Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
File: 323830343a353139343a3a2f33332d3333203d3e20323638343633.roa (raw, json)
Hash identifier: bFLfDQkAJYawZoez9NIdmneW0aWmgGEdm5t/6VEMmiw=
Subject key identifier: 01:1C:EA:60:35:E4:E7:80:1F:35:DE:C0:10:1D:43:8E:03:D5:36:BB
Certificate issuer: /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial: 429CD868CEDAC551B90D985FB8DD02124A29F7BB
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
Signing time: Thu 25 Sep 2025 13:25:21 +0000
ROA not before: Thu 25 Sep 2025 13:20:21 +0000
ROA not after: Thu 24 Sep 2026 13:25:21 +0000
asID: 268463
IP address blocks: 2804:5194::/33 maxlen: 33
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9c:d8:68:ce:da:c5:51:b9:0d:98:5f:b8:dd:02:12:4a:29:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
Validity
Not Before: Sep 25 13:20:21 2025 GMT
Not After : Sep 24 13:25:21 2026 GMT
Subject: CN=011CEA6035E4E7801F35DEC0101D438E03D536BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:27:1f:76:d2:6c:12:43:31:93:17:a6:95:
7d:87:97:f2:12:6c:cc:f7:2e:ad:20:6b:b9:aa:f0:
52:38:c2:08:91:26:84:84:b6:8e:4e:3c:5f:7f:c0:
5d:8b:17:b4:37:c5:cf:40:e0:1a:82:8f:9b:85:34:
81:76:36:29:f6:cc:9c:dd:14:21:19:d8:26:b4:29:
2e:0a:e0:e6:40:75:4e:80:7f:e1:5f:e0:6c:de:b6:
a6:9a:c7:09:5b:8e:32:1c:f3:d1:97:9a:56:18:21:
e0:2a:96:a2:37:95:93:4c:99:41:47:b2:6e:4b:ab:
95:c7:54:23:d4:6e:f7:55:d2:8f:75:86:f7:94:b4:
96:9e:09:1c:82:69:a2:63:21:e6:ed:fd:3e:8b:9f:
4a:81:c2:9c:d7:1f:e6:c7:a9:31:cb:cf:ef:93:a4:
cb:84:65:8f:90:0b:a7:49:60:f8:ff:65:ba:6f:10:
3a:c5:23:52:90:17:38:9b:ae:9f:b1:d9:90:77:02:
77:ee:f1:e8:a2:e3:b7:43:49:46:7c:f5:9f:84:d5:
1d:38:84:34:8f:37:0b:6a:37:80:84:c9:d8:c7:37:
a9:2a:7e:ba:c6:ed:db:1b:e3:49:8b:51:f1:67:30:
1e:c0:d7:b3:ac:1e:d9:3b:76:ad:1a:81:31:40:eb:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1C:EA:60:35:E4:E7:80:1F:35:DE:C0:10:1D:43:8E:03:D5:36:BB
X509v3 Authority Key Identifier:
keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5194::/33
Signature Algorithm: sha256WithRSAEncryption
01:aa:2f:d3:ad:00:9a:84:de:f4:ba:43:81:6c:aa:68:fb:12:
5a:24:1c:1f:f0:f2:fe:2e:54:9b:9f:91:0c:5d:ab:5c:fc:d1:
4c:6d:f3:00:16:76:75:de:30:3d:92:50:7f:39:14:3e:30:04:
4d:5e:fc:22:72:7d:05:cb:09:fe:2e:c7:20:86:fd:67:4c:09:
29:0d:4b:ec:45:af:06:0f:58:8c:70:a6:2a:60:0a:b8:64:93:
f6:6a:d4:a5:25:87:6c:93:24:93:dd:74:6e:07:2b:d3:b5:a9:
79:2f:f2:e0:39:2a:d1:9e:2a:53:fb:34:10:c8:4b:fd:5c:28:
31:65:ae:16:49:a5:ab:a4:54:fd:8b:f7:68:08:64:12:58:b7:
97:f6:a7:a0:e3:e5:4b:de:4f:b4:e0:2b:68:16:64:13:f3:28:
b7:1e:87:37:37:15:37:0a:4c:b4:f9:fc:df:34:28:68:5f:7c:
14:13:d9:aa:87:60:ae:a3:78:d2:f5:93:f0:e4:f7:d9:e1:42:
7c:28:43:08:93:11:ff:34:37:6c:c9:47:2f:fb:79:d7:9c:05:
fe:b4:0f:12:82:05:bc:74:ac:1b:7f:26:a4:37:b4:4e:df:80:
18:36:b1:28:f6:3e:98:d6:5b:e9:0f:bf:7c:02:0d:c0:e9:5e:
76:5f:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:45 2025 by rpki-client