Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/323830343a343164343a3a2f33322d3438203d3e20323637343539.roa
File: 323830343a343164343a3a2f33322d3438203d3e20323637343539.roa (raw, json)
Hash identifier: cbbbeABJ9NLDJEbDdv4N61/lZInNTiYeAX5NeNySgEA=
Subject key identifier: E4:B6:63:45:24:AF:0D:67:09:B5:2F:2C:25:3D:86:42:C6:C3:62:BD
Certificate issuer: /CN=8F91E515016C4617D482162163052E1ABB4B35B2
Certificate serial: 782DBD37661631EADDFEBD14B3D02CCA714AD95F
Authority key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/323830343a343164343a3a2f33322d3438203d3e20323637343539.roa
Signing time: Mon 27 Oct 2025 19:32:29 +0000
ROA not before: Mon 27 Oct 2025 19:27:29 +0000
ROA not after: Mon 26 Oct 2026 19:32:29 +0000
asID: 267459
IP address blocks: 2804:41d4::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2d:bd:37:66:16:31:ea:dd:fe:bd:14:b3:d0:2c:ca:71:4a:d9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F91E515016C4617D482162163052E1ABB4B35B2
Validity
Not Before: Oct 27 19:27:29 2025 GMT
Not After : Oct 26 19:32:29 2026 GMT
Subject: CN=E4B6634524AF0D6709B52F2C253D8642C6C362BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:1e:3f:2d:2b:05:b9:ac:63:11:76:86:84:
4c:5b:77:4e:b7:44:0d:25:18:79:27:87:0c:15:cf:
bd:c0:52:f0:99:3b:21:40:ef:9b:8b:28:cb:d9:09:
59:ea:d6:40:60:76:b9:6b:e5:f4:c0:89:48:c9:45:
05:21:8b:d9:be:cb:18:bb:72:a9:fa:b2:15:6e:46:
43:7d:bf:4f:a1:6b:0e:bb:dd:b9:59:0e:80:da:9b:
90:d4:86:80:bb:d8:a8:77:79:b9:7f:1b:3e:e4:13:
19:c3:60:9c:1c:67:50:e7:84:96:fd:e3:5a:0f:98:
ba:b9:a5:7a:58:e9:d1:ac:0c:11:90:5b:e6:76:6e:
ef:e2:fd:84:7d:5e:ec:d8:fc:05:a4:65:12:8e:ee:
32:4d:7d:86:7c:3f:c8:08:cd:d6:79:a5:45:1b:e3:
bf:0f:82:76:83:40:44:44:4f:c9:b4:e3:5f:c0:4e:
0b:29:94:2e:35:50:87:cb:a8:f7:52:f9:85:fc:18:
60:d3:c7:1a:98:fd:bd:0c:68:fb:11:8f:36:fa:a1:
f0:61:8b:83:c5:2e:1b:93:fb:8e:2c:e3:83:b2:b6:
62:94:f4:79:c0:e6:75:13:28:1d:24:41:30:88:2c:
dd:78:9d:d9:d9:a6:34:eb:0a:ed:0a:b5:82:93:5a:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:63:45:24:AF:0D:67:09:B5:2F:2C:25:3D:86:42:C6:C3:62:BD
X509v3 Authority Key Identifier:
keyid:8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/323830343a343164343a3a2f33322d3438203d3e20323637343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41d4::/32
Signature Algorithm: sha256WithRSAEncryption
a7:62:96:8b:29:2e:28:bf:09:8a:1e:d1:e2:38:5a:b8:07:20:
60:52:f2:e1:95:48:2f:a4:99:50:2a:3a:ee:69:20:aa:ca:a4:
e7:78:e0:01:7e:19:11:23:0e:15:2f:6e:60:81:05:61:6a:8c:
36:5e:cb:2d:91:0b:f5:52:28:24:53:8b:0e:8c:bd:74:62:0a:
13:ff:38:da:24:34:89:39:89:12:fb:c5:d6:a3:35:7c:2c:98:
7d:00:cc:6a:1a:8f:0f:cb:1d:99:d7:18:61:4f:ba:8b:7c:9f:
88:b5:c4:21:a1:de:36:32:e7:7a:78:90:ef:29:c0:59:e1:f4:
3d:c4:18:a3:80:7c:84:35:e2:37:4d:af:64:73:1f:db:12:49:
05:70:2a:f3:ec:58:fe:07:cd:3e:78:9b:4a:c5:c5:01:df:cd:
0a:b3:3d:09:65:05:7a:9d:3b:5d:93:84:af:17:5e:2f:22:c6:
17:c8:a6:a3:6f:fb:48:8b:15:e5:43:c1:2a:d6:c9:31:3f:07:
28:bf:75:b3:31:10:0b:12:2a:42:7d:af:9a:fb:7a:99:b0:9f:
94:80:10:6e:7e:e8:03:92:14:e1:da:6a:02:37:f7:df:b9:23:
36:7e:b7:58:8d:f8:a0:85:29:d7:8c:31:6e:3f:97:56:8e:bc:
8b:35:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:01:27 2025 by rpki-client