Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d3336203d3e20323633303437.roa
File: 323830343a3930383a3a2f33322d3336203d3e20323633303437.roa (raw, json)
Hash identifier: 0Lp/WoGyOfGtJ/5OtqFQ3EMUMsmvl62lmaWpXHzdZm4=
Subject key identifier: C2:0D:47:6A:C1:B3:53:8C:9D:79:10:42:BA:3B:C5:04:42:99:30:70
Certificate issuer: /CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Certificate serial: 1ECAACD60DED7A5A688688948FBEC2D0098B79D9
Authority key identifier: 99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d3336203d3e20323633303437.roa
Signing time: Fri 24 Oct 2025 16:28:02 +0000
ROA not before: Fri 24 Oct 2025 16:23:02 +0000
ROA not after: Fri 23 Oct 2026 16:28:02 +0000
asID: 263047
IP address blocks: 2804:908::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ca:ac:d6:0d:ed:7a:5a:68:86:88:94:8f:be:c2:d0:09:8b:79:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993AE132DC884AC348347F783A9BA4B1DA5CF832
Validity
Not Before: Oct 24 16:23:02 2025 GMT
Not After : Oct 23 16:28:02 2026 GMT
Subject: CN=C20D476AC1B3538C9D791042BA3BC50442993070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:f1:93:d6:5b:e5:45:55:f3:f5:ca:28:43:
19:ce:93:c8:ff:11:e4:d7:60:e3:af:a8:91:ff:f0:
09:34:1b:fd:42:f3:a7:1a:d6:01:22:0a:04:ce:6e:
16:a8:7d:44:34:c7:3e:74:ab:2f:6f:c3:15:24:16:
14:55:d9:9e:06:25:ea:94:08:73:1c:b1:ac:30:09:
71:a4:9f:f9:ac:c4:55:c8:e2:76:72:4e:4f:bf:1b:
69:27:47:22:9e:e0:1f:bb:fe:cd:27:55:a5:08:ce:
ca:86:23:d3:97:ef:db:63:e8:45:fd:a1:97:a5:e9:
06:9d:60:ac:fa:69:aa:8f:5c:d1:07:3a:20:20:32:
2f:36:2e:8f:e7:39:7b:a3:79:2f:24:42:36:18:81:
56:a9:78:d0:99:bf:93:ab:25:a4:be:7c:d7:26:0d:
33:d1:ea:ea:18:88:a3:db:1c:76:31:a3:52:6c:66:
0e:c5:4d:f5:99:f3:8a:ad:b4:18:ca:eb:d0:53:54:
42:b7:9a:21:d1:5f:3e:c8:aa:10:a9:6d:16:7a:2d:
5a:e9:a7:00:95:e9:17:46:4e:3f:68:8c:11:6e:28:
23:aa:ce:4f:70:f5:72:8a:63:94:e9:da:c5:42:d4:
b9:50:dc:e4:d9:27:d1:b9:7f:71:53:a0:04:41:59:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:47:6A:C1:B3:53:8C:9D:79:10:42:BA:3B:C5:04:42:99:30:70
X509v3 Authority Key Identifier:
keyid:99:3A:E1:32:DC:88:4A:C3:48:34:7F:78:3A:9B:A4:B1:DA:5C:F8:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/993AE132DC884AC348347F783A9BA4B1DA5CF832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/993AE132DC884AC348347F783A9BA4B1DA5CF832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d3336203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:908::/32
Signature Algorithm: sha256WithRSAEncryption
34:9c:5d:d9:69:c6:d6:de:d3:fd:02:32:b5:71:94:1a:1a:f0:
b7:7d:1a:f3:19:f5:c4:77:45:92:2f:77:95:0e:9f:8c:c0:af:
f6:87:08:04:c1:0a:62:bf:29:62:4a:06:d4:d7:b5:a8:87:39:
a9:9e:d4:7e:78:79:a9:2b:d9:8f:90:ec:07:95:b6:36:18:4e:
91:a4:fb:45:fc:3b:2c:c1:d9:33:70:38:74:5f:43:32:3f:22:
d2:45:5b:4b:2c:5c:4d:cf:8c:a0:21:96:02:36:e5:82:5e:31:
32:a0:09:99:2c:6d:40:22:4c:e6:60:b4:ad:55:23:f4:34:85:
c0:52:fd:8e:41:6c:b9:ce:23:a4:e9:1c:71:05:7f:fc:a4:a6:
7d:64:90:50:39:6b:17:21:37:37:6e:02:10:36:11:75:20:7c:
c6:7d:af:20:d1:0e:c7:93:8a:fa:94:84:d0:0f:2e:26:88:02:
4c:8a:60:d2:cb:be:bb:71:d9:99:2b:ac:68:8f:24:da:bd:e6:
a8:38:09:9c:fb:ad:54:c3:1d:00:01:15:5a:56:a3:34:77:8e:
eb:96:3a:49:79:44:55:c3:86:9b:24:3b:8d:08:a5:8e:11:d1:
0f:99:0c:c2:5b:d3:48:82:50:f3:96:20:a4:2d:51:01:bd:38:
db:9c:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:59:33 2025 by rpki-client