Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa
File: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (raw, json)
Hash identifier: shcVophYnQNt0DJaAC6ovRcuvVk9Jr10AYbR/2eamPk=
Subject key identifier: 2D:04:62:3C:B2:C5:94:4B:B3:D6:28:7E:98:1A:BE:B1:DA:A9:27:70
Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Certificate serial: 412B5883781329A3F53C9CAA48A34F15A69ECE90
Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa
Signing time: Mon 25 May 2026 13:20:42 +0000
ROA not before: Mon 25 May 2026 13:15:42 +0000
ROA not after: Mon 24 May 2027 13:20:42 +0000
asID: 267574
IP address blocks: 2804:4380::/32 maxlen: 128
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2b:58:83:78:13:29:a3:f5:3c:9c:aa:48:a3:4f:15:a6:9e:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F
Validity
Not Before: May 25 13:15:42 2026 GMT
Not After : May 24 13:20:42 2027 GMT
Subject: CN=2D04623CB2C5944BB3D6287E981ABEB1DAA92770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:d4:f3:8a:df:3d:fa:ad:aa:aa:ff:4b:92:
11:00:4e:cc:a3:17:ab:d6:03:d8:e2:c7:43:bc:74:
65:93:bd:fd:f5:f3:09:e6:a3:29:36:5b:53:25:01:
2a:a4:80:11:98:7d:ba:1b:16:01:cc:ee:ee:96:3c:
0d:9d:58:f8:8a:a3:1b:c0:35:ce:2f:45:a9:ed:2b:
8e:2e:dd:3c:80:25:c3:fb:50:66:a7:8d:b4:33:aa:
95:3a:be:db:aa:85:d6:ac:70:7c:18:38:81:2b:c7:
91:8f:c1:25:5e:59:dc:b1:73:e2:65:4c:64:bc:f1:
39:d7:5d:4a:8e:c7:d3:36:37:16:52:37:78:72:5d:
9e:a7:4d:95:d5:cc:53:ee:db:c3:84:56:29:23:0d:
14:30:1d:bb:9f:7c:dc:85:05:58:16:cd:6f:58:14:
41:13:71:fe:10:65:59:04:d5:d3:7f:73:90:62:19:
e8:2a:52:60:df:88:48:d6:33:4b:83:12:0f:67:1e:
aa:22:4a:d9:d2:eb:21:29:00:1d:14:78:78:b4:db:
5b:c3:a4:ca:24:3c:42:b1:4f:d2:d3:92:ce:19:17:
69:28:7b:13:46:62:59:31:2c:21:ce:01:93:d9:21:
60:99:be:74:57:3a:b5:f7:fc:36:23:56:6a:18:1f:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:62:3C:B2:C5:94:4B:B3:D6:28:7E:98:1A:BE:B1:DA:A9:27:70
X509v3 Authority Key Identifier:
keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/323830343a343338303a3a2f33322d313238203d3e20323637353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4380::/32
Signature Algorithm: sha256WithRSAEncryption
63:b8:55:a3:31:23:c3:61:36:b3:62:68:2f:bc:fe:91:55:6f:
7c:a6:0b:42:10:d4:ca:b9:df:71:1f:74:52:93:78:6f:eb:34:
30:e3:98:a3:21:57:b8:f0:89:aa:32:c0:51:a0:f5:d7:8a:7b:
7a:60:15:f7:bf:84:ed:df:12:9f:10:3f:16:88:cd:ce:c4:00:
f6:01:54:d0:c3:b4:d9:07:3c:21:2a:b7:2c:69:03:b2:2c:4f:
09:f0:0f:00:80:53:80:57:d1:05:f4:5b:1e:cb:30:af:d9:01:
13:84:99:58:4a:6a:ad:92:44:39:4e:74:4e:86:55:33:ba:5b:
2a:b4:83:e0:e8:cf:20:fc:45:66:f4:70:7d:ab:e8:63:64:27:
25:32:49:46:a5:d0:ea:1c:da:3b:62:e8:f4:39:78:1f:62:96:
04:e4:47:6e:77:d1:08:4b:45:a7:79:11:35:d3:b6:a0:fa:95:
21:13:2f:3b:82:2e:5e:01:0e:ac:f7:af:fe:e7:8f:31:f4:63:
28:76:f0:bf:28:ac:8d:1f:db:1b:9d:71:84:dd:c5:cb:30:4f:
de:2c:6b:45:d0:66:c3:94:ef:94:b3:14:ab:61:b3:e6:e9:58:
c7:57:50:29:8f:2d:53:19:21:44:32:33:ca:21:f9:bc:fe:03:
6e:e7:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:55:56 2026 by rpki-client