Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
File: 323830343a393538633a3a2f33322d3332203d3e20323734353239.roa (raw, json)
Hash identifier: pUCoAEdEy6mYmLmW6L67dbh0XwHSfUAAPIuVw4xjULI=
Subject key identifier: 39:C0:7E:5F:DA:91:E4:F6:5D:2C:42:0A:8F:60:28:1D:82:57:D0:F1
Certificate issuer: /CN=2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194
Certificate serial: 0A71E52597C2BB35161B423B91983E07C65FDBD0
Authority key identifier: 2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer
Subject info access: rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
Signing time: Wed 08 Apr 2026 01:34:01 +0000
ROA not before: Wed 08 Apr 2026 01:29:01 +0000
ROA not after: Wed 07 Apr 2027 01:34:01 +0000
asID: 274529
IP address blocks: 2804:958c::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:71:e5:25:97:c2:bb:35:16:1b:42:3b:91:98:3e:07:c6:5f:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194
Validity
Not Before: Apr 8 01:29:01 2026 GMT
Not After : Apr 7 01:34:01 2027 GMT
Subject: CN=39C07E5FDA91E4F65D2C420A8F60281D8257D0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:9e:e1:af:61:a1:53:a6:0d:4d:63:10:35:
6a:99:e7:c5:c2:0c:7e:3f:8f:e3:13:76:09:e0:d9:
e3:0f:0a:68:45:cf:87:f0:a7:3a:b2:27:b3:ab:9c:
6d:31:7a:0d:21:e9:cf:35:2a:2f:fa:aa:80:a7:61:
e1:96:58:3d:82:57:2a:4f:7d:31:5a:71:95:15:3f:
f6:ee:da:81:67:59:5d:cc:cd:c2:47:b2:49:38:d7:
99:00:0a:b4:3e:b5:02:93:36:54:b2:bb:55:ab:72:
a6:0d:44:cd:d5:7d:14:4f:81:7e:33:55:a3:fd:6b:
3f:75:47:4d:48:60:17:ea:1f:64:df:e3:c3:ca:9e:
da:f1:c5:bb:fd:d0:37:7f:37:35:43:b5:37:6c:8a:
8f:83:e1:86:18:1f:8f:c9:68:f0:72:5e:ce:0c:3b:
23:13:7b:42:59:30:3f:56:5d:22:6c:e4:f0:47:e2:
9e:68:b2:52:8c:06:e2:30:8b:df:b7:02:8d:65:28:
30:6c:40:e6:4a:b9:e6:c8:08:c9:e3:80:b8:2f:ed:
79:ca:2c:10:39:5a:22:fe:f7:0a:cf:54:fe:dc:44:
6c:da:1d:58:ee:5b:ce:b4:98:ae:75:76:f9:38:32:
91:b9:cd:e1:71:04:f3:c1:05:e7:c7:69:91:ef:6a:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C0:7E:5F:DA:91:E4:F6:5D:2C:42:0A:8F:60:28:1D:82:57:D0:F1
X509v3 Authority Key Identifier:
keyid:2A:3F:75:56:AF:2B:12:8A:75:CF:98:6E:87:E1:AC:BC:AF:FE:31:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3F7556AF2B128A75CF986E87E1ACBCAFFE3194.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:958c::/32
Signature Algorithm: sha256WithRSAEncryption
7d:08:76:70:ef:1f:25:87:35:57:4d:05:78:de:aa:a4:a0:62:
c0:e6:b5:a8:98:72:d4:0b:79:a7:a0:53:10:28:00:d8:5d:60:
f3:f0:e1:06:89:a9:4b:d0:4e:b9:64:46:6e:46:68:d5:7e:a1:
d3:2f:69:21:ba:dd:43:d1:dc:76:5f:c3:44:ce:96:b3:e9:a1:
45:81:4f:26:9a:6e:d1:53:9b:0d:d8:90:f7:a8:26:3a:22:a4:
36:b9:30:1b:56:a5:1d:76:76:e0:e9:b1:4b:1a:b6:0a:d6:fd:
d4:44:5c:8c:a0:aa:25:ff:54:a6:89:2e:6c:40:64:d3:ff:aa:
2c:34:f9:db:4f:78:dd:a3:a3:d0:d5:dc:34:47:b3:bd:97:d8:
55:46:c4:af:88:df:d5:ef:ac:fa:2c:77:aa:d3:18:c9:75:28:
9a:74:e3:09:31:00:c1:b4:0e:67:d6:c0:fe:22:97:5d:32:08:
b4:fe:92:d0:82:15:2f:42:b5:e5:88:08:24:d8:ba:c5:d0:fb:
78:c8:ae:38:c5:7e:9b:6b:4d:9b:52:51:6b:ee:ef:ae:df:29:
3d:bd:9c:9a:8f:38:26:66:f9:ee:20:df:94:56:74:16:1a:35:
fb:1a:88:87:10:e2:78:f1:cc:b4:48:08:ea:c9:26:b7:d0:2c:
1c:1b:c4:a7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCnHlJZfCuzUWG0I7kZg+B8Zf29AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEzRjc1NTZBRjJCMTI4QTc1Q0Y5ODZFODdFMUFDQkNB
RkZFMzE5NDAeFw0yNjA0MDgwMTI5MDFaFw0yNzA0MDcwMTM0MDFaMDMxMTAvBgNV
BAMTKDM5QzA3RTVGREE5MUU0RjY1RDJDNDIwQThGNjAyODFEODI1N0QwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3Z7hr2GhU6YNTWMQNWqZ58XC
DH4/j+MTdgng2eMPCmhFz4fwpzqyJ7OrnG0xeg0h6c81Ki/6qoCnYeGWWD2CVypP
fTFacZUVP/bu2oFnWV3MzcJHskk415kACrQ+tQKTNlSyu1WrcqYNRM3VfRRPgX4z
VaP9az91R01IYBfqH2Tf48PKntrxxbv90Dd/NzVDtTdsio+D4YYYH4/JaPByXs4M
OyMTe0JZMD9WXSJs5PBH4p5oslKMBuIwi9+3Ao1lKDBsQOZKuebICMnjgLgv7XnK
LBA5WiL+9wrPVP7cRGzaHVjuW860mK51dvk4MpG5zeFxBPPBBefHaZHvagFHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOcB+X9qR5PZdLEIKj2AoHYJX0PEwHwYDVR0j
BBgwFoAUKj91Vq8rEop1z5huh+GsvK/+MZQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby92b2dHR3RhdGZxcnJ2NnE1bUFSUjNnSDJtSEtmclI1WTNyUllvMU02UG0z
LzAvMkEzRjc1NTZBRjJCMTI4QTc1Q0Y5ODZFODdFMUFDQkNBRkZFMzE5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTNGNzU1NkFGMkIxMjhBNzVD
Rjk4NkU4N0UxQUNCQ0FGRkUzMTk0LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby92
b2dHR3RhdGZxcnJ2NnE1bUFSUjNnSDJtSEtmclI1WTNyUllvMU02UG0zLzAvMzIz
ODMwMzQzYTM5MzUzODYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0MzUz
MjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKASVjDANBgkqhkiG9w0BAQsFAAOCAQEAfQh2cO8fJYc1
V00FeN6qpKBiwOa1qJhy1At5p6BTECgA2F1g8/DhBompS9BOuWRGbkZo1X6h0y9p
IbrdQ9Hcdl/DRM6Ws+mhRYFPJppu0VObDdiQ96gmOiKkNrkwG1alHXZ24OmxSxq2
Ctb91ERcjKCqJf9UpokubEBk0/+qLDT520943aOj0NXcNEezvZfYVUbEr4jf1e+s
+ix3qtMYyXUomnTjCTEAwbQOZ9bA/iKXXTIItP6S0IIVL0K15YgIJNi6xdD7eMiu
OMV+m2tNm1JRa+7vrt8pPb2cmo84Jmb57iDflFZ0Fho1+xqIhxDiePHMtEgI6skm
t9AsHBvEpw==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:12:05 2026 by rpki-client