Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a343030303a3a2f33342d3334203d3e20323733383031.roa
File: 323830343a386336633a343030303a3a2f33342d3334203d3e20323733383031.roa (raw, json)
Hash identifier: WnN32GHi246iLNO8e/VllJFnAqobaOtgED18RcezdAE=
Subject key identifier: BA:DC:7C:7A:ED:C4:8E:E0:DA:23:D9:B5:31:30:9B:2E:80:76:75:6B
Certificate issuer: /CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Certificate serial: 6CB55F99BB83869E04E7F133883289F744808856
Authority key identifier: 40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a343030303a3a2f33342d3334203d3e20323733383031.roa
Signing time: Wed 04 Feb 2026 12:09:30 +0000
ROA not before: Wed 04 Feb 2026 12:04:30 +0000
ROA not after: Wed 03 Feb 2027 12:09:30 +0000
asID: 273801
IP address blocks: 2804:8c6c:4000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b5:5f:99:bb:83:86:9e:04:e7:f1:33:88:32:89:f7:44:80:88:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Validity
Not Before: Feb 4 12:04:30 2026 GMT
Not After : Feb 3 12:09:30 2027 GMT
Subject: CN=BADC7C7AEDC48EE0DA23D9B531309B2E8076756B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:c7:4a:57:7e:3c:a5:c4:e7:75:90:2c:93:
8c:30:d6:27:16:9e:12:fb:fe:d6:97:f2:1e:54:ed:
9c:c3:85:7d:b6:1c:54:2c:a6:5f:6e:9e:29:41:7d:
63:cb:bf:39:d6:60:a9:bd:84:61:9f:27:a8:e1:96:
74:6c:64:9a:4f:6b:fe:7e:0b:05:34:06:13:2c:51:
fc:55:cc:ad:f1:52:4f:6a:b3:79:ff:c5:f9:4b:af:
6d:cc:44:e2:ed:96:40:bf:00:5a:97:06:a4:74:d2:
f3:7b:6a:a9:f9:31:11:ad:26:98:65:01:04:9d:43:
46:3f:f0:cc:fc:89:70:01:e6:b5:0f:df:32:eb:5b:
55:99:07:59:99:8a:f8:9d:a3:1a:b3:3e:87:82:f4:
e6:82:78:45:fe:d4:da:12:22:bb:e7:ba:ef:64:8c:
68:64:c7:dd:59:2b:3d:f4:fb:4a:f2:45:25:88:11:
1f:6a:b3:7b:94:04:f8:0c:f4:71:9b:90:34:21:96:
26:67:79:e5:bd:0e:9d:7c:30:78:ec:7a:b9:9c:d0:
26:7c:9a:56:9a:22:9e:6b:34:85:76:37:11:c0:5c:
c9:ef:91:d9:5e:06:7c:59:be:67:7e:be:55:bc:f6:
21:fe:92:01:2e:dd:49:f9:f2:98:17:cb:03:6a:91:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:7C:7A:ED:C4:8E:E0:DA:23:D9:B5:31:30:9B:2E:80:76:75:6B
X509v3 Authority Key Identifier:
keyid:40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a343030303a3a2f33342d3334203d3e20323733383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c6c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
31:41:04:b8:52:c2:7d:ab:2c:f4:a5:8f:7f:2a:88:f0:df:63:
8b:86:1a:84:02:8c:dd:a4:c0:23:24:29:69:47:40:8c:7b:ed:
97:f8:07:7a:5c:21:65:6b:e6:91:1b:c7:68:4d:ed:e6:9b:19:
59:9d:04:98:0e:c2:6d:b1:66:de:c0:f1:e9:ec:84:e5:dd:e5:
2c:9c:e5:e9:40:33:2b:7f:0a:93:32:d2:07:61:7b:45:81:c5:
42:bf:1a:e1:87:58:48:11:a7:7b:a4:48:62:11:64:e9:ad:5e:
92:85:62:b7:eb:62:0a:70:79:11:49:92:43:03:f3:41:8b:65:
37:54:c1:b8:c8:6a:0e:a9:56:fa:9c:08:d6:29:92:f4:39:01:
58:9b:b7:18:ae:de:1b:62:60:c5:4f:b1:4a:e1:39:27:26:15:
7c:81:fc:bd:eb:e2:75:59:87:3e:21:31:ff:6d:63:58:2d:03:
63:cc:ce:4e:cd:8c:71:0e:2a:43:81:52:5c:22:cb:d0:ec:3c:
6b:3f:af:b4:7f:4c:b8:e5:7f:4e:21:c1:49:f3:f1:e8:13:b9:
02:af:13:ab:77:7b:ef:bc:0f:85:1a:6a:f6:6b:68:ec:42:42:
35:92:8b:28:c6:16:3f:4b:be:4f:db:eb:07:4a:16:90:e3:15:
dc:8d:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:41 2026 by rpki-client