Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
File: 323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa (raw, json)
Hash identifier: 0bLh6dbLJ581cysiqVvzIA8i8rdSYGP+mQJcJDbAFv8=
Subject key identifier: 21:14:77:F3:C5:D0:0A:CB:D5:46:B9:90:FE:46:B4:FC:82:9F:73:26
Certificate issuer: /CN=FB97622F4055C65B99E309574424FA74EDD989A8
Certificate serial: 03BC6A546FD00C2E46C7F92C705BC257F1DEC155
Authority key identifier: FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
Signing time: Fri 19 Sep 2025 01:54:12 +0000
ROA not before: Fri 19 Sep 2025 01:49:12 +0000
ROA not after: Fri 18 Sep 2026 01:54:12 +0000
asID: 267469
IP address blocks: 2804:41f8:f310::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bc:6a:54:6f:d0:0c:2e:46:c7:f9:2c:70:5b:c2:57:f1:de:c1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB97622F4055C65B99E309574424FA74EDD989A8
Validity
Not Before: Sep 19 01:49:12 2025 GMT
Not After : Sep 18 01:54:12 2026 GMT
Subject: CN=211477F3C5D00ACBD546B990FE46B4FC829F7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:da:3f:a7:d0:27:b9:4c:71:04:65:50:ab:
df:e3:12:52:ee:33:d7:ea:af:6a:1d:ca:3d:d9:e9:
b3:a4:f8:5d:aa:32:6a:f2:e6:26:57:c6:05:b6:ff:
6d:cb:1d:1e:ff:92:82:32:27:64:f2:17:dc:2b:43:
73:ad:97:1e:6d:53:3a:8e:11:c3:cd:a4:d3:23:1d:
2d:03:b2:9c:86:c0:f4:32:27:55:e2:ad:e1:72:19:
a4:e3:eb:fd:e5:6c:18:83:fc:0e:b1:b6:b9:6e:f5:
c8:b4:a4:2a:b2:30:5a:bf:c2:5f:b2:bc:aa:96:b0:
a0:61:01:0e:0e:8f:ad:dc:76:2b:fd:77:b3:81:d1:
db:fe:7b:88:ad:80:ff:55:bd:15:98:b3:e3:74:f4:
0f:fd:b5:f3:01:1d:05:af:69:d9:5d:18:11:bb:63:
f5:10:80:e7:01:63:72:a7:21:a5:c9:e9:01:06:91:
94:03:d5:d5:bc:73:0d:2e:84:49:f1:af:15:99:08:
f4:73:f7:69:c5:f4:88:33:4e:d0:9d:3d:93:de:f5:
12:88:22:90:85:5a:96:27:e2:85:91:39:37:91:a9:
fe:7d:d2:46:25:a3:bd:99:cc:d8:7e:44:e1:bc:20:
ce:e0:45:f7:51:b3:d8:de:8f:6a:8a:28:da:50:df:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:14:77:F3:C5:D0:0A:CB:D5:46:B9:90:FE:46:B4:FC:82:9F:73:26
X509v3 Authority Key Identifier:
keyid:FB:97:62:2F:40:55:C6:5B:99:E3:09:57:44:24:FA:74:ED:D9:89:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FB97622F4055C65B99E309574424FA74EDD989A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB97622F4055C65B99E309574424FA74EDD989A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41f8:f310::/44
Signature Algorithm: sha256WithRSAEncryption
5d:f2:72:22:43:09:29:b4:7f:70:51:1c:f3:1a:38:e0:be:07:
49:fc:d0:52:6f:91:a7:6e:3e:df:6d:ab:a3:45:42:7f:15:d8:
1d:5b:9f:a4:29:bf:cf:d5:a6:25:9a:06:55:89:f7:53:7c:3e:
ef:3e:fd:20:0c:2d:1d:97:de:05:af:80:f7:aa:7d:f4:9e:3d:
60:79:e6:15:1a:69:e1:78:a8:cf:86:d5:20:0a:18:16:c9:c0:
db:ab:82:58:1e:6b:d6:a4:c3:d3:71:48:bb:0e:37:66:ca:13:
e9:12:91:91:d3:16:6d:82:97:96:a3:e7:57:1c:b0:59:a8:9a:
02:38:7f:8b:18:8e:9a:42:d3:a3:db:a0:ea:47:aa:d0:f2:bb:
e0:65:b3:c0:56:93:9b:99:44:f7:07:45:5f:ab:99:5a:f1:be:
91:a9:2f:84:50:c0:56:25:be:40:47:a7:6f:4f:60:8e:db:a0:
e5:c0:41:f8:af:1d:f5:8a:e4:bd:02:8c:80:6b:86:78:52:4a:
2c:08:10:f0:46:b3:13:13:85:2a:22:27:b8:c3:3e:66:a9:4f:
c6:db:7f:f5:2d:a8:cb:9d:94:ce:54:78:1b:88:df:d5:5d:78:
10:2d:4f:33:f8:b3:3c:5a:4d:97:45:70:9a:18:8e:0f:3b:da:
63:8e:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:27 2025 by rpki-client