Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa
File: 323830343a353033383a3a2f33322d313238203d3e203533303033.roa (raw, json)
Hash identifier: DaI4nT11T6G/j5Fc5pqNPlnh9Xf52G4BeSXkIPss8Eg=
Subject key identifier: 18:55:97:F9:6B:46:F9:BF:2E:DB:A3:F9:BB:C2:9D:59:9E:B0:5E:D1
Certificate issuer: /CN=E483282DA50873B6832166A0D902D6605AA93019
Certificate serial: 5CBA78D17DA8CEC6712636E34B61494E03A7231E
Authority key identifier: E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa
Signing time: Wed 03 Sep 2025 19:49:59 +0000
ROA not before: Wed 03 Sep 2025 19:44:59 +0000
ROA not after: Wed 02 Sep 2026 19:49:59 +0000
asID: 53003
IP address blocks: 2804:5038::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ba:78:d1:7d:a8:ce:c6:71:26:36:e3:4b:61:49:4e:03:a7:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E483282DA50873B6832166A0D902D6605AA93019
Validity
Not Before: Sep 3 19:44:59 2025 GMT
Not After : Sep 2 19:49:59 2026 GMT
Subject: CN=185597F96B46F9BF2EDBA3F9BBC29D599EB05ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:ed:17:98:f4:ad:82:ef:18:8f:03:47:00:
3b:19:b5:ad:bb:26:b7:a1:5e:9f:91:74:07:2b:1d:
6f:73:89:5c:d0:75:bc:55:eb:ac:54:3f:79:32:b1:
28:c0:5d:72:e3:bc:08:21:a3:88:6d:f2:12:aa:37:
e9:f1:f9:83:ae:b7:07:a9:a1:fd:d7:d7:13:f2:08:
01:4e:fb:63:19:ae:3b:79:ee:d4:6f:5d:34:2a:c8:
0e:65:d9:5c:4c:dd:c4:3d:e5:d6:71:97:01:f5:d7:
e4:62:59:c7:33:fa:93:c4:fc:18:de:e1:41:ec:26:
48:d7:c6:65:dc:1c:8e:28:48:bb:c6:72:e4:87:8e:
f4:29:63:16:a6:37:d5:19:9c:14:c0:2e:ef:e1:71:
48:48:2b:38:a2:52:e3:fa:6f:7a:3a:0e:d3:1f:4b:
c1:74:be:8b:82:bd:29:5b:4e:f8:c0:ad:bc:cd:0d:
8b:8c:1e:e8:4d:bd:c1:c5:33:8d:3e:15:c7:9f:d8:
01:85:26:b1:72:3d:b0:d2:26:bc:c0:c6:82:09:28:
15:12:d9:45:77:3c:eb:83:9f:07:57:fa:f5:87:78:
c9:d7:a6:e2:74:28:2f:dd:70:69:cb:24:14:e6:93:
9d:24:c0:9e:65:f3:ae:b9:c2:8c:fd:4b:20:66:f3:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:97:F9:6B:46:F9:BF:2E:DB:A3:F9:BB:C2:9D:59:9E:B0:5E:D1
X509v3 Authority Key Identifier:
keyid:E4:83:28:2D:A5:08:73:B6:83:21:66:A0:D9:02:D6:60:5A:A9:30:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/E483282DA50873B6832166A0D902D6605AA93019.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E483282DA50873B6832166A0D902D6605AA93019.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vdVFwfX1XMUDzEtxR9XeVwWai2312r6zDzC3vdTmQSJ/0/323830343a353033383a3a2f33322d313238203d3e203533303033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5038::/32
Signature Algorithm: sha256WithRSAEncryption
74:1e:0c:28:7c:51:17:3d:35:d4:3c:f8:2d:6a:d4:bc:19:c9:
33:9c:66:e2:49:87:ca:32:31:c5:ba:09:0e:ba:7b:10:9e:94:
f6:89:34:47:c4:ad:ad:fb:fd:05:db:3b:2f:aa:bc:9b:c6:c6:
a9:c4:10:fa:39:4e:fc:c4:3b:93:a9:f8:01:ff:c3:77:49:53:
c2:c3:98:9b:b4:c3:00:94:39:0e:31:da:c5:f0:28:cc:51:ee:
32:36:ee:5d:52:a5:bd:c4:0f:9e:72:67:44:42:92:f4:95:14:
bc:94:f8:77:7e:77:5a:2b:e6:d1:b6:e5:57:ba:27:e6:d3:57:
bc:4f:b6:e1:69:73:83:9a:80:6e:69:97:da:83:e8:15:09:f6:
c3:6b:fc:b1:c3:fe:90:36:9d:4e:bc:a7:37:e7:34:62:a5:32:
0a:32:c7:fb:3e:1d:ba:94:d5:ef:a4:f7:f5:94:c3:93:92:07:
58:af:e2:b4:3f:bd:9b:5b:b2:f7:e7:6a:64:55:9a:c0:c1:cb:
33:c3:4b:54:9f:71:96:38:9f:16:ae:b5:6e:07:65:db:25:b8:
e7:98:41:93:d6:e6:75:34:ba:f7:4d:5f:58:db:3b:4b:8b:47:
c3:cf:e1:21:fd:e4:0b:17:a2:9e:a9:86:bc:90:93:df:25:3b:
a9:65:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:35 2025 by rpki-client