Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
File: 323830343a376236303a3a2f33322d3438203d3e20323731343238.roa (raw, json)
Hash identifier: EiJCyXzSaDAnft5xashhW3jNVriQaXHrdZ50M6uQzaM=
Subject key identifier: CC:39:01:B5:B9:8A:28:C7:1B:1F:79:ED:A5:FA:4C:99:1B:A1:85:DD
Certificate issuer: /CN=11332B40892A7FE90447BE6A8C1D881D90DB17FF
Certificate serial: 2BD5198985F69BEB910C57AF9B8B0D366929C331
Authority key identifier: 11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
Signing time: Wed 29 Oct 2025 16:38:37 +0000
ROA not before: Wed 29 Oct 2025 16:33:37 +0000
ROA not after: Wed 28 Oct 2026 16:38:37 +0000
asID: 271428
IP address blocks: 2804:7b60::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d5:19:89:85:f6:9b:eb:91:0c:57:af:9b:8b:0d:36:69:29:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11332B40892A7FE90447BE6A8C1D881D90DB17FF
Validity
Not Before: Oct 29 16:33:37 2025 GMT
Not After : Oct 28 16:38:37 2026 GMT
Subject: CN=CC3901B5B98A28C71B1F79EDA5FA4C991BA185DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:eb:f5:c7:d3:78:c0:49:22:b1:be:ed:f0:
94:eb:5f:c2:f1:a2:94:ec:c7:1c:77:be:32:f9:a7:
a6:d6:c3:26:9d:cc:00:f8:62:5d:68:da:f4:28:c2:
d5:05:77:e9:10:b0:65:86:43:01:25:40:d7:d3:d9:
64:34:e8:c9:58:a0:d0:bf:2e:5e:dc:0a:e9:d3:e3:
cf:ae:40:89:e3:c6:b7:09:9d:06:7f:79:a6:11:5e:
b8:52:39:2e:fb:52:a2:7d:9c:45:45:50:60:67:16:
81:94:f1:fd:62:75:08:06:6f:1e:d2:61:bb:7b:d2:
f9:2e:5e:80:53:f8:5c:15:bd:7d:6b:d5:b4:b7:5c:
a3:5f:ec:71:19:cf:ef:40:4c:1d:d2:ff:3a:d7:ba:
60:fb:74:7a:77:31:00:1c:5c:cc:65:2d:ee:19:3e:
dc:17:50:1c:42:c8:64:32:2b:80:db:94:67:6b:56:
e7:2c:67:64:8c:e2:1f:5a:50:bf:2c:7a:d9:ab:cb:
24:82:02:b0:bf:47:fa:93:15:ed:5a:9f:1b:0f:89:
f8:cc:af:08:23:cb:1f:73:82:6e:6d:06:29:96:d9:
ac:f8:0d:36:ea:d1:47:98:a4:ea:e7:3b:63:33:69:
d8:cd:d2:0f:3f:67:45:80:4e:35:e0:d2:9e:a5:a6:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:01:B5:B9:8A:28:C7:1B:1F:79:ED:A5:FA:4C:99:1B:A1:85:DD
X509v3 Authority Key Identifier:
keyid:11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/323830343a376236303a3a2f33322d3438203d3e20323731343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
a3:17:eb:5f:b0:68:47:b0:ae:b2:ad:27:f6:34:0f:86:69:fb:
71:14:8a:88:cb:25:03:90:24:3d:99:db:54:49:ea:3a:03:2e:
26:dd:19:2a:69:b8:8e:5b:22:78:fe:fa:d4:41:9f:de:dc:77:
68:4c:89:35:86:fc:16:40:ed:b2:db:ea:9f:be:b7:7d:98:f8:
60:95:48:33:19:f4:3c:9f:fc:eb:e1:03:97:3a:19:76:65:bb:
60:c4:ea:04:00:b6:df:35:a9:8c:2b:5e:c0:26:29:b4:2b:22:
6f:16:1d:7e:36:94:e2:77:29:78:bf:5f:ad:97:b4:4b:f9:34:
a4:3f:09:1d:9e:ed:57:ee:e6:f0:53:45:a9:06:f2:e6:f5:0e:
3a:a5:0a:97:ea:de:14:d0:de:c7:fd:94:f0:c5:e1:1d:0b:fd:
2a:1c:4b:3f:cc:7e:97:1b:b1:3c:5f:b0:3e:41:93:09:50:f4:
5a:70:b4:fc:d0:a0:da:e1:a6:19:f4:06:47:6b:5f:57:76:0d:
60:a4:11:53:8e:85:95:48:aa:87:77:47:05:b2:2a:82:dd:e7:
17:f5:ed:20:f1:5f:07:7c:03:65:41:db:87:ca:d4:3b:a4:d2:
8b:2c:db:c5:38:ed:19:e4:6b:21:ae:58:0d:8d:e8:0c:6c:35:
16:f9:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:05:46 2025 by rpki-client