Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
File: 323830343a383232343a3a2f33342d3334203d3e20323732353031.roa (raw, json)
Hash identifier: 3hQcCsI7zJZX+SMlKJByk/VJQP6YBaJKwqZLppFng/0=
Subject key identifier: 0E:E2:38:64:9B:0B:A1:36:43:11:F2:5F:59:B5:A3:31:C7:D0:3C:B2
Certificate issuer: /CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Certificate serial: 34947E8BC846CC662F1FEC2FCCD87F5ED133F4F7
Authority key identifier: E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
Signing time: Tue 24 Feb 2026 23:20:59 +0000
ROA not before: Tue 24 Feb 2026 23:15:59 +0000
ROA not after: Tue 23 Feb 2027 23:20:59 +0000
asID: 272501
IP address blocks: 2804:8224::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:94:7e:8b:c8:46:cc:66:2f:1f:ec:2f:cc:d8:7f:5e:d1:33:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF
Validity
Not Before: Feb 24 23:15:59 2026 GMT
Not After : Feb 23 23:20:59 2027 GMT
Subject: CN=0EE238649B0BA1364311F25F59B5A331C7D03CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:a2:77:1a:a2:1a:b5:6d:ab:e4:d7:7b:60:
e7:85:04:b0:53:60:5c:54:07:aa:d0:22:8b:c8:d5:
2e:42:b8:a0:46:88:6c:4a:5b:9b:0e:dc:84:a4:be:
a7:e4:95:a0:79:82:ac:d9:95:c1:96:6a:64:2d:44:
0f:71:93:ca:56:41:50:e6:1f:d4:1f:8a:d6:10:0b:
07:6f:16:f4:f7:8a:e3:86:d8:fc:ba:83:6d:1b:c6:
37:18:57:ba:3c:91:0e:9c:a1:d3:92:9d:62:a5:43:
23:69:c5:4b:83:9a:08:cc:eb:95:d0:5f:da:35:3b:
72:4a:e7:8a:6d:d0:85:db:3a:87:d5:40:6d:f7:1d:
4b:7a:4a:b2:ea:6e:ec:cf:ec:62:88:d4:13:eb:a5:
2d:de:b9:74:12:ef:67:d1:8c:58:d2:6a:a6:5e:6a:
d0:7d:2b:9a:2e:90:3c:e5:0d:51:30:2f:29:e1:1a:
ec:31:9b:a1:f5:03:21:f1:cd:b4:9b:1c:99:51:23:
4b:65:b3:ec:a5:0b:99:06:2c:76:7c:58:cf:66:1b:
1b:2d:0e:23:8d:2b:84:29:00:47:1a:6a:94:b5:9a:
4c:d9:7e:06:5e:e9:ec:41:9e:58:de:3f:6c:d3:dd:
41:d5:40:c5:06:3d:31:bf:3f:ab:52:5e:4a:14:ba:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:38:64:9B:0B:A1:36:43:11:F2:5F:59:B5:A3:31:C7:D0:3C:B2
X509v3 Authority Key Identifier:
keyid:E5:9C:BB:F1:8F:C7:A7:9D:C8:32:8B:AD:E1:6A:C7:12:C9:9C:FF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59CBBF18FC7A79DC8328BADE16AC712C99CFFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33342d3334203d3e20323732353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8224::/34
Signature Algorithm: sha256WithRSAEncryption
53:68:b9:3c:5b:f4:4b:51:72:1b:ea:99:3c:54:94:26:a4:05:
12:79:fb:e2:60:2a:a5:30:0b:d7:f3:94:d9:32:78:08:e4:af:
91:97:a1:d3:4b:45:b0:78:2f:db:5a:ec:24:65:8b:c2:4c:b0:
9a:67:79:b3:69:a7:4c:90:f2:8d:ca:3d:15:6c:fa:4a:40:d0:
c2:38:39:78:53:fd:18:d7:81:37:a8:3e:b7:3b:5c:58:02:59:
a7:3f:d9:47:c7:0e:88:43:13:af:4b:9f:29:10:0c:5a:80:07:
b4:87:e2:5d:e6:fe:ca:7e:65:1f:49:d4:be:8d:31:69:a1:28:
16:0d:4d:12:e1:bb:b4:6e:a5:10:77:fb:8e:bf:bf:ab:94:31:
69:6e:da:7b:c0:ea:6b:4d:e3:fd:bb:52:96:1f:a1:9e:ed:40:
2a:d8:8e:fa:95:6d:a9:34:78:f2:f8:e5:2b:9a:2f:a8:bd:87:
11:f2:31:44:4b:75:97:1f:17:be:2a:e1:ad:44:ba:00:f9:93:
a2:c4:bf:b3:1a:77:6d:dd:63:b8:e7:b0:ca:cb:cb:8d:80:a5:
52:70:1d:b5:16:f4:4c:be:03:ab:51:70:48:2d:2b:7e:33:c4:
a3:84:9f:8a:2a:a5:d3:57:fa:29:7e:31:76:a2:fe:f2:cd:f7:
58:7a:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:58:36 2026 by rpki-client