Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa
File: 323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa (raw, json)
Hash identifier: B4YrSKfSzfKnH8d1DZl4FhNJw91BD/6nUHKcY9fvSKk=
Subject key identifier: 94:AE:61:AD:60:97:D2:13:15:8D:45:D2:40:1F:44:4D:18:65:62:0A
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 46B8282423EC38C696BBB49F4B1F121A1917DAA7
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:11 +0000
ROA not before: Fri 19 Sep 2025 01:49:11 +0000
ROA not after: Fri 18 Sep 2026 01:54:11 +0000
asID: 267469
IP address blocks: 2804:41f8:f305::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b8:28:24:23:ec:38:c6:96:bb:b4:9f:4b:1f:12:1a:19:17:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:11 2025 GMT
Not After : Sep 18 01:54:11 2026 GMT
Subject: CN=94AE61AD6097D213158D45D2401F444D1865620A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:a7:45:c6:43:4f:51:c8:ff:e0:a1:82:e6:
93:15:35:13:cc:77:10:0c:f7:c0:6d:46:ea:09:05:
fa:80:8e:59:77:36:b3:fb:af:04:a9:84:f6:03:89:
51:dd:cc:82:f9:d2:52:62:10:a2:43:d0:a3:8f:ad:
61:ae:93:18:db:bc:77:5b:06:0e:f9:c9:10:3d:58:
8e:98:03:5a:70:ed:37:5f:8e:4f:44:89:79:25:8e:
cc:10:da:b7:81:55:13:2b:99:be:47:39:c3:cc:05:
b2:f6:5e:43:6c:db:ef:91:d1:b5:7a:93:d0:e5:85:
9f:e7:65:24:a8:b9:f1:ba:f1:2e:62:1f:36:1d:8b:
22:20:95:b3:0e:6d:2d:c2:00:af:12:a2:2f:4b:bc:
53:e4:4b:8f:34:7b:5f:12:8a:38:b8:da:8f:30:db:
bb:f4:cd:9d:31:20:6c:4d:8f:df:a7:31:5a:74:c2:
9e:58:08:4f:fc:65:03:7e:b6:f5:0e:4f:ec:37:3f:
63:ef:1b:7e:ed:63:0c:5e:a3:df:20:76:05:ce:7c:
54:4e:0a:ed:24:00:45:db:c9:74:25:15:58:b5:9e:
1b:c2:d8:ac:9d:58:e4:78:72:05:be:5c:12:77:da:
ba:9a:ea:3e:ad:9a:7b:2c:12:9d:aa:55:83:1c:09:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:61:AD:60:97:D2:13:15:8D:45:D2:40:1F:44:4D:18:65:62:0A
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41f8:f305::/48
Signature Algorithm: sha256WithRSAEncryption
19:0b:ae:b8:90:57:28:dc:58:75:47:de:6a:0e:5c:96:49:b1:
87:cc:83:43:a6:23:d0:d0:19:d8:21:f1:6c:0c:37:b2:d3:c8:
80:37:b7:1e:2e:bf:ee:be:6f:c5:49:f3:d7:10:e4:53:09:ff:
ff:c3:b4:5e:6b:9d:8b:c6:51:6f:36:ca:89:36:cd:d7:4f:44:
2e:98:b1:b1:19:17:8a:31:79:a3:09:2c:bc:82:8a:64:be:9f:
cd:01:c3:35:ac:cf:70:90:9b:d8:50:71:9a:02:1d:da:3f:e1:
fa:78:18:ca:a6:83:ba:30:4c:d8:ae:3f:9d:f9:69:ed:23:74:
b6:a8:6c:12:7c:fa:39:24:10:e1:e0:4b:6f:98:65:c3:1f:83:
f8:97:c0:3c:80:3d:2b:56:b4:c2:86:f4:2d:22:31:42:3c:95:
35:9a:90:6d:a7:cf:cb:ec:6d:c2:40:92:bb:38:9e:24:bb:39:
1c:2f:a5:dc:2b:0c:cc:da:3c:11:59:56:83:e9:63:36:c2:c8:
b0:de:54:7c:e6:e3:5c:d3:72:1e:82:2f:d3:af:55:a6:aa:b3:
f0:7b:2e:f0:82:9e:dd:34:7c:cd:ee:eb:c2:e7:fa:38:22:26:
74:91:0b:b9:96:c4:ec:a8:58:59:62:ee:7c:07:d3:4f:a8:3a:
f9:81:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:28 2025 by rpki-client