Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33322d3438203d3e20323635323430.roa
File: 323830343a326362633a3a2f33322d3438203d3e20323635323430.roa (raw, json)
Hash identifier: 9M59VxnSWGsD14ubuYWAP3YNXZUblBvfHi6f4QPT1EI=
Subject key identifier: B4:D9:9A:42:30:6E:BB:8B:7B:1B:20:B7:F8:C7:08:52:0B:C8:69:23
Certificate issuer: /CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Certificate serial: 70435095FA67005D2641B687896D38BAF8EE6E4E
Authority key identifier: F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33322d3438203d3e20323635323430.roa
Signing time: Fri 24 Oct 2025 15:34:19 +0000
ROA not before: Fri 24 Oct 2025 15:29:19 +0000
ROA not after: Fri 23 Oct 2026 15:34:19 +0000
asID: 265240
IP address blocks: 2804:2cbc::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:43:50:95:fa:67:00:5d:26:41:b6:87:89:6d:38:ba:f8:ee:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F18830EE57CFAF9A0DC6E60307843318EFBE007E
Validity
Not Before: Oct 24 15:29:19 2025 GMT
Not After : Oct 23 15:34:19 2026 GMT
Subject: CN=B4D99A42306EBB8B7B1B20B7F8C708520BC86923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:6a:0e:40:71:d4:f2:3e:f7:27:9c:7a:de:
0d:3b:c8:aa:e9:95:bd:15:ff:09:69:18:62:a5:23:
63:53:36:a1:ed:0c:30:2c:a9:37:46:78:ea:3f:63:
dd:09:b4:17:2c:2d:97:7f:a0:72:61:35:b7:9b:54:
ca:73:7b:8e:0a:17:25:85:0f:63:75:d9:14:17:bf:
ea:73:fe:10:28:b9:08:60:f1:93:b8:6b:d8:c3:a6:
ca:f5:28:31:cc:26:17:4b:ed:45:d3:62:3d:32:9d:
9c:b2:a6:90:99:d9:27:d9:38:d6:1f:31:ec:7f:87:
56:0c:c2:7a:1a:c3:a1:9e:fa:89:93:12:2d:40:70:
33:17:f1:9b:15:a6:9e:27:c4:e5:37:41:48:04:c6:
74:fc:e8:16:07:00:2f:89:4b:ca:4d:58:56:15:9d:
be:22:d0:b5:d9:d9:11:c4:8c:bd:5d:23:fc:3a:80:
e5:c9:4b:75:2b:6e:01:8f:5b:dd:57:38:fe:52:76:
98:ba:57:0e:b6:58:8d:18:09:19:eb:be:d0:78:ff:
86:2b:83:82:15:dc:d7:32:2c:0d:17:9c:f2:b3:ff:
30:48:31:b1:6a:c4:cd:57:e2:82:d9:37:df:34:dd:
db:80:52:de:e2:6f:c2:61:c2:cb:c3:15:8c:3e:6a:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:9A:42:30:6E:BB:8B:7B:1B:20:B7:F8:C7:08:52:0B:C8:69:23
X509v3 Authority Key Identifier:
keyid:F1:88:30:EE:57:CF:AF:9A:0D:C6:E6:03:07:84:33:18:EF:BE:00:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/F18830EE57CFAF9A0DC6E60307843318EFBE007E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F18830EE57CFAF9A0DC6E60307843318EFBE007E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/0/323830343a326362633a3a2f33322d3438203d3e20323635323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cbc::/32
Signature Algorithm: sha256WithRSAEncryption
43:fc:54:36:d3:ec:c4:c9:3c:73:34:ff:67:25:52:f6:4d:5c:
02:0f:8b:c9:f7:32:11:cc:76:11:14:a6:bd:58:ed:ec:2a:c3:
f9:81:4b:48:69:e8:a9:c6:e8:13:cd:f6:16:ce:f7:65:b0:35:
8c:9c:dc:a6:d1:73:c6:c9:cd:6b:51:dd:35:0c:bf:eb:11:53:
f2:0a:df:45:ee:bb:4a:1b:81:1c:75:f4:08:df:40:f6:a3:00:
21:2d:2a:c5:75:9c:e7:9a:84:a1:0b:9a:04:6f:32:c9:da:e0:
b5:93:59:84:98:3b:6f:b6:62:a5:77:2e:bb:2e:96:43:4e:f2:
58:77:d9:a4:d5:04:c8:f2:ed:24:3a:df:d8:7c:89:28:82:50:
0e:c5:96:a4:70:2f:87:ca:b7:37:b0:29:28:50:27:02:1f:b8:
e4:0d:a5:3f:cc:c5:4f:22:11:c3:26:35:53:29:2a:cc:a3:d4:
e2:bc:1c:24:88:86:fc:c8:3d:5b:39:4b:d9:5d:cb:53:d7:f8:
eb:88:a6:a6:99:d5:7b:e8:46:58:c2:11:b9:d2:62:db:ca:f2:
d2:a2:d6:b6:3b:9d:ee:9f:a3:90:ca:6d:dc:ad:63:2e:35:3a:
c6:0c:0a:db:f3:05:e0:16:a4:a8:54:cf:1a:05:a9:55:7e:27:
17:ac:1c:70
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcENQlfpnAF0mQbaHiW04uvjubk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4ODMwRUU1N0NGQUY5QTBEQzZFNjAzMDc4NDMzMThF
RkJFMDA3RTAeFw0yNTEwMjQxNTI5MTlaFw0yNjEwMjMxNTM0MTlaMDMxMTAvBgNV
BAMTKEI0RDk5QTQyMzA2RUJCOEI3QjFCMjBCN0Y4QzcwODUyMEJDODY5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/W2oOQHHU8j73J5x63g07yKrp
lb0V/wlpGGKlI2NTNqHtDDAsqTdGeOo/Y90JtBcsLZd/oHJhNbebVMpze44KFyWF
D2N12RQXv+pz/hAouQhg8ZO4a9jDpsr1KDHMJhdL7UXTYj0ynZyyppCZ2SfZONYf
Mex/h1YMwnoaw6Ge+omTEi1AcDMX8ZsVpp4nxOU3QUgExnT86BYHAC+JS8pNWFYV
nb4i0LXZ2RHEjL1dI/w6gOXJS3UrbgGPW91XOP5Sdpi6Vw62WI0YCRnrvtB4/4Yr
g4IV3NcyLA0XnPKz/zBIMbFqxM1X4oLZN9803duAUt7ib8JhwsvDFYw+avC5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtNmaQjBuu4t7GyC3+McIUgvIaSMwHwYDVR0j
BBgwFoAU8Ygw7lfPr5oNxuYDB4QzGO++AH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS
YlUvMC9GMTg4MzBFRTU3Q0ZBRjlBMERDNkU2MDMwNzg0MzMxOEVGQkUwMDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxODgzMEVFNTdDRkFGOUEw
REM2RTYwMzA3ODQzMzE4RUZCRTAwN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0Rm1FOGZ6U1RLdEF1OEdiWHU0ZTdEMWNxdVdHcnluSjdaWGtiYmpiUmJVLzAv
MzIzODMwMzQzYTMyNjM2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQsvDANBgkqhkiG9w0BAQsFAAOCAQEAQ/xUNtPs
xMk8czT/ZyVS9k1cAg+LyfcyEcx2ERSmvVjt7CrD+YFLSGnoqcboE832Fs73ZbA1
jJzcptFzxsnNa1HdNQy/6xFT8grfRe67ShuBHHX0CN9A9qMAIS0qxXWc55qEoQua
BG8yydrgtZNZhJg7b7ZipXcuuy6WQ07yWHfZpNUEyPLtJDrf2HyJKIJQDsWWpHAv
h8q3N7ApKFAnAh+45A2lP8zFTyIRwyY1UykqzKPU4rwcJIiG/Mg9WzlL2V3LU9f4
64imppnVe+hGWMIRudJi28ry0qLWtjud7p+jkMpt3K1jLjU6xgwK2/MF4BakqFTP
GgWpVX4nF6wccA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:08:15 2025 by rpki-client