Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/323830343a386661383a3a2f33322d3438203d3e203631363137.roa
File: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (raw, json)
Hash identifier: qRW3XX744thRP3Tttuqqk2JBIASQulXALpKztqm/mAI=
Subject key identifier: 93:09:62:79:3F:88:17:B0:7D:0C:00:85:04:28:71:0D:43:C5:31:10
Certificate issuer: /CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Certificate serial: 4E82FE27A127CC07B1909095A63BC630CFBECE2C
Authority key identifier: B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/323830343a386661383a3a2f33322d3438203d3e203631363137.roa
Signing time: Fri 20 Feb 2026 23:06:30 +0000
ROA not before: Fri 20 Feb 2026 23:01:30 +0000
ROA not after: Fri 19 Feb 2027 23:06:30 +0000
asID: 61617
IP address blocks: 2804:8fa8::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:82:fe:27:a1:27:cc:07:b1:90:90:95:a6:3b:c6:30:cf:be:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5D133C4C7CDB287645E4AA027A49AE23A77B8F4
Validity
Not Before: Feb 20 23:01:30 2026 GMT
Not After : Feb 19 23:06:30 2027 GMT
Subject: CN=930962793F8817B07D0C00850428710D43C53110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:b4:47:5e:f4:9d:be:88:76:c1:43:13:d9:
7f:67:af:e9:97:ea:8f:ae:cb:3a:f0:af:a6:31:c2:
3c:f7:78:13:8d:cc:71:ac:8e:6c:27:5c:e1:07:5c:
8e:39:a5:35:b1:ca:0d:21:30:28:e3:96:e4:98:7b:
9d:20:57:78:08:0d:53:31:7f:57:dd:e3:9e:2e:8f:
c3:92:7d:cf:5d:e6:ef:c4:cf:fc:a2:c2:dd:b1:1e:
b8:58:a9:b5:67:6c:31:de:c1:25:3a:61:44:66:53:
64:ed:f4:d9:36:83:1c:ef:c4:97:84:a0:19:9b:4b:
21:94:85:0b:f4:47:87:ab:2f:d1:7c:af:4c:d6:ca:
ca:ad:4d:25:59:8e:1e:64:4a:ba:0d:c4:a5:b2:7c:
08:eb:10:6a:0c:5c:e3:96:d9:20:c4:ae:28:fd:01:
21:7b:e5:4e:a7:2b:d5:11:e2:d1:3d:f5:56:6f:46:
48:ab:da:4e:c1:cc:25:e2:52:eb:76:94:2e:26:3b:
7f:c7:54:ad:f6:d8:15:2b:db:7e:6f:dc:46:72:3d:
61:4c:e0:7e:74:3c:1d:16:d9:9b:8f:f7:d2:2d:75:
39:59:50:34:08:54:d3:0d:16:30:d2:61:6e:46:e5:
e0:98:04:eb:d9:0a:69:72:f3:b9:57:e8:0f:3c:30:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:62:79:3F:88:17:B0:7D:0C:00:85:04:28:71:0D:43:C5:31:10
X509v3 Authority Key Identifier:
keyid:B5:D1:33:C4:C7:CD:B2:87:64:5E:4A:A0:27:A4:9A:E2:3A:77:B8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D133C4C7CDB287645E4AA027A49AE23A77B8F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/1/323830343a386661383a3a2f33322d3438203d3e203631363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8fa8::/32
Signature Algorithm: sha256WithRSAEncryption
3e:67:a0:04:55:2f:eb:32:14:c4:04:34:7d:e4:57:e9:55:34:
4b:1e:c5:1f:fa:1c:b5:bd:16:00:16:34:ce:1c:1a:2a:33:08:
53:92:4e:1e:f4:00:8b:56:00:ad:7d:6f:c2:55:c5:5c:f0:fe:
2b:c1:c8:01:82:71:55:e0:e4:cb:40:19:70:93:7e:1d:60:94:
f6:f1:5a:d3:cb:2e:80:d7:5c:c5:1b:96:89:27:46:ba:7f:28:
f5:fd:56:da:af:ff:a0:3d:20:bc:de:a2:e5:2e:79:b8:84:7e:
8b:e6:c0:d5:30:00:19:0a:f5:2b:7e:d4:f3:46:88:44:17:42:
18:51:4c:00:5b:41:1e:2b:bb:a0:ac:26:32:dd:2e:c4:49:48:
c1:c3:16:30:e4:b4:a4:20:a7:ac:dc:b7:74:fd:2d:3b:37:40:
61:33:e8:f3:a5:f3:57:ed:51:3f:34:be:76:1f:94:00:58:e0:
2b:08:35:60:a8:19:2c:75:77:3d:15:c5:43:2b:e1:a5:7e:38:
4b:56:31:1b:83:28:ce:a2:ca:65:a2:8c:14:9a:72:57:ab:dc:
28:b9:4f:3f:4b:e2:f5:96:27:da:59:b6:11:92:c9:6f:7d:9d:
06:3b:63:a2:dc:89:4b:48:14:1e:37:b8:70:19:08:d8:b9:63:
c5:ef:1d:aa
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUToL+J6EnzAexkJCVpjvGMM++ziwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMTMzQzRDN0NEQjI4NzY0NUU0QUEwMjdBNDlBRTIz
QTc3QjhGNDAeFw0yNjAyMjAyMzAxMzBaFw0yNzAyMTkyMzA2MzBaMDMxMTAvBgNV
BAMTKDkzMDk2Mjc5M0Y4ODE3QjA3RDBDMDA4NTA0Mjg3MTBENDNDNTMxMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AbRHXvSdvoh2wUMT2X9nr+mX
6o+uyzrwr6Yxwjz3eBONzHGsjmwnXOEHXI45pTWxyg0hMCjjluSYe50gV3gIDVMx
f1fd454uj8OSfc9d5u/Ez/yiwt2xHrhYqbVnbDHewSU6YURmU2Tt9Nk2gxzvxJeE
oBmbSyGUhQv0R4erL9F8r0zWysqtTSVZjh5kSroNxKWyfAjrEGoMXOOW2SDErij9
ASF75U6nK9UR4tE99VZvRkir2k7BzCXiUut2lC4mO3/HVK322BUr235v3EZyPWFM
4H50PB0W2ZuP99ItdTlZUDQIVNMNFjDSYW5G5eCYBOvZCmly87lX6A88MGftAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUkwlieT+IF7B9DACFBChxDUPFMRAwHwYDVR0j
BBgwFoAUtdEzxMfNsodkXkqgJ6Sa4jp3uPQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JD
NWMvMS9CNUQxMzNDNEM3Q0RCMjg3NjQ1RTRBQTAyN0E0OUFFMjNBNzdCOEY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDEzM0M0QzdDREIyODc2
NDVFNEFBMDI3QTQ5QUUyM0E3N0I4RjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozaE5aUk1uanRYdUMzd0xiWnU5TXpOb2Q0Q3FwQkphaGU5eEpTcXNCQzVjLzEv
MzIzODMwMzQzYTM4NjY2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM2
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEj6gwDQYJKoZIhvcNAQELBQADggEBAD5noARVL+sy
FMQENH3kV+lVNEsexR/6HLW9FgAWNM4cGiozCFOSTh70AItWAK19b8JVxVzw/ivB
yAGCcVXg5MtAGXCTfh1glPbxWtPLLoDXXMUbloknRrp/KPX9Vtqv/6A9ILzeouUu
ebiEfovmwNUwABkK9St+1PNGiEQXQhhRTABbQR4ru6CsJjLdLsRJSMHDFjDktKQg
p6zct3T9LTs3QGEz6POl81ftUT80vnYflABY4CsINWCoGSx1dz0VxUMr4aV+OEtW
MRuDKM6iymWijBSacler3Ci5Tz9L4vWWJ9pZthGSyW99nQY7Y6LciUtIFB43uHAZ
CNi5Y8XvHao=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:39 2026 by rpki-client