Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
File: 323830343a333237383a3a2f33332d3333203d3e20323635303830.roa (raw, json)
Hash identifier: bujYDSW3nhUTEnjiY26vATKpg4+iqTkcy30ORRNiXhM=
Subject key identifier: C0:F2:8A:74:CF:BD:93:1D:02:69:37:2D:FE:48:7E:1F:40:55:09:F2
Certificate issuer: /CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Certificate serial: 7A623AF94EEFDCFEF3CAF9AD8FFF78C6E7C6C318
Authority key identifier: BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
Signing time: Tue 04 Nov 2025 12:21:22 +0000
ROA not before: Tue 04 Nov 2025 12:16:22 +0000
ROA not after: Tue 03 Nov 2026 12:21:22 +0000
asID: 265080
IP address blocks: 2804:3278::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:62:3a:f9:4e:ef:dc:fe:f3:ca:f9:ad:8f:ff:78:c6:e7:c6:c3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E
Validity
Not Before: Nov 4 12:16:22 2025 GMT
Not After : Nov 3 12:21:22 2026 GMT
Subject: CN=C0F28A74CFBD931D0269372DFE487E1F405509F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:24:a4:97:b6:c1:19:fd:27:7c:92:5c:3a:
14:62:7b:a7:e2:3c:b9:f6:21:c2:78:25:00:48:7e:
43:ae:6f:3e:d4:0d:b7:0d:65:07:b4:13:9a:82:1e:
c0:7f:fb:07:7e:ab:49:72:13:d4:18:fc:a3:41:db:
c2:5c:84:67:c7:ad:4e:d5:75:d4:00:95:c8:e8:62:
22:a5:a1:6f:c1:b7:cf:8c:52:3f:79:56:24:11:75:
c4:cd:84:64:55:af:82:1a:d0:77:ab:53:d0:79:e8:
9b:da:42:e2:ab:8a:e8:4d:31:17:84:b7:eb:22:a8:
6d:04:a5:c8:4d:f6:90:17:eb:4b:01:cb:60:f7:bc:
c6:28:2b:68:76:6d:82:70:15:1c:f4:3d:33:59:3f:
7f:3f:8a:42:4d:27:36:f2:dc:e3:47:2c:4c:bf:2f:
af:65:26:8f:f8:63:02:d4:0e:2f:7b:b3:20:7f:42:
9d:92:95:5a:0c:70:9a:26:a4:fc:dd:97:aa:b5:80:
d5:b8:78:da:e4:f9:e6:2f:d7:6d:9f:6f:9b:29:29:
9c:9e:bb:2b:c2:39:c5:44:08:51:61:a2:48:6c:59:
37:da:3c:5d:ad:bc:b8:95:a4:c0:69:49:79:57:fc:
74:b6:33:58:1e:06:3d:e6:e4:56:6c:61:db:fa:93:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:8A:74:CF:BD:93:1D:02:69:37:2D:FE:48:7E:1F:40:55:09:F2
X509v3 Authority Key Identifier:
keyid:BD:3A:86:10:EB:89:85:A3:AA:9F:38:7E:DE:09:73:0A:AE:F0:6F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3A8610EB8985A3AA9F387EDE09730AAEF06F4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a3a2f33332d3333203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278::/33
Signature Algorithm: sha256WithRSAEncryption
7e:5c:dd:f6:f7:05:d7:61:ab:a0:54:18:d2:d5:76:e1:12:32:
cd:81:f1:56:a8:0b:00:86:c9:88:32:95:84:9d:25:f9:1f:6d:
5c:b7:6e:a0:ca:75:21:44:5f:60:72:45:fc:96:31:c7:87:b7:
16:cf:30:1e:d2:ec:a7:51:88:01:a9:98:f3:31:51:ce:9e:5b:
76:04:cd:41:f1:96:21:78:11:99:18:b2:99:5e:19:f3:e3:9f:
63:19:a5:2f:dd:a7:07:76:d9:02:50:9c:5a:46:69:43:f4:3c:
31:d4:57:7e:76:98:f7:62:56:7c:44:d4:0c:a9:93:af:1e:a4:
4a:7b:32:f7:ea:09:cd:3a:c2:a1:37:13:8e:a0:3f:75:d8:e7:
55:ff:3f:6b:62:03:13:a6:be:85:49:b0:12:df:07:fb:a8:47:
40:9f:c0:86:d0:08:e0:46:7f:94:09:06:52:93:d0:1f:55:d8:
5d:42:81:6c:9d:d2:6e:ee:d0:40:a7:02:fb:00:b8:ab:2e:63:
fb:9f:e9:c7:79:9c:fe:57:a4:b3:48:0a:eb:87:01:8d:60:e4:
eb:33:b0:d6:4c:f0:f4:00:0d:bb:8b:d4:73:36:62:51:32:65:
cc:f4:22:10:d2:01:7d:66:81:bb:bc:62:7f:87:7e:65:eb:a6:
ac:ff:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:32:54 2025 by rpki-client