Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/323830343a333531343a3a2f33322d3438203d3e20323635343939.roa
File: 323830343a333531343a3a2f33322d3438203d3e20323635343939.roa (raw, json)
Hash identifier: 4FRtIb3C1srRl5MVapqxTXjSouftZqfmVR9n7GyTvQU=
Subject key identifier: 88:AC:10:C3:5C:D7:AA:49:F4:7B:94:A2:10:1D:3D:FF:81:F2:76:88
Certificate issuer: /CN=44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC
Certificate serial: 3B330FEFDDF488AC4F6367BEE3145A7013609EBD
Authority key identifier: 44:BB:F5:86:89:7C:E6:EA:D3:6A:C8:AE:D1:BC:A4:06:F3:F1:1F:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/323830343a333531343a3a2f33322d3438203d3e20323635343939.roa
Signing time: Wed 29 Oct 2025 16:42:29 +0000
ROA not before: Wed 29 Oct 2025 16:37:29 +0000
ROA not after: Wed 28 Oct 2026 16:42:29 +0000
asID: 265499
IP address blocks: 2804:3514::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:33:0f:ef:dd:f4:88:ac:4f:63:67:be:e3:14:5a:70:13:60:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC
Validity
Not Before: Oct 29 16:37:29 2025 GMT
Not After : Oct 28 16:42:29 2026 GMT
Subject: CN=88AC10C35CD7AA49F47B94A2101D3DFF81F27688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:3e:e1:22:d6:a9:a2:c7:38:a8:cc:12:c3:
e2:82:7a:41:ba:41:3f:70:8a:53:65:78:b6:bf:0c:
8f:34:54:70:4f:ee:37:63:8e:cb:ba:f4:23:f9:60:
07:ae:0b:89:98:be:2a:58:f1:c6:51:af:07:17:9d:
92:89:38:8f:a8:fa:04:c9:e2:43:38:b0:2f:99:d4:
29:b1:a3:08:bf:3a:39:76:5e:81:08:4d:ba:97:6b:
82:84:d9:5c:aa:3f:a9:de:2d:bb:b6:d3:63:8d:22:
27:4c:fd:4e:da:7b:75:af:9d:6c:fe:e0:c2:3c:ea:
f0:da:3c:e6:10:84:36:21:2e:f8:6f:6e:85:c2:a6:
35:36:c0:f2:9e:08:03:74:5d:e1:80:5e:46:b4:9b:
b5:e1:19:12:8e:d3:be:c5:6e:15:5a:6d:4c:e1:61:
8b:e0:c7:58:07:c0:a1:98:92:9b:c0:df:9e:b6:be:
7b:21:3c:94:41:dd:da:4f:39:b3:c0:cb:08:e4:7a:
c4:75:ad:6a:d0:b0:5c:44:2f:54:9f:a8:43:cd:e0:
0a:db:c8:b0:0c:89:b0:a9:50:1f:88:81:d4:c6:2a:
46:8f:f4:74:63:f8:27:fa:da:b5:ea:24:70:cb:0b:
1b:a9:51:93:16:ad:fa:4b:d4:05:ed:64:98:55:79:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AC:10:C3:5C:D7:AA:49:F4:7B:94:A2:10:1D:3D:FF:81:F2:76:88
X509v3 Authority Key Identifier:
keyid:44:BB:F5:86:89:7C:E6:EA:D3:6A:C8:AE:D1:BC:A4:06:F3:F1:1F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44BBF586897CE6EAD36AC8AED1BCA406F3F11FBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdjYCQRs3vA8dJ6oToNYXtG4nJ7L19KnZLJJumJGRoYj/0/323830343a333531343a3a2f33322d3438203d3e20323635343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3514::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e0:16:c7:5e:d8:40:0f:d9:7e:b9:05:00:ce:fd:49:65:6a:
df:23:23:6e:8a:b9:71:e1:a5:5f:6a:c7:77:54:4a:f1:4b:77:
e7:ad:b9:c1:08:7e:aa:c3:6d:36:35:44:e1:4f:77:ac:7e:38:
e8:33:35:7b:73:95:65:8f:87:71:d4:bd:cb:40:bd:8c:0e:09:
c7:b2:2f:e5:58:24:5f:03:1b:a0:66:6a:43:65:e5:f7:ac:95:
cb:29:c0:44:76:6e:28:6e:9a:a4:cc:6b:9e:f1:2a:51:9f:03:
f0:a1:b7:92:2e:c4:02:cc:7b:46:70:09:b0:70:23:42:08:52:
1c:38:8c:a3:1d:b9:aa:55:2b:c7:ed:21:1c:99:df:df:88:f0:
09:9d:8f:11:e4:6d:5c:4e:96:76:7a:e3:fc:86:02:43:2d:23:
a4:98:72:bc:52:21:cf:c7:9f:f9:ed:b6:ac:ba:31:5d:34:bc:
15:51:23:71:f4:a8:fb:61:f7:6e:70:b7:fd:9f:75:11:82:87:
09:6a:12:9c:b7:46:9a:7f:69:6a:22:2f:7c:b3:c0:46:1c:e9:
29:72:99:e0:1e:d9:4d:d4:2a:13:00:e9:5f:7b:86:52:04:c6:
39:93:11:88:49:9b:65:27:dd:80:27:da:73:41:53:49:8e:ba:
63:65:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:03:58 2025 by rpki-client