Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa
File: 323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier: uxK9GtL1vCbwXGmdcZAjk0p45NsURMSEGsvJFLY+4VI=
Subject key identifier: 72:59:59:B1:7F:9A:95:D8:1D:4C:78:E8:57:9C:79:03:DD:7F:A8:FC
Certificate issuer: /CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Certificate serial: 17C38D458FC4F8D04FC58F1697DAC91FBDC12E75
Authority key identifier: 34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa
Signing time: Tue 25 Aug 2026 15:07:53 +0000
ROA not before: Tue 25 Aug 2026 15:02:53 +0000
ROA not after: Tue 24 Aug 2027 15:07:53 +0000
asID: 272518
IP address blocks: 2804:8268:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c3:8d:45:8f:c4:f8:d0:4f:c5:8f:16:97:da:c9:1f:bd:c1:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Validity
Not Before: Aug 25 15:02:53 2026 GMT
Not After : Aug 24 15:07:53 2027 GMT
Subject: CN=725959B17F9A95D81D4C78E8579C7903DD7FA8FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:8f:05:06:7d:7b:e4:c7:80:ea:1d:00:ed:
62:d0:d7:cf:54:d0:d1:9c:ca:49:34:5d:a4:b0:9a:
67:eb:53:5c:f6:8b:bc:81:f6:e9:e3:75:0d:5d:45:
03:8d:92:76:87:65:fb:81:19:fc:79:ae:96:bb:e0:
05:a5:d2:13:36:99:a8:5e:03:30:f4:a1:47:4f:2d:
22:27:71:aa:25:26:02:62:64:eb:31:d4:c2:c4:ea:
b7:a8:d8:4b:e2:3a:25:da:db:7c:6e:3b:04:42:94:
86:6c:33:3b:b0:c4:7f:85:a0:ee:d2:9b:c0:7a:8e:
10:d9:29:0a:24:64:f9:59:75:53:9d:64:90:d4:d0:
a4:13:65:85:0f:ba:63:bd:c1:31:a5:c7:41:46:57:
ab:21:aa:69:ae:61:57:21:a4:51:75:58:cd:ea:ce:
d1:1d:cb:60:f8:cb:b7:14:ee:b7:0e:6f:af:bc:fd:
57:88:fd:81:e5:94:16:a4:ba:7a:8e:e8:57:94:07:
38:c1:1f:a2:47:6d:d0:14:ad:07:45:b9:58:25:e0:
42:d6:f7:5c:38:2a:71:16:ea:ff:65:8c:93:19:e4:
3c:73:78:39:37:70:45:48:5e:c7:ae:ae:af:53:2a:
2f:1b:16:07:90:79:22:72:de:4b:a2:b4:bf:cb:21:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:59:B1:7F:9A:95:D8:1D:4C:78:E8:57:9C:79:03:DD:7F:A8:FC
X509v3 Authority Key Identifier:
keyid:34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8268:4000::/34
Signature Algorithm: sha256WithRSAEncryption
7f:6e:45:60:26:fc:11:55:d2:7b:ef:90:14:47:65:71:da:a4:
ee:ff:2b:36:06:d1:d3:0d:01:24:02:7e:8b:56:9b:d7:f0:5a:
24:5b:67:30:bd:40:0a:26:1a:7f:aa:65:e4:6e:57:9b:00:c0:
62:56:ac:3e:c5:69:8e:b7:db:31:95:cc:4a:92:a2:e3:43:4e:
c0:11:00:24:43:e2:fb:e3:c1:cd:eb:d3:ba:67:a2:d6:e6:a8:
65:61:55:0d:b0:f4:4a:71:09:e7:45:c2:60:85:00:9f:db:b0:
9d:b1:e0:79:1e:da:f9:23:88:5c:e1:42:44:1f:23:3d:f6:b3:
8f:4b:27:b4:81:e2:5b:ba:61:7a:aa:dc:20:a5:53:6b:ba:81:
34:2b:08:72:86:2c:f9:08:11:6b:18:ae:66:dd:c7:83:6a:b2:
2f:cc:6a:02:73:0a:19:20:89:4c:12:ef:48:fe:b2:1c:ce:1d:
7e:b5:e0:45:5c:2a:38:3b:c1:fc:8a:9c:93:9b:d8:e4:a3:46:
3f:bd:c9:ff:7f:97:5e:49:37:66:52:ff:ff:58:88:b6:14:d9:
bf:c7:75:fc:55:76:74:a0:05:05:c2:5c:fc:a3:fb:f2:35:ab:
b6:99:0c:6c:f3:7d:6c:2d:b3:fa:3b:19:8c:47:e4:90:d1:c8:
e9:92:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:44:11 2026 by rpki-client