
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
File:                     323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (raw, json)
Hash identifier:          os3rfmcSAuW3L+vAi7U6eR6KB4U9HAdMdl6A8SYc4dM=
Subject key identifier:   64:30:21:34:97:A3:67:16:D7:46:08:B1:5E:E2:0A:54:E3:3C:C1:95
Certificate issuer:       /CN=9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55
Certificate serial:       28F52EAD1B4E4ACADC3EB70877900EF4D84ED900
Authority key identifier: 92:84:A1:CB:43:B0:0C:70:AA:1D:5B:65:BC:F7:59:0E:CB:2A:5F:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
Signing time:             Wed 29 Oct 2025 16:50:06 +0000
ROA not before:           Wed 29 Oct 2025 16:45:06 +0000
ROA not after:            Wed 28 Oct 2026 16:50:06 +0000
asID:                     271013
IP address blocks:        2804:74f0::/32 maxlen: 48
Validation:               Failed, CRL has expired
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:2e:ad:1b:4e:4a:ca:dc:3e:b7:08:77:90:0e:f4:d8:4e:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55
        Validity
            Not Before: Oct 29 16:45:06 2025 GMT
            Not After : Oct 28 16:50:06 2026 GMT
        Subject: CN=6430213497A36716D74608B15EE20A54E33CC195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:70:12:e0:f6:52:76:3f:8d:99:5d:37:a6:
                    c1:c9:44:99:e4:48:c0:16:8e:23:8f:d0:30:a8:a7:
                    a7:e5:07:60:64:33:46:1f:0b:28:cb:7e:b3:5d:9e:
                    cc:1e:a2:50:51:fa:30:48:e6:6f:02:c9:59:bb:66:
                    50:1e:17:0a:79:4f:4f:f3:b3:44:7d:d7:f6:3c:73:
                    fc:0a:28:2b:2a:df:55:15:65:bf:24:47:70:e0:58:
                    e0:f5:ae:04:66:f6:2b:76:7b:06:84:54:ee:48:61:
                    fe:1b:10:12:5c:60:bd:55:29:3a:1f:85:43:bb:d4:
                    28:5d:fa:2e:0d:1a:a0:8d:29:e5:0d:2f:0f:cc:1f:
                    bf:92:f2:7f:dc:b6:06:82:e4:05:b0:e9:e7:4f:94:
                    15:fa:6e:f5:e2:b7:28:19:c3:c0:94:00:d7:13:af:
                    06:2d:b0:17:1d:f1:82:01:5e:74:a3:b6:91:80:77:
                    50:bd:83:19:2a:69:cd:ec:c1:db:71:21:0a:f7:3f:
                    c7:23:aa:18:56:37:9e:7a:0d:10:4f:ca:b1:b4:ca:
                    a7:e4:29:60:b0:49:aa:5f:7d:ab:e1:15:19:23:19:
                    c5:f9:98:e5:25:3a:77:a1:54:be:fc:8f:3e:57:70:
                    b9:25:f3:00:8a:2b:8a:d5:b6:a5:68:2d:b5:49:16:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:21:34:97:A3:67:16:D7:46:08:B1:5E:E2:0A:54:E3:3C:C1:95
            X509v3 Authority Key Identifier:
                keyid:92:84:A1:CB:43:B0:0C:70:AA:1D:5B:65:BC:F7:59:0E:CB:2A:5F:55
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9284A1CB43B00C70AA1D5B65BCF7590ECB2A5F55.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/323830343a373466303a3a2f33322d3438203d3e20323731303133.roa
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f0::/32
    Signature Algorithm: sha256WithRSAEncryption
         18:f6:bc:6c:b0:35:d8:a3:e3:c0:59:99:25:02:4e:bc:e7:63:
         57:f4:ae:4d:0a:19:1e:07:f4:66:71:a4:07:c7:b5:94:43:99:
         6e:76:f4:83:33:8d:a7:3f:13:26:55:65:84:fb:c6:b9:f9:d9:
         1f:18:cf:71:ef:8b:a5:35:71:29:68:4b:ce:8c:41:d8:01:b4:
         55:ba:98:42:02:41:4f:35:2b:96:eb:4b:39:26:ce:f7:6f:c7:
         95:75:53:0d:7d:8d:7e:0a:f3:9e:8c:f2:ff:53:b7:98:b9:46:
         86:39:a6:aa:61:79:aa:d9:b2:8d:c9:7d:d6:45:e0:3d:45:44:
         87:9d:6e:6e:56:05:99:bf:2e:08:4a:18:51:c6:58:35:cc:86:
         e2:e5:7d:a9:e5:cf:c3:78:16:24:99:ea:79:6d:b2:33:27:e1:
         ab:aa:60:cb:35:6b:88:1c:63:82:11:33:b5:a6:08:35:2b:e6:
         ed:8e:9b:d1:27:3c:5d:0a:e4:31:9f:d4:1e:38:21:74:43:ca:
         4e:5c:77:12:e1:12:ef:6c:2b:ab:56:17:7b:20:85:19:94:54:
         30:c8:be:2d:52:58:b0:db:41:fa:c0:5c:b8:d8:d8:f8:21:2d:
         1e:da:d6:83:f6:c1:40:a2:7b:69:8b:33:2c:3c:cc:05:14:b8:
         48:cb:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 06:27:36 2025 by rpki-client