0c:
9a:0d:83:be:cc:c6:b8:bd:9d:15:5b:f7:41:be:e2:
fe:1d:3b:34:ac:5d:75:1a:1a:7d:3c:20:33:28:cd:
a1:c2:02:98:67:e5:52:61:51:50:ef:1c:be:9a:76:
13:51:02:e6:30:55:96:43:ef:4a:75:d1:78:6d:ec:
76:b8:c4:48:38:1e:b7:38:66:be:6c:30:a3:56:8e:
f1:04:72:2c:8d:48:d1:13:12:7b:be:21:4c:51:a0:
8b:94:51:f2:3e:e6:4f:1a:0c:49:d0:5f:51:db:3d:
72:d7:ff:0d:b6:bf:c6:6a:bf:b5:42:44:fe:4d:0e:
43:f4:d1:c6:a0:66:30:d9:b5:8a:83:18:ca:7e:1a:
15:a7:9a:3c:b7:57:d4:fd:6b:28:73:7f:7c:40:c8:
b1:c6:9c:a0:c0:19:3e:a0:35:af:4d:7c:d2:38:0c:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:A7:5E:3C:B5:BB:C2:CE:DE:95:0B:01:3D:46:BE:03:B9:8C:69
X509v3 Authority Key Identifier:
keyid:DB:FB:5B:14:FE:52:FD:99:D2:31:D8:15:C0:8A:BF:45:E1:53:73:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBFB5B14FE52FD99D231D815C08ABF45E15373D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/323830343a343735633a3a2f33322d313238203d3e20323637303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:475c::/32
Signature Algorithm: sha256WithRSAEncryption
b1:50:5e:b4:7e:93:c5:30:e1:0d:23:18:53:93:42:28:8a:13:
b2:95:a1:64:f1:59:11:5a:99:c7:1b:82:4b:c2:aa:b6:15:8a:
13:fc:78:75:32:8d:e9:b3:08:6e:c7:a6:c3:0e:0b:69:85:d8:
29:d0:2d:a2:e2:d6:3d:ff:0d:ec:c9:ff:63:86:23:8f:ea:d2:
33:66:fb:2e:9f:3d:ee:4a:7e:4e:4c:b3:7d:c2:8c:05:cb:17:
0d:f3:0a:5c:cc:0a:5f:74:19:00:2e:95:49:43:86:06:cb:27:
9a:a7:55:3a:ff:dc:42:aa:df:dc:b8:12:5d:6b:51:12:e7:8f:
58:76:36:b1:f2:d5:87:c7:79:1f:5f:65:5e:78:fa:d4:6d:5f:
e6:97:56:21:f5:5c:f1:36:24:0a:0b:97:cf:37:37:6a:8f:b0:
97:6f:25:aa:29:30:21:17:5a:af:09:ac:87:13:ef:e4:d5:af:
f1:5a:10:b2:b0:6e:ff:e8:1b:85:10:4a:c9:bb:05:ae:21:2d:
33:71:7f:80:66:6e:e4:e6:f5:e1:6d:6c:a7:97:28:cf:fa:f1:
9b:6f:7c:22:86:96:86:d7:ad:bd:62:66:6f:a2:b9:ca:a5:44:
08:4a:30:22:24:d4:85:b9:27:d0:10:dc:0e:16:7f:db:86:4b:
55:76:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:10 2026 by rpki-client