Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a383030303a3a2f33342d3334203d3e20323733383031.roa
File: 323830343a386336633a383030303a3a2f33342d3334203d3e20323733383031.roa (raw, json)
Hash identifier: cqVLIqy3k9A9rH/vYW66SxstE5yMOImj1SnRZlsYDic=
Subject key identifier: 5E:BF:2B:F3:18:51:C3:00:68:27:AD:5C:46:02:5A:3A:A9:11:F3:E0
Certificate issuer: /CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Certificate serial: 19A64DC36D749A88BE38C766FE01D324A03EB276
Authority key identifier: 40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a383030303a3a2f33342d3334203d3e20323733383031.roa
Signing time: Wed 04 Feb 2026 12:09:34 +0000
ROA not before: Wed 04 Feb 2026 12:04:34 +0000
ROA not after: Wed 03 Feb 2027 12:09:34 +0000
asID: 273801
IP address blocks: 2804:8c6c:8000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a6:4d:c3:6d:74:9a:88:be:38:c7:66:fe:01:d3:24:a0:3e:b2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Validity
Not Before: Feb 4 12:04:34 2026 GMT
Not After : Feb 3 12:09:34 2027 GMT
Subject: CN=5EBF2BF31851C3006827AD5C46025A3AA911F3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:0e:e0:e7:be:97:9a:b3:db:9a:3f:6a:70:
08:65:19:15:84:a9:60:d5:19:bf:87:56:d6:6e:a5:
b3:48:16:46:a4:20:55:d8:79:8a:00:d4:a2:20:bf:
73:a5:2b:d3:b1:e6:42:67:bb:4c:37:a3:f9:bd:21:
8b:5b:3c:94:12:f4:0a:b4:91:f0:b1:ff:1a:19:47:
16:f9:1d:18:22:99:58:54:a8:8e:bb:9d:8d:94:59:
e4:db:0a:7c:04:bf:8f:4a:b6:d5:b7:9b:6a:a0:b2:
5b:a4:84:df:c2:56:4b:d9:41:82:ce:ad:46:53:de:
19:3d:20:ab:66:f6:76:bc:59:07:2f:05:bb:a6:1f:
67:34:2c:14:f1:28:a0:23:c5:8c:b8:ef:e1:27:30:
cf:2f:a9:1e:a2:5e:a0:92:75:86:a0:08:35:31:cb:
ab:19:c4:de:bc:fa:ad:6d:e4:3b:1a:be:1e:b8:bf:
b9:3f:a4:00:68:68:9e:d6:eb:e2:bc:86:8f:cc:dc:
82:c4:11:97:16:a3:51:f3:ba:af:b4:5e:51:05:f1:
69:a2:18:e7:46:c2:76:c1:6e:5d:83:cd:b4:fd:11:
d0:ce:2e:5f:53:bb:5f:21:0e:0d:88:27:60:30:27:
bd:a1:71:81:64:73:ca:e6:9e:96:81:3e:cc:1d:0c:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:2B:F3:18:51:C3:00:68:27:AD:5C:46:02:5A:3A:A9:11:F3:E0
X509v3 Authority Key Identifier:
keyid:40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a383030303a3a2f33342d3334203d3e20323733383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c6c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
76:aa:3e:92:06:1d:62:2d:08:02:8d:2d:63:ac:a7:31:49:a3:
1f:01:60:63:64:9e:c5:05:d9:5a:4b:ba:8b:b6:97:8d:99:f4:
a0:56:f6:9d:10:9b:b9:4f:b9:a2:77:b9:a4:94:7a:c0:3b:b5:
19:87:2b:c4:40:da:95:36:7f:2c:2c:9d:8c:e0:4b:9b:1e:62:
99:30:82:77:2d:e5:37:85:55:1e:65:f1:b3:eb:69:6d:8a:15:
4b:0c:6f:44:bb:f4:3e:13:9c:a6:40:ab:e0:77:7a:41:a6:09:
cf:92:04:47:b7:b6:37:6b:24:fd:10:1c:6d:c2:42:57:00:5c:
62:3e:a8:97:0b:f2:45:72:c9:53:05:4c:9e:c6:21:26:fe:83:
fe:78:2e:9e:ec:da:04:a6:3d:1b:88:6b:77:17:cc:97:10:02:
f7:3c:3c:06:f3:06:0f:dc:2a:39:f2:bb:3b:43:f8:77:c4:1c:
d1:86:e4:19:06:39:cf:0e:78:87:c7:f7:0c:27:3d:ec:fd:e9:
dd:f7:f0:26:dd:fa:ce:4b:a5:ba:1f:dc:b7:49:b6:6f:a9:7e:
6a:29:30:2f:48:27:00:f3:af:2d:a5:6b:af:0a:f1:87:70:46:
0b:9c:9b:13:3d:4d:0b:30:3b:25:43:f8:6d:a0:7c:42:9f:ec:
b3:80:90:fe
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGaZNw210moi+OMdm/gHTJKA+snYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBBMjkxQkU2QzBBMUYwRDM2Q0ZBOUMwMzY0MEFGNDk5
NEUxMTBCODAeFw0yNjAyMDQxMjA0MzRaFw0yNzAyMDMxMjA5MzRaMDMxMTAvBgNV
BAMTKDVFQkYyQkYzMTg1MUMzMDA2ODI3QUQ1QzQ2MDI1QTNBQTkxMUYzRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6w7g576XmrPbmj9qcAhlGRWE
qWDVGb+HVtZupbNIFkakIFXYeYoA1KIgv3OlK9Ox5kJnu0w3o/m9IYtbPJQS9Aq0
kfCx/xoZRxb5HRgimVhUqI67nY2UWeTbCnwEv49KttW3m2qgslukhN/CVkvZQYLO
rUZT3hk9IKtm9na8WQcvBbumH2c0LBTxKKAjxYy47+EnMM8vqR6iXqCSdYagCDUx
y6sZxN68+q1t5Dsavh64v7k/pABoaJ7W6+K8ho/M3ILEEZcWo1Hzuq+0XlEF8Wmi
GOdGwnbBbl2DzbT9EdDOLl9Tu18hDg2IJ2AwJ72hcYFkc8rmnpaBPswdDALHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXr8r8xhRwwBoJ61cRgJaOqkR8+AwHwYDVR0j
BBgwFoAUQKKRvmwKHw02z6nANkCvSZThELgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0t1SFB5cmloc0hReUJ6NXJLY0w5SjIxM05RUjhxZkdBeURUeEhIYUM5
M2ovMC80MEEyOTFCRTZDMEExRjBEMzZDRkE5QzAzNjQwQUY0OTk0RTExMEI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQTI5MUJFNkMwQTFGMEQz
NkNGQTlDMDM2NDBBRjQ5OTRFMTEwQjguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLdUhQeXJpaHNIUXlCejVyS2NMOUoyMTNOUVI4cWZHQXlEVHhISGFDOTNqLzAv
MzIzODMwMzQzYTM4NjMzNjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMzM4MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEjGyAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2qj6SBh1iLQgCjS1jrKcxSaMfAWBjZJ7FBdlaS7qLtpeNmfSgVvadEJu5
T7mid7mklHrAO7UZhyvEQNqVNn8sLJ2M4EubHmKZMIJ3LeU3hVUeZfGz62ltihVL
DG9Eu/Q+E5ymQKvgd3pBpgnPkgRHt7Y3ayT9EBxtwkJXAFxiPqiXC/JFcslTBUye
xiEm/oP+eC6e7NoEpj0biGt3F8yXEAL3PDwG8wYP3Co58rs7Q/h3xBzRhuQZBjnP
DniHx/cMJz3s/end9/Am3frOS6W6H9y3SbZvqX5qKTAvSCcA868tpWuvCvGHcEYL
nJsTPU0LMDslQ/htoHxCn+yzgJD+
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:41 2026 by rpki-client