Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663030343a3a2f34362d3436203d3e20323637343639.roa
File: 323830343a343166383a663030343a3a2f34362d3436203d3e20323637343639.roa (raw, json)
Hash identifier: AoTeZ2MAnb8wQoEJuBjqja05szyrqnDTMxgr0UrrHgM=
Subject key identifier: D5:74:D0:FF:36:0B:73:EF:7F:D1:90:89:22:80:B5:12:2C:66:D7:AF
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 3CD396434FCF4B4CE916F05F8AF72864BD964AD8
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663030343a3a2f34362d3436203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:10 +0000
ROA not before: Fri 19 Sep 2025 01:49:10 +0000
ROA not after: Fri 18 Sep 2026 01:54:10 +0000
asID: 267469
IP address blocks: 2804:41f8:f004::/46 maxlen: 46
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d3:96:43:4f:cf:4b:4c:e9:16:f0:5f:8a:f7:28:64:bd:96:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:10 2025 GMT
Not After : Sep 18 01:54:10 2026 GMT
Subject: CN=D574D0FF360B73EF7FD190892280B5122C66D7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:52:fd:f4:13:fe:f9:08:3c:3f:ea:68:ec:93:
66:70:b3:15:23:c7:2c:5a:30:74:17:bb:65:16:95:
8c:d0:35:94:72:11:93:e6:c3:f3:c1:99:d8:f1:71:
46:39:92:a1:8f:64:fb:75:ff:cc:00:b0:c1:23:f0:
b3:0c:f2:3f:bd:7f:82:27:83:c0:c8:d6:96:3b:8d:
1d:cf:ee:5f:4e:f7:7d:a9:84:d4:84:94:dd:a3:ca:
1f:a1:03:1f:61:44:1d:06:f2:3f:b8:4a:91:fb:12:
06:e7:08:42:71:9d:61:31:2e:27:dc:b3:51:ef:2f:
a8:19:4f:3d:90:6d:3c:d3:11:5b:32:a2:f3:77:3f:
48:f2:73:59:46:47:9e:b1:c0:2a:1d:51:b5:2f:35:
2c:d6:88:0a:2e:2d:37:58:e9:64:3f:90:3f:16:e6:
60:0d:95:dc:d1:82:af:f2:90:e2:04:9e:4e:81:93:
6d:ba:18:c6:bd:5a:90:b8:72:dc:1e:93:dd:b6:fa:
a4:55:cd:29:19:40:e7:a3:d9:7b:1e:e8:1b:a4:0e:
f6:55:bb:98:f8:a8:98:4b:2e:8e:e9:1f:5e:50:4e:
4a:e6:91:a2:01:6d:73:9b:9e:56:e2:0b:69:a3:ab:
df:ad:b4:d4:7c:dd:d6:44:92:4f:09:0b:0e:06:bc:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:D0:FF:36:0B:73:EF:7F:D1:90:89:22:80:B5:12:2C:66:D7:AF
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663030343a3a2f34362d3436203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41f8:f004::/46
Signature Algorithm: sha256WithRSAEncryption
8c:8b:4c:e5:1c:4f:db:62:ac:64:6c:be:f5:6c:aa:6b:31:2a:
ce:35:41:1b:35:bc:0e:ce:d1:f0:85:e3:e6:db:38:66:2a:18:
9c:97:8e:43:33:c2:8f:05:67:d3:00:79:a5:98:d3:3d:c1:92:
26:26:70:6a:77:16:7d:0d:4f:44:63:bc:2e:91:ce:09:b6:10:
15:7a:82:97:5d:e0:31:24:e6:4e:38:e2:e7:1f:47:1c:3d:21:
07:86:f0:9e:8b:61:0f:cb:01:25:fb:db:77:c7:33:ed:ee:b0:
58:09:a5:74:ec:0a:1c:c5:98:8e:66:8b:ad:e4:9a:49:e9:ff:
31:f5:35:d7:ad:71:0c:0a:ca:90:27:95:46:a0:42:ef:1f:07:
d4:41:46:52:da:d5:30:d8:32:4c:b9:91:73:de:c0:97:8d:ae:
48:df:85:fa:49:a5:1e:b9:91:d5:ed:07:89:3f:29:0d:fb:4e:
95:93:14:26:c0:03:1e:51:f6:b6:94:58:b9:9b:e6:31:6d:e7:
1c:e1:80:04:27:32:60:7f:8f:ee:ee:23:45:fe:61:e2:e6:40:
a6:34:cc:52:17:08:00:ef:f7:a2:f3:a0:ca:55:4b:ba:2f:e0:
7d:75:b3:68:68:92:31:b7:d1:d6:bb:a9:7b:39:f9:bd:45:28:
f3:08:9d:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUPNOWQ0/PS0zpFvBfivcoZL2WStgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRF
REQ5ODlBODAeFw0yNTA5MTkwMTQ5MTBaFw0yNjA5MTgwMTU0MTBaMDMxMTAvBgNV
BAMTKEQ1NzREMEZGMzYwQjczRUY3RkQxOTA4OTIyODBCNTEyMkM2NkQ3QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUv30E/75CDw/6mjsk2ZwsxUj
xyxaMHQXu2UWlYzQNZRyEZPmw/PBmdjxcUY5kqGPZPt1/8wAsMEj8LMM8j+9f4In
g8DI1pY7jR3P7l9O932phNSElN2jyh+hAx9hRB0G8j+4SpH7EgbnCEJxnWExLifc
s1HvL6gZTz2QbTzTEVsyovN3P0jyc1lGR56xwCodUbUvNSzWiAouLTdY6WQ/kD8W
5mANldzRgq/ykOIEnk6Bk226GMa9WpC4ctwek922+qRVzSkZQOej2Xse6BukDvZV
u5j4qJhLLo7pH15QTkrmkaIBbXObnlbiC2mjq9+ttNR83dZEkk8JCw4GvCnNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1XTQ/zYLc+9/0ZCJIoC1Eixm168wHwYDVR0j
BBgwFoAU+5diL0BVxluZ4wlXRCT6dO3ZiagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9yVmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tu
LzAvRkI5NzYyMkY0MDU1QzY1Qjk5RTMwOTU3NDQyNEZBNzRFREQ5ODlBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQjk3NjIyRjQwNTVDNjVCOTlF
MzA5NTc0NDI0RkE3NEVERDk4OUE4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
VmtpejZ5Q2I0YlNONTI1emFhR0NWdUNlN2dTNWttRmROOFBja2d5a2tuLzAvMzIz
ODMwMzQzYTM0MzE2NjM4M2E2NjMwMzAzNDNhM2EyZjM0MzYyZDM0MzYyMDNkM2Uy
MDMyMzYzNzM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEQfjwBDANBgkqhkiG9w0BAQsFAAOC
AQEAjItM5RxP22KsZGy+9WyqazEqzjVBGzW8Ds7R8IXj5ts4ZioYnJeOQzPCjwVn
0wB5pZjTPcGSJiZwancWfQ1PRGO8LpHOCbYQFXqCl13gMSTmTjji5x9HHD0hB4bw
nothD8sBJfvbd8cz7e6wWAmldOwKHMWYjmaLreSaSen/MfU1161xDArKkCeVRqBC
7x8H1EFGUtrVMNgyTLmRc97Al42uSN+F+kmlHrmR1e0HiT8pDftOlZMUJsADHlH2
tpRYuZvmMW3nHOGABCcyYH+P7u4jRf5h4uZApjTMUhcIAO/3ovOgylVLui/gfXWz
aGiSMbfR1rupezn5vUUo8widtQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:27 2025 by rpki-client