Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa
File: 323830343a386336633a3a2f33322d3332203d3e20323733383031.roa (raw, json)
Hash identifier: 9pyJdeGnt+wkNPmcpgm5wYVIXfjWMYS6uUs/iT+jBYI=
Subject key identifier: 0B:8A:9D:0A:1C:F4:5B:B4:6F:1C:E4:09:AF:6D:AD:75:27:17:B1:51
Certificate issuer: /CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Certificate serial: 31CD48262C109C7642FBE362AE621E79DC3E2418
Authority key identifier: 40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa
Signing time: Wed 04 Feb 2026 12:09:21 +0000
ROA not before: Wed 04 Feb 2026 12:04:21 +0000
ROA not after: Wed 03 Feb 2027 12:09:21 +0000
asID: 273801
IP address blocks: 2804:8c6c::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cd:48:26:2c:10:9c:76:42:fb:e3:62:ae:62:1e:79:dc:3e:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Validity
Not Before: Feb 4 12:04:21 2026 GMT
Not After : Feb 3 12:09:21 2027 GMT
Subject: CN=0B8A9D0A1CF45BB46F1CE409AF6DAD752717B151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:b0:11:3b:69:cc:b8:6a:03:57:55:f1:e6:
63:03:42:51:c1:4c:10:dd:81:de:61:ba:b3:53:88:
5b:a4:97:67:28:de:85:0c:0a:dd:f3:43:bd:95:2b:
90:7e:ad:50:bf:64:8b:a1:33:18:6a:87:94:b4:59:
ca:af:a2:40:ef:d6:45:b4:17:16:b6:30:df:9e:71:
2d:38:ca:c6:7e:8b:c9:62:1b:74:7b:c6:c8:fd:59:
f1:97:36:8c:68:b2:d7:b6:74:29:98:bc:90:77:bd:
dc:c9:03:39:1f:46:df:7f:63:4b:55:3a:b5:fb:31:
c1:55:c2:0c:48:6f:3e:e7:17:94:63:af:2f:32:87:
08:83:1e:8c:e8:dc:09:ba:0c:e4:64:21:12:a5:4a:
fb:6c:c5:2c:de:9b:b7:b8:dd:b9:4f:51:f6:0a:c9:
c1:38:a6:ab:4d:96:3e:ca:98:75:85:62:43:a8:97:
db:0f:98:f6:98:4b:5a:76:a0:cb:34:c0:99:56:6d:
45:61:da:39:eb:09:0b:79:17:20:6a:4d:8e:f7:70:
00:2a:27:8e:2b:ea:c7:fc:56:32:39:07:e8:cb:3e:
6f:73:12:c6:7d:ff:9f:ff:99:a1:2f:a6:e7:c7:64:
b0:50:18:89:0e:ba:8c:25:ff:a3:f0:52:4b:58:59:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:9D:0A:1C:F4:5B:B4:6F:1C:E4:09:AF:6D:AD:75:27:17:B1:51
X509v3 Authority Key Identifier:
keyid:40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33322d3332203d3e20323733383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c6c::/32
Signature Algorithm: sha256WithRSAEncryption
23:68:39:26:2c:44:d4:5d:cf:5e:d2:ab:d5:7f:4d:a6:68:85:
b8:00:42:47:75:1a:94:0f:72:45:fa:fd:07:14:cc:63:98:20:
83:88:26:7d:a3:ce:e3:b6:c5:fb:c8:17:1e:e7:ec:21:dd:b8:
f7:7f:29:33:fd:08:23:8f:a0:79:f9:22:d4:e1:93:d5:0e:e3:
44:dd:91:f2:1f:07:11:d1:61:29:9c:73:3c:55:2e:2a:87:0b:
a4:64:02:c5:6b:45:fe:4a:3b:7c:3f:8b:21:01:09:f2:02:12:
41:53:ab:05:62:9d:18:4b:65:49:7f:9b:ab:06:c4:d9:06:2e:
aa:c8:13:fa:9a:cd:c5:33:01:03:1a:02:c1:b6:f7:c8:0b:7a:
20:8c:fe:c7:5a:51:a1:2c:2e:9e:0d:f2:ba:34:69:29:0f:28:
8f:02:a9:77:40:f3:c9:64:36:f3:ad:5f:69:60:e3:e4:e6:6d:
49:67:95:35:ae:40:ce:c2:a4:36:42:2b:99:82:03:ac:c8:3a:
86:ab:cf:ef:c9:8f:3d:16:32:a8:4d:a6:62:79:c5:5d:f9:e1:
23:1b:b8:e6:32:22:57:2c:d7:56:6c:7e:f2:3f:a9:ce:03:7e:
2a:46:c2:1b:96:b8:91:12:99:7b:9a:80:05:6b:21:c3:31:86:
f1:9a:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:52:00 2026 by rpki-client