Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
File: 323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier: F7TEpmObW/EFma2H/70g5WzafQOxgc876cT0lhssQV8=
Subject key identifier: 4B:DD:7B:8C:52:F3:9B:72:5E:22:91:13:68:62:0E:01:79:7F:71:38
Certificate issuer: /CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Certificate serial: 37240550329892D584401D6F4DC0F9AD922D920A
Authority key identifier: 31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
Signing time: Fri 24 Jul 2026 20:17:25 +0000
ROA not before: Fri 24 Jul 2026 20:12:25 +0000
ROA not after: Fri 23 Jul 2027 20:17:25 +0000
asID: 263897
IP address blocks: 2804:2760:8000::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:24:05:50:32:98:92:d5:84:40:1d:6f:4d:c0:f9:ad:92:2d:92:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Validity
Not Before: Jul 24 20:12:25 2026 GMT
Not After : Jul 23 20:17:25 2027 GMT
Subject: CN=4BDD7B8C52F39B725E22911368620E01797F7138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:d0:9d:cc:67:89:cc:f1:d8:4e:c4:b0:aa:
ad:d7:78:34:51:0d:25:82:2d:97:48:0a:b2:00:11:
5a:b3:9c:24:2b:e6:79:68:2c:14:7a:cb:2d:a3:e1:
c8:bc:b4:50:43:f5:25:6d:46:2a:1a:d7:e2:39:c7:
29:6e:cd:49:9c:00:aa:65:91:b9:d2:57:05:55:2d:
38:0b:7b:a5:49:fe:74:54:95:35:fd:16:bf:cb:eb:
6c:2a:5e:2e:c6:30:5c:ea:5e:ac:84:9e:4a:d2:7c:
06:62:aa:6e:83:85:a3:71:37:b3:0b:b1:be:07:02:
88:54:b8:3b:2c:b6:1b:c0:fc:45:70:2a:d1:d3:e0:
3e:c1:cc:45:c4:88:c7:82:3a:ce:30:0f:f2:2e:ef:
77:d9:77:9c:50:f6:27:56:6d:a4:e9:dc:d0:1a:d5:
ba:8d:a7:42:ce:e1:96:c7:17:47:b9:ad:e9:89:a7:
5a:2b:f7:31:57:83:0d:c0:8f:02:89:48:c2:dd:78:
d4:1f:27:88:d0:ce:0f:c1:98:80:77:25:04:46:5e:
8a:84:63:dd:63:92:73:84:e0:b5:ee:b5:e9:08:9f:
eb:3e:60:a0:20:84:a0:5c:83:78:bb:27:68:6a:81:
e0:8b:f6:6c:1b:8a:72:97:dc:1d:d5:e2:99:71:de:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:7B:8C:52:F3:9B:72:5E:22:91:13:68:62:0E:01:79:7F:71:38
X509v3 Authority Key Identifier:
keyid:31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/31654F04E865C41643C8869FAE7BE65BEADE7C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2760:8000::/33
Signature Algorithm: sha256WithRSAEncryption
03:be:da:90:83:fe:d9:ff:b8:ce:8a:83:05:a9:59:39:cc:ab:
32:3c:e6:f1:f4:73:e5:c1:4c:74:66:92:c2:83:00:25:75:a4:
d1:37:b9:ed:dd:7a:0b:90:e2:ba:2d:38:00:a4:80:52:92:91:
c2:23:d8:ce:53:1f:58:5f:24:27:b1:3e:e9:74:ec:4b:6e:b0:
55:ae:4d:24:e5:8c:aa:69:ad:27:e4:fc:32:f3:dd:db:c3:92:
00:59:22:29:be:1f:e5:af:9c:9b:31:2d:cc:ca:38:80:20:11:
cc:34:57:56:6f:a7:d5:dd:4d:30:95:76:41:ac:e9:50:c2:fa:
b9:d6:1d:10:5c:c5:27:a9:79:3b:14:f3:12:80:d0:5f:92:d7:
32:20:04:ad:59:83:16:ba:97:20:fc:05:e8:d5:0b:d2:bf:19:
0e:7c:9a:a1:8a:b9:b0:8b:a7:7c:dc:f7:a9:ce:c6:8d:20:6c:
d1:fb:5f:1e:3b:48:3d:42:74:cd:73:f1:1c:d4:89:9b:d0:f6:
e8:c9:68:5a:74:f3:db:4e:02:1e:92:a9:57:81:72:62:48:87:
82:12:ee:90:42:09:e8:da:cb:08:50:a7:9c:4d:bb:19:b6:71:
cd:f9:14:cb:46:3a:77:45:2a:31:d1:a9:40:2d:f1:3d:56:1a:
ef:97:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:51:54 2026 by rpki-client