Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
File: 323830343a343166383a3a2f33322d3332203d3e20323637343639.roa (raw, json)
Hash identifier: Dn799wnBwcPPYvQdChICgTGinzL4Qv4SW9ZvS/t0twM=
Subject key identifier: 3A:E2:21:0D:5F:DA:42:3C:6E:2B:3C:DF:94:46:F1:9B:03:8E:FC:CE
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 4928BDB5B49002964B25ED3ED4E22749563EDF2D
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:15 +0000
ROA not before: Fri 19 Sep 2025 01:49:15 +0000
ROA not after: Fri 18 Sep 2026 01:54:15 +0000
asID: 267469
IP address blocks: 2804:41f8::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:28:bd:b5:b4:90:02:96:4b:25:ed:3e:d4:e2:27:49:56:3e:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:15 2025 GMT
Not After : Sep 18 01:54:15 2026 GMT
Subject: CN=3AE2210D5FDA423C6E2B3CDF9446F19B038EFCCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:73:62:e1:32:b6:a0:74:39:f4:24:2f:ce:
25:26:70:dd:44:af:ce:40:c1:1c:f5:f9:43:df:2f:
1a:ca:06:3f:e3:96:1f:94:2d:48:ac:9c:47:dc:09:
70:f3:d8:61:77:c8:19:56:36:3e:c6:ac:45:82:39:
8f:4b:31:0e:cb:58:29:72:63:97:21:dd:9d:f8:c0:
2e:85:1a:8a:ec:67:32:92:f2:e3:13:75:32:68:97:
07:31:6f:fc:7d:a7:b7:34:9d:96:e3:28:db:99:0b:
fc:40:1f:b3:f4:17:4d:40:24:70:83:bd:5d:cd:70:
07:c8:b9:cc:5a:9d:15:cf:a9:b0:4f:a1:44:e7:90:
c6:08:cd:96:e5:69:3d:58:ac:19:90:41:0c:92:76:
77:dc:0d:6b:98:a1:72:49:92:24:c2:fe:95:e7:1f:
ae:2f:f3:fb:59:f5:a8:7d:be:b9:58:2f:ec:3c:a4:
03:c5:b6:a1:d1:fa:82:db:e8:32:bf:9c:a0:d4:b0:
1b:7e:e0:c0:98:e9:06:1a:e9:0a:1c:ec:a3:12:1a:
24:26:40:62:d5:02:a1:94:d4:77:23:f5:c6:9c:6d:
b3:1c:5e:10:42:c9:b9:61:7f:1b:d9:1b:b5:6e:99:
c0:87:f6:37:52:6c:eb:bf:47:f9:e1:b9:28:1c:19:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:21:0D:5F:DA:42:3C:6E:2B:3C:DF:94:46:F1:9B:03:8E:FC:CE
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
94:e9:0a:39:cc:5c:b7:70:ec:2c:27:c0:94:65:56:da:a0:ad:
72:cb:e9:6b:81:98:ad:fe:2d:39:3f:88:06:d6:02:a2:5c:d1:
e4:a5:bf:ad:4b:70:11:3b:ea:ad:e7:a4:e9:b3:13:d3:7e:41:
20:55:d6:7f:97:7c:71:cb:6b:73:6d:5e:01:48:6a:5a:bf:45:
65:cb:3e:0c:06:e5:43:99:f9:62:15:c2:0c:d2:62:da:d2:b2:
f6:fb:6b:38:3e:ff:0c:40:05:cc:4f:f5:0f:1b:cb:03:4c:52:
20:ec:ef:03:99:83:47:9c:55:56:c8:ed:99:67:07:e8:bd:d5:
36:66:f1:29:37:15:a4:f9:3f:61:a9:19:cb:35:22:69:38:ce:
62:57:ee:fe:28:ed:f2:c0:fc:a1:f4:c5:be:2d:40:58:96:eb:
e5:aa:a9:c8:41:4d:1a:dd:35:3f:f5:7b:27:38:49:2c:c4:83:
40:0a:07:38:1a:08:be:e2:3a:72:c4:4c:23:57:3c:41:e8:cd:
6c:b0:44:6a:c1:3a:b9:1f:cb:9c:05:ac:bc:87:f0:63:fd:7e:
64:ab:94:2b:ab:f3:0b:60:66:1e:38:db:a4:4a:a0:46:62:33:
c8:0b:af:a5:af:8e:2e:a3:de:be:af:eb:05:e2:d7:d9:a1:f6:
fe:bf:05:39
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSSi9tbSQApZLJe0+1OInSVY+3y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRF
REQ5ODlBODAeFw0yNTA5MTkwMTQ5MTVaFw0yNjA5MTgwMTU0MTVaMDMxMTAvBgNV
BAMTKDNBRTIyMTBENUZEQTQyM0M2RTJCM0NERjk0NDZGMTlCMDM4RUZDQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4XNi4TK2oHQ59CQvziUmcN1E
r85AwRz1+UPfLxrKBj/jlh+ULUisnEfcCXDz2GF3yBlWNj7GrEWCOY9LMQ7LWCly
Y5ch3Z34wC6FGorsZzKS8uMTdTJolwcxb/x9p7c0nZbjKNuZC/xAH7P0F01AJHCD
vV3NcAfIucxanRXPqbBPoUTnkMYIzZblaT1YrBmQQQySdnfcDWuYoXJJkiTC/pXn
H64v8/tZ9ah9vrlYL+w8pAPFtqHR+oLb6DK/nKDUsBt+4MCY6QYa6Qoc7KMSGiQm
QGLVAqGU1Hcj9cacbbMcXhBCyblhfxvZG7VumcCH9jdSbOu/R/nhuSgcGYt9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOuIhDV/aQjxuKzzflEbxmwOO/M4wHwYDVR0j
BBgwFoAU+5diL0BVxluZ4wlXRCT6dO3ZiagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRFREQ5ODlBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjk3NjIyRjQwNTVDNjVCOTlF
MzA5NTc0NDI0RkE3NEVERDk4OUE4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzIz
ODMwMzQzYTM0MzE2NjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3MzQz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARB+DANBgkqhkiG9w0BAQsFAAOCAQEAlOkKOcxct3Ds
LCfAlGVW2qCtcsvpa4GYrf4tOT+IBtYColzR5KW/rUtwETvqreek6bMT035BIFXW
f5d8cctrc21eAUhqWr9FZcs+DAblQ5n5YhXCDNJi2tKy9vtrOD7/DEAFzE/1DxvL
A0xSIOzvA5mDR5xVVsjtmWcH6L3VNmbxKTcVpPk/YakZyzUiaTjOYlfu/ijt8sD8
ofTFvi1AWJbr5aqpyEFNGt01P/V7JzhJLMSDQAoHOBoIvuI6csRMI1c8QejNbLBE
asE6uR/LnAWsvIfwY/1+ZKuUK6vzC2BmHjjbpEqgRmIzyAuvpa+OLqPevq/rBeLX
2aH2/r8FOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:28 2025 by rpki-client