Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
File: 323830343a323831383a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier: MtrL3dcU7KIr7YAb0315tJGy8sjFN2fvyYd2B97ehec=
Subject key identifier: DA:35:0C:71:F7:93:46:04:1F:CE:25:13:F6:AC:43:36:72:CF:72:50
Certificate issuer: /CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Certificate serial: 33083D0042A88ADBED4F2355576941EC32F42A6B
Authority key identifier: 57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
Signing time: Wed 01 Oct 2025 17:59:35 +0000
ROA not before: Wed 01 Oct 2025 17:54:35 +0000
ROA not after: Wed 30 Sep 2026 17:59:35 +0000
asID: 263940
IP address blocks: 2804:2818::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:08:3d:00:42:a8:8a:db:ed:4f:23:55:57:69:41:ec:32:f4:2a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578E16FCC816747804043A0671C73FD1B9B9A6A5
Validity
Not Before: Oct 1 17:54:35 2025 GMT
Not After : Sep 30 17:59:35 2026 GMT
Subject: CN=DA350C71F79346041FCE2513F6AC433672CF7250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:17:b0:da:ca:92:76:03:ca:74:0b:e6:5f:
41:15:f3:fd:c1:27:78:b3:3c:c7:5b:ef:ed:66:07:
a0:a6:a3:51:42:3e:f2:db:51:71:12:e8:75:57:89:
4c:44:5a:5d:72:b7:53:80:44:39:7e:74:46:a0:f6:
21:ca:3d:33:69:87:75:82:68:65:f9:f9:f1:09:e7:
93:6a:6d:92:7b:9a:6e:5c:7d:81:e7:bc:d4:f0:c4:
5b:1b:90:1c:57:c5:c3:ef:7c:e4:4d:18:b5:cc:ec:
7d:33:c9:77:ad:58:d4:ce:f9:43:39:b9:a4:73:15:
bd:3e:0c:c7:63:b7:b8:52:13:b7:cb:34:36:73:c6:
b7:9c:0d:59:4c:f4:8a:06:a4:1e:f3:e0:17:3b:f1:
84:35:02:15:4c:0f:d9:1c:67:ce:9d:98:a7:43:e2:
7c:08:c1:a2:60:9e:b1:db:fd:ca:d9:80:97:83:45:
b0:04:5e:cc:fc:f2:13:10:b8:19:97:2e:32:ea:cf:
a4:05:9d:2c:bf:b3:1b:14:65:c4:85:e6:42:e0:1b:
47:bf:9d:d3:ce:06:b5:40:a7:4e:20:4c:ad:5a:5e:
e3:8f:18:ae:b1:08:82:9e:4d:b9:ca:09:77:41:c9:
95:a1:a6:aa:37:37:8f:ac:4f:f4:25:02:a2:29:13:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:0C:71:F7:93:46:04:1F:CE:25:13:F6:AC:43:36:72:CF:72:50
X509v3 Authority Key Identifier:
keyid:57:8E:16:FC:C8:16:74:78:04:04:3A:06:71:C7:3F:D1:B9:B9:A6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/578E16FCC816747804043A0671C73FD1B9B9A6A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578E16FCC816747804043A0671C73FD1B9B9A6A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818::/34
Signature Algorithm: sha256WithRSAEncryption
14:37:9b:65:e2:c6:3e:42:f1:af:2e:37:57:c4:f8:f9:a4:7c:
68:fc:ac:d2:aa:cc:e0:18:a3:8a:6a:dd:a7:14:7d:58:2e:da:
8b:7f:9c:b7:c7:89:cd:d3:9a:f6:64:93:37:a9:e2:e4:51:e1:
78:be:55:3b:b4:15:fa:ae:ba:b8:c0:51:e2:1f:54:a0:07:25:
48:12:74:48:08:56:be:d8:85:0d:c4:ad:04:14:d1:bf:2e:e5:
aa:89:e9:7c:7e:fd:91:6c:da:56:ac:3e:46:bb:de:ac:65:cd:
8a:ee:ea:27:fa:cb:14:2f:7f:fb:6f:a7:62:5e:a4:3a:7f:cc:
96:e5:f9:0b:72:ab:83:15:9c:28:3b:1b:a6:86:c2:90:39:ab:
46:03:c5:64:a3:36:40:96:75:7f:13:6f:ac:4e:cb:28:4f:35:
1e:a4:f5:1f:fa:8b:9f:f8:fb:77:c9:71:2a:01:0d:9b:e1:39:
fd:3b:82:3e:b9:81:4e:1b:c4:ee:5d:03:a4:03:a5:f8:fc:60:
e2:7c:05:22:ed:61:d6:02:7e:93:73:96:f4:bd:de:1f:13:ec:
17:ab:ce:b6:36:a5:78:1a:c8:fa:d9:62:f4:ad:ed:06:dd:87:
fa:9e:b8:28:54:c1:d1:ae:d8:49:a2:e1:ab:ea:cf:2a:c8:84:
37:cd:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:50 2025 by rpki-client