Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa
File: 323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier: Yp2XPzP58MBFq44kt8yr8TOH574pnVQ7n/qL4tocDOk=
Subject key identifier: A6:BB:D6:59:5B:9D:2E:1C:CA:6B:0E:D5:EB:6D:BD:BE:DD:AB:A9:8E
Certificate issuer: /CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Certificate serial: 1D6EEE90902BDA90E8F0BC5CE3CBD0A0E05C9B79
Authority key identifier: 34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa
Signing time: Tue 25 Aug 2026 15:07:52 +0000
ROA not before: Tue 25 Aug 2026 15:02:52 +0000
ROA not after: Tue 24 Aug 2027 15:07:52 +0000
asID: 272518
IP address blocks: 2804:8268:c000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6e:ee:90:90:2b:da:90:e8:f0:bc:5c:e3:cb:d0:a0:e0:5c:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Validity
Not Before: Aug 25 15:02:52 2026 GMT
Not After : Aug 24 15:07:52 2027 GMT
Subject: CN=A6BBD6595B9D2E1CCA6B0ED5EB6DBDBEDDABA98E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:cc:e9:00:dc:2e:9b:5a:59:db:98:42:2f:
a3:51:6a:65:e8:a2:62:81:a5:62:1b:7c:1f:e5:21:
72:11:59:45:c5:92:39:01:6a:ec:c3:3e:9f:61:a6:
a8:a0:72:78:fd:b8:94:2a:a3:5f:bd:1b:e7:58:a4:
1d:1a:12:82:5a:8e:d4:ba:b8:2c:3d:ca:9e:32:ab:
07:55:49:25:6d:0f:db:b2:53:19:d7:06:a7:e0:dc:
7f:52:95:35:d7:bc:6e:da:bb:36:26:f8:69:36:6d:
0d:37:d6:cf:ca:d6:82:35:56:2c:4a:d7:ec:d2:57:
b7:20:6d:b3:23:7d:f8:c0:27:1d:93:03:fa:cc:4e:
da:80:19:06:87:fb:f3:c4:ee:ed:12:39:3b:98:c2:
1c:cf:1e:0e:23:a0:50:6c:e2:03:2f:02:e8:cd:83:
ea:39:f7:8d:6c:8b:49:2d:ab:97:dd:c0:9e:54:b1:
25:eb:cb:d0:25:c5:fa:d0:60:f6:1c:aa:20:15:7f:
79:2e:3f:45:0c:93:88:b5:13:39:e2:d1:4d:6f:6c:
b5:f9:d9:f2:e3:70:9c:d5:c0:85:61:b2:5f:83:e0:
fd:81:b0:c4:64:25:51:f4:dc:80:0b:ac:db:a4:7f:
65:f3:9f:ca:da:36:26:d6:48:d7:5b:66:60:46:e1:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:D6:59:5B:9D:2E:1C:CA:6B:0E:D5:EB:6D:BD:BE:DD:AB:A9:8E
X509v3 Authority Key Identifier:
keyid:34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8268:c000::/34
Signature Algorithm: sha256WithRSAEncryption
9c:e1:ab:bf:db:21:79:32:06:2a:ad:47:c2:e7:17:9b:74:45:
66:e4:41:56:53:0c:ff:6f:c6:18:88:c4:95:71:29:a2:49:4c:
ce:6c:e4:05:32:7c:d3:e6:76:64:61:d2:35:8a:82:f6:a4:31:
1f:87:11:1a:26:cc:4b:43:48:0f:0e:e0:01:5e:d8:ba:ed:d3:
23:f9:3b:6f:db:32:40:2b:e5:c9:c2:60:2b:ac:1b:1f:4c:3d:
b7:86:a9:bf:38:10:7c:bb:c5:9f:bd:f4:90:fb:84:9a:0f:16:
90:fc:60:9b:d3:bb:a0:73:66:ba:6e:ca:78:75:0e:dc:b5:3c:
f7:e2:3a:88:53:77:07:fb:dd:29:73:85:54:a3:b3:2d:ef:be:
e9:50:59:4e:f3:86:39:17:e8:9a:cb:69:5a:e4:66:b7:2f:c8:
74:79:5c:f0:9b:9a:8e:8e:c5:e4:d5:a6:e3:8d:1f:52:06:24:
9f:6e:77:a9:51:90:24:2f:78:1b:8a:86:5e:d8:7d:db:4a:f9:
ed:57:dc:e8:cb:8f:71:49:d5:81:e5:0b:5e:33:f1:c3:40:da:
13:2d:9f:8f:be:0e:2b:c1:84:34:0f:a7:0d:3b:49:53:7f:99:
af:1b:6e:7c:d4:15:29:fd:83:90:47:ee:1a:2a:74:b6:c1:df:
40:a4:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:52:16 2026 by rpki-client