Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/323830343a393737633a3a2f33322d313238203d3e20323735363236.roa
File: 323830343a393737633a3a2f33322d313238203d3e20323735363236.roa (raw, json)
Hash identifier: 2wjO8M+6n75yKKejlc/7jrA+/WrapNPZetSvOlcdQNM=
Subject key identifier: D8:7B:BE:4A:08:E4:C6:E6:87:76:26:F2:9E:0F:28:2D:F9:6E:CD:A6
Certificate issuer: /CN=5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C
Certificate serial: 25D10E1F71D46406053063AFDD715E938E2DC9B6
Authority key identifier: 56:87:B9:AE:43:66:A6:EE:84:3A:AC:40:00:F8:A5:5B:CA:BC:8C:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/323830343a393737633a3a2f33322d313238203d3e20323735363236.roa
Signing time: Sun 17 May 2026 14:41:09 +0000
ROA not before: Sun 17 May 2026 14:36:09 +0000
ROA not after: Sun 16 May 2027 14:41:09 +0000
asID: 275626
IP address blocks: 2804:977c::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d1:0e:1f:71:d4:64:06:05:30:63:af:dd:71:5e:93:8e:2d:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C
Validity
Not Before: May 17 14:36:09 2026 GMT
Not After : May 16 14:41:09 2027 GMT
Subject: CN=D87BBE4A08E4C6E6877626F29E0F282DF96ECDA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:5a:48:e5:2f:32:4f:6c:ba:9f:06:95:86:
89:c0:91:61:76:22:46:84:8c:2e:67:a4:f9:2c:08:
04:40:43:5a:73:ca:80:3b:26:ce:ab:a4:0c:af:1e:
48:4d:ee:81:84:fc:6c:5d:50:8b:67:3a:f6:d0:93:
74:6a:89:02:0e:eb:dd:50:75:b7:90:ba:b8:80:09:
0a:bb:43:26:41:6f:90:01:86:dc:4a:20:6d:aa:e0:
35:8e:29:05:71:d8:eb:6b:fa:3f:fa:f9:90:32:1b:
3a:6f:a0:1a:eb:9c:01:9c:dc:8a:e6:f7:1c:86:00:
c2:7d:e1:ef:15:eb:a9:45:30:65:e2:5b:6b:83:7b:
b7:53:7d:c8:9a:82:42:1d:3b:f8:0b:64:c5:5d:bf:
50:cb:f0:6c:45:51:2f:11:2c:d9:8e:6d:e1:aa:49:
7b:65:09:c6:13:5f:75:ca:cd:4c:1e:ca:9f:7a:96:
22:e4:6f:68:dc:33:f3:bd:40:77:3a:e4:41:6c:65:
fe:10:00:14:ce:b2:62:ae:cf:8c:c3:76:60:60:cc:
2b:cb:0e:c4:42:ca:af:6d:5c:a4:8a:28:cd:a7:94:
ff:75:17:58:dd:3e:a5:07:b8:0d:77:81:98:96:2b:
e0:50:3c:d2:b4:77:9c:ce:e8:e1:1c:6d:ad:3c:f2:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:BE:4A:08:E4:C6:E6:87:76:26:F2:9E:0F:28:2D:F9:6E:CD:A6
X509v3 Authority Key Identifier:
keyid:56:87:B9:AE:43:66:A6:EE:84:3A:AC:40:00:F8:A5:5B:CA:BC:8C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5687B9AE4366A6EE843AAC4000F8A55BCABC8C7C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1xki3vurNomXJ83wLWWMMzP9h2N43SejJbftjEQRtMf/0/323830343a393737633a3a2f33322d313238203d3e20323735363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:977c::/32
Signature Algorithm: sha256WithRSAEncryption
5f:12:3b:19:76:6e:12:42:c9:a3:43:2a:e3:b4:30:4b:6c:a1:
17:16:02:70:f7:02:45:f8:4d:da:05:d1:95:fa:83:9a:4a:f9:
6b:bd:81:51:6b:3f:a9:4a:5a:93:21:12:28:a6:48:8b:da:60:
ea:4d:67:8e:93:b9:09:ef:1a:bc:af:1c:b4:24:6c:8c:da:e3:
e7:2b:ef:80:7e:20:3a:fe:18:8c:54:63:ab:28:37:7b:bd:1c:
4a:c2:9e:56:56:51:23:64:95:91:ac:f7:30:f1:0d:40:2a:be:
19:42:ec:75:90:6e:0d:4a:5b:6b:92:fb:f9:1a:b3:01:56:cf:
3d:6c:bc:42:a2:95:25:77:43:11:96:35:93:34:69:d8:0a:ff:
32:36:9f:ec:ba:22:94:09:86:87:53:b0:dd:e3:7c:84:ce:7b:
52:03:05:81:d3:a6:e1:03:d8:a5:77:42:5e:b0:67:a6:d6:83:
36:15:d1:cf:c6:27:02:cf:d9:e1:e8:24:09:b4:e6:de:28:51:
a3:55:66:40:13:8e:56:29:b2:fc:cf:a7:94:82:5c:ec:de:08:
3a:12:0a:79:c1:ba:d1:a9:6f:89:92:a1:ea:01:2b:bb:83:ac:
df:cb:97:5f:7c:3c:6f:b3:ba:5d:46:ec:42:19:89:b6:e0:cd:
54:e1:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:04 2026 by rpki-client