Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a633030303a3a2f33342d3334203d3e20323733383031.roa
File: 323830343a386336633a633030303a3a2f33342d3334203d3e20323733383031.roa (raw, json)
Hash identifier: 0VFFylxTUoOMBac6oAh+ZG0dICGxtp4rcktVmKJkDQY=
Subject key identifier: AC:DF:BA:B5:30:56:4D:C6:16:BF:C8:DB:3B:20:64:89:10:A0:B6:58
Certificate issuer: /CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Certificate serial: 4AD2EB2ED122914AC15A39A8DB462F3FE182506C
Authority key identifier: 40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a633030303a3a2f33342d3334203d3e20323733383031.roa
Signing time: Wed 04 Feb 2026 12:09:38 +0000
ROA not before: Wed 04 Feb 2026 12:04:38 +0000
ROA not after: Wed 03 Feb 2027 12:09:38 +0000
asID: 273801
IP address blocks: 2804:8c6c:c000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:d2:eb:2e:d1:22:91:4a:c1:5a:39:a8:db:46:2f:3f:e1:82:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40A291BE6C0A1F0D36CFA9C03640AF4994E110B8
Validity
Not Before: Feb 4 12:04:38 2026 GMT
Not After : Feb 3 12:09:38 2027 GMT
Subject: CN=ACDFBAB530564DC616BFC8DB3B20648910A0B658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:1e:f3:b5:0d:21:bb:38:56:95:d7:a0:37:
0c:fa:9c:7e:68:36:d0:cb:25:7a:dd:86:6e:96:e0:
69:4e:d7:4d:ab:cc:54:93:84:f0:b3:f6:5d:44:67:
1a:de:66:bf:43:7a:4c:6f:3a:86:47:3d:3d:fd:8a:
58:e6:4c:22:22:d6:bc:ff:30:c1:d4:47:42:65:bc:
e3:b1:0c:f6:b4:74:2a:51:e0:3e:41:d4:a7:b4:f0:
ae:c2:3a:ba:7a:5d:6e:ad:c7:f5:dd:20:e9:67:bc:
f2:7c:8c:6a:a4:91:76:46:e0:8e:b8:69:59:3e:c3:
42:7f:a9:21:c4:75:e1:15:7c:5e:6c:17:83:cf:30:
2b:26:17:47:f8:ea:c0:09:ee:d9:09:7d:e2:5f:ec:
bc:18:23:11:3f:f8:02:ea:ab:8c:d7:e2:b7:c0:32:
29:9a:4d:ee:0e:68:10:2d:3a:50:3a:29:bc:f1:10:
9f:3d:d8:3e:8c:cb:4f:05:42:bc:50:70:9f:2a:34:
d9:1a:52:88:5a:52:37:5c:89:be:eb:af:f4:28:0c:
93:a5:be:82:6f:40:2b:7f:da:78:d6:55:e2:ae:02:
0d:91:53:de:42:29:7d:97:ba:f9:a6:7f:df:fc:f9:
4a:06:88:0d:15:b1:f9:a1:1e:3b:b7:28:bd:bf:73:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DF:BA:B5:30:56:4D:C6:16:BF:C8:DB:3B:20:64:89:10:A0:B6:58
X509v3 Authority Key Identifier:
keyid:40:A2:91:BE:6C:0A:1F:0D:36:CF:A9:C0:36:40:AF:49:94:E1:10:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40A291BE6C0A1F0D36CFA9C03640AF4994E110B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKuHPyrihsHQyBz5rKcL9J213NQR8qfGAyDTxHHaC93j/0/323830343a386336633a633030303a3a2f33342d3334203d3e20323733383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8c6c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
6b:f5:1c:bb:8b:77:64:6d:48:28:d1:88:ba:cd:7c:a6:42:5d:
b9:6b:7c:67:6b:cb:32:10:13:86:df:fb:a7:68:d7:d3:e3:c7:
30:c3:f9:9e:7a:3f:7a:39:e8:7b:16:6e:9e:31:d8:80:30:bf:
56:ab:9f:ae:eb:03:c2:dd:f5:b9:2d:cc:29:d9:e5:71:55:f3:
67:3a:5f:0f:c1:5e:0d:5c:ab:2b:50:5a:03:ed:78:dd:72:da:
a6:73:be:5d:9a:46:b1:f8:e7:f7:c8:5c:db:94:6f:0d:fa:d8:
89:7e:ee:76:03:32:47:73:30:d3:ef:de:a1:2e:9b:19:31:2d:
7a:56:6a:58:ad:0b:ab:73:bc:4a:7a:6a:56:ce:c5:6d:5a:69:
c6:f0:d6:59:70:17:a8:83:d3:80:7f:8c:ee:1b:ab:f1:2b:d9:
e7:d7:7f:44:70:f6:5d:fd:48:4b:0a:55:2d:bb:f6:39:96:a4:
09:69:54:e1:3b:d3:97:c0:96:40:2a:b2:0c:d2:c1:7b:79:42:
8c:2f:08:0b:0a:0d:a5:be:7f:03:93:78:66:6a:18:b4:3e:d1:
50:51:fb:04:c8:1e:b3:92:63:4a:8e:f7:bf:9b:4f:dc:e3:7c:
ad:f1:f7:26:3a:c2:e5:13:39:71:96:a8:69:b6:f7:c2:b8:09:
1d:e7:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:42 2026 by rpki-client