Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33342d3334203d3e20323733383031.roa
File: 323830343a386336633a3a2f33342d3334203d3e20323733383031.roa (raw, json)
Hash identifier: RPcMHBBdSOCDhya8t++FCH1EUBepogcRjVBbhvltfps=
Subject key identifier: 5A:04:10:3D:5A:33:23:ED:35:01:11:89:B7:08:87:B6:C5:4B:F7:08
Certificate issuer: /CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Certificate serial: 7BF8C6CFA9501AA9B836C634F5D21A9AFF55937F
Authority key identifier: 40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33342d3334203d3e20323733383031.roa
Signing time: Wed 04 Feb 2026 12:09:26 +0000
ROA not before: Wed 04 Feb 2026 12:04:26 +0000
ROA not after: Wed 03 Feb 2027 12:09:26 +0000
asID: 273801
IP address blocks: 2804:8c6c::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f8:c6:cf:a9:50:1a:a9:b8:36:c6:34:f5:d2:1a:9a:ff:55:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Validity
Not Before: Feb 4 12:04:26 2026 GMT
Not After : Feb 3 12:09:26 2027 GMT
Subject: CN=5A04103D5A3323ED35011189B70887B6C54BF708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:3d:2d:ce:73:1d:fd:60:8c:e8:e9:95:2f:
fc:6e:71:9f:ff:b2:67:3e:9c:f9:d8:67:51:c2:df:
c6:95:21:a2:cc:0e:04:ce:94:13:91:15:21:87:00:
31:12:0c:af:b8:c8:52:af:37:a4:37:14:03:c6:6d:
4e:39:4a:79:27:8e:af:34:01:74:46:7e:83:7b:a1:
0d:7d:35:b7:6e:1d:ea:03:b7:48:0e:cc:c3:83:39:
b6:73:bc:a0:53:e4:5a:cc:8a:c7:4a:09:7f:68:ef:
63:a5:16:16:a3:60:c8:78:b2:c4:55:76:44:0f:d8:
96:bd:6c:2b:e9:78:f3:94:18:26:ab:26:05:be:3e:
a0:60:9e:9a:a6:7e:c8:f1:ef:a2:0e:b5:44:28:a6:
29:cb:b3:51:4b:e5:dd:19:f2:78:5d:11:65:94:9a:
cb:21:e7:a0:9b:10:97:08:5e:0d:25:d6:85:cc:67:
fb:b6:b2:f0:44:a0:6b:38:7d:d5:1b:c6:bd:7d:c4:
d1:60:fc:55:8a:d8:e3:22:47:79:46:26:8b:6c:aa:
6b:38:e9:d3:e3:7c:2c:16:4c:21:aa:c1:23:8a:cc:
4e:5a:4a:8c:e4:70:46:df:27:80:ff:64:eb:31:b5:
9e:7b:9b:14:62:0f:14:71:9e:6e:ca:96:24:d2:dd:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:10:3D:5A:33:23:ED:35:01:11:89:B7:08:87:B6:C5:4B:F7:08
X509v3 Authority Key Identifier:
keyid:40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a3a2f33342d3334203d3e20323733383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c6c::/34
Signature Algorithm: sha256WithRSAEncryption
61:e3:9c:d1:62:12:c5:5d:13:17:a9:33:c1:77:51:b7:21:9c:
75:0b:39:14:2a:d9:f2:e1:3f:e8:85:5a:92:64:c2:a9:19:2b:
68:78:3b:40:51:6a:c2:bb:f3:b7:96:de:6b:15:5b:dd:17:ca:
51:92:0c:25:d2:d4:a7:e0:03:b6:da:dc:72:98:d3:62:4d:0b:
77:4d:20:2f:d8:9b:02:da:e9:6e:31:32:34:3d:39:85:98:0e:
80:6d:dc:55:c1:87:f2:9b:bd:d6:3b:25:cd:50:3e:57:0b:f4:
fa:5a:dd:3a:1d:d1:ea:a4:b3:3a:c4:60:f0:a7:8f:de:43:bf:
ff:9a:b3:69:ed:7d:18:fc:cc:c7:03:48:90:e7:17:a8:81:90:
05:23:a1:88:2a:4f:ec:52:df:a6:f5:58:ac:02:c1:b8:08:ed:
2c:ee:1d:56:a6:dd:2a:17:0d:54:54:01:09:cd:a3:ec:33:41:
03:70:5a:8f:fc:35:c8:85:ef:fd:2a:53:5e:ab:7b:9e:7b:d9:
a4:0d:ec:58:42:5e:68:01:8c:2d:65:18:6f:49:50:0f:05:91:
fc:9b:03:e0:54:d3:cf:85:23:f9:f3:8b:dd:75:3e:4e:4c:7e:
26:43:1e:ba:66:4e:08:be:b8:f2:3e:16:17:f6:53:64:47:67:
7a:cd:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:35 2026 by rpki-client