Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a313030333a3a2f34382d3438203d3e20323732353031.roa
File: 323830343a383232343a313030333a3a2f34382d3438203d3e20323732353031.roa (raw, json)
Hash identifier: cPp/zLfCAOZWLY4aj906eQ6e223KFduWKf0r7DJT5aU=
Subject key identifier: D5:35:43:E5:BE:AC:A7:EC:F4:60:6D:DE:03:1C:C5:29:A6:39:D3:E7
Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial: 5F979F1BC597F16A60375F6C975FF5348C824CE7
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a313030333a3a2f34382d3438203d3e20323732353031.roa
Signing time: Tue 24 Feb 2026 23:20:58 +0000
ROA not before: Tue 24 Feb 2026 23:15:58 +0000
ROA not after: Tue 23 Feb 2027 23:20:58 +0000
asID: 272501
IP address blocks: 2804:8224:1003::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:97:9f:1b:c5:97:f1:6a:60:37:5f:6c:97:5f:f5:34:8c:82:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Validity
Not Before: Feb 24 23:15:58 2026 GMT
Not After : Feb 23 23:20:58 2027 GMT
Subject: CN=D53543E5BEACA7ECF4606DDE031CC529A639D3E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:e5:1e:a4:43:df:b8:ae:61:05:a7:b0:ef:
65:e4:ab:e1:c1:4c:20:3f:26:42:63:0a:f4:4a:82:
45:32:96:56:6d:d1:78:65:f8:01:b1:f6:eb:e0:6e:
e3:9e:69:f4:a1:1b:b1:c0:0a:9d:82:07:fb:73:6e:
02:93:a2:98:ed:b2:a7:55:d5:79:20:31:f7:3d:b0:
00:d6:b0:fb:bd:e3:10:4f:c1:7b:dd:b5:b7:fe:24:
f8:5b:4c:7a:8b:67:ca:23:33:0b:3d:8b:22:80:66:
84:7e:a8:9a:a9:6d:a5:17:b1:cd:26:92:68:44:4a:
e0:d9:54:88:bd:48:70:9a:4b:46:15:b0:f3:43:b5:
b8:28:92:71:a1:31:ca:23:78:22:7f:bd:98:bd:9d:
0b:59:08:7f:75:d3:41:04:1e:ff:3e:70:fc:e5:0f:
22:b3:a9:6a:9c:1b:5c:d1:6b:37:e2:d4:20:ef:ab:
81:6c:18:de:17:07:dd:58:b5:d2:73:e8:bf:44:91:
32:9a:0d:16:5e:83:86:54:61:09:a0:be:bb:01:1a:
87:e3:cd:e7:6d:b1:8c:fc:d0:50:5e:8f:6a:79:9e:
8b:68:fb:79:84:b1:40:11:d2:b8:6f:9e:1b:28:b6:
77:66:69:1d:31:dd:48:1d:76:42:2b:4b:0c:f9:aa:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:43:E5:BE:AC:A7:EC:F4:60:6D:DE:03:1C:C5:29:A6:39:D3:E7
X509v3 Authority Key Identifier:
keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a313030333a3a2f34382d3438203d3e20323732353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8224:1003::/48
Signature Algorithm: sha256WithRSAEncryption
0b:52:ba:e3:6c:04:77:84:5a:53:b9:96:a6:84:5e:5d:b4:6c:
ec:e1:81:c7:a0:b5:ca:8a:18:0c:9e:4b:06:fd:8f:5b:eb:fe:
f6:7d:58:f8:5d:31:4e:9e:a1:03:db:f1:d3:41:d3:09:f7:60:
c3:36:50:6e:e3:62:97:f9:38:09:71:2d:79:36:ab:fa:f5:ff:
44:5b:67:b5:4a:d7:6f:72:e1:19:2a:cf:eb:59:e1:e0:2f:4d:
c9:0b:82:00:48:21:fa:ed:4b:f7:68:4c:09:3f:31:8c:94:49:
96:39:e9:31:88:1d:61:7d:3a:73:4d:3d:66:34:a7:9e:aa:67:
ba:0c:5c:ed:e7:95:e1:d0:ea:91:76:a3:93:9c:b5:0d:46:b3:
f5:05:fc:1d:7d:92:49:ca:07:39:9c:99:f6:72:65:8e:7c:89:
11:f1:0a:9b:62:90:90:00:84:d1:a5:b9:5f:c7:88:0f:fe:1a:
66:cf:ff:8b:5f:70:e5:c9:56:f0:aa:eb:e0:97:e0:06:d6:b8:
fe:5b:7e:51:e3:bb:4f:50:25:15:79:21:bb:be:7d:af:c9:b0:
7a:38:da:c5:91:10:01:e0:6e:31:6c:94:21:53:34:bc:86:de:
cf:57:95:41:ec:83:dc:72:bd:b5:28:2b:da:fe:fe:b3:a1:9f:
6f:9d:bc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:07 2026 by rpki-client