Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
File: 3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier: QQOP8IvZWA1GMljInESW77k6TDZAPGyu+WaCfqQi8OY=
Subject key identifier: 43:AD:EA:C7:47:A6:B5:5F:85:67:53:0E:1B:C6:AB:0C:DE:BB:54:45
Certificate issuer: /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial: 5299417EE17D0B0D9A2B0FAA31B0C97318DFBEEA
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
Signing time: Thu 05 Feb 2026 01:34:10 +0000
ROA not before: Thu 05 Feb 2026 01:29:10 +0000
ROA not after: Thu 04 Feb 2027 01:34:10 +0000
asID: 263961
IP address blocks: 138.255.104.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:99:41:7e:e1:7d:0b:0d:9a:2b:0f:aa:31:b0:c9:73:18:df:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Validity
Not Before: Feb 5 01:29:10 2026 GMT
Not After : Feb 4 01:34:10 2027 GMT
Subject: CN=43ADEAC747A6B55F8567530E1BC6AB0CDEBB5445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:e8:c6:e7:f1:e1:51:c1:65:1f:b7:9e:50:
54:f0:ad:39:2e:02:82:45:14:12:82:bf:c3:c4:75:
8b:89:4e:fa:b8:6e:e5:f6:b9:c6:d8:d0:1c:24:17:
e0:e1:cb:bf:92:82:7a:77:87:f1:c9:77:0e:0e:57:
d8:e2:7c:85:9b:92:96:e1:a0:47:6d:4b:b0:89:11:
07:3c:e3:4c:ab:b3:26:87:d5:72:f5:20:b3:a2:26:
df:71:ac:d2:70:5c:eb:f4:38:07:b1:36:68:ce:66:
6f:72:d9:83:6e:8e:6b:06:a4:e8:d6:72:52:14:1b:
49:4e:7b:ae:35:2e:7e:ff:ab:91:0e:74:5c:c9:f0:
af:0e:f7:f6:a7:ad:f1:26:5e:3c:c7:0e:22:b9:17:
78:3b:bf:5c:bc:aa:ae:1f:b8:fa:19:e2:74:df:9f:
b5:26:01:f7:8d:a9:c0:b2:b3:63:e9:9b:ea:1b:c8:
20:2f:e7:29:83:51:7b:33:b2:95:46:2a:e5:d6:6d:
18:f2:8c:e7:8a:59:94:b1:0a:27:be:21:8a:b5:95:
50:5d:7a:87:21:c9:c8:47:20:8d:aa:9b:62:7c:99:
c2:b1:93:f4:1d:b3:f4:38:72:6f:5b:0c:76:5e:e4:
17:0b:38:20:9d:47:0e:80:1a:53:ac:de:24:64:9f:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:EA:C7:47:A6:B5:5F:85:67:53:0E:1B:C6:AB:0C:DE:BB:54:45
X509v3 Authority Key Identifier:
keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.104.0/24
Signature Algorithm: sha256WithRSAEncryption
db:29:ea:5e:d4:d3:ad:13:22:43:6f:9b:90:32:cd:b5:16:b0:
36:46:b1:5c:c4:a3:d9:fa:2b:f4:2a:64:ea:08:f5:80:ec:77:
b7:51:d7:ef:43:01:7e:73:a2:46:fa:7e:fc:69:34:22:11:26:
17:e6:e6:b8:2a:db:ff:24:1f:fa:3b:ee:dd:dd:73:46:53:f3:
43:5a:01:08:b2:af:8d:6c:8a:21:82:60:66:9a:ae:07:44:58:
c6:46:0b:1d:ee:49:c8:cc:14:87:af:0b:6c:bd:c2:e1:1a:ba:
2d:1b:98:cf:9f:83:f8:64:e0:49:41:3e:87:67:be:7a:82:9d:
b2:58:ef:72:87:fb:ef:c8:83:9d:61:bb:45:dd:59:32:38:9e:
e2:39:38:c9:69:71:d5:d6:12:5f:2e:60:6b:fe:6a:da:2a:d7:
af:5f:8a:e3:27:78:68:82:a9:e9:d2:e0:aa:05:6c:59:95:7a:
b0:8e:29:d4:f1:ea:5b:a5:98:35:8f:72:a9:03:76:c8:b2:44:
29:c3:74:1e:c9:0a:5b:f0:02:0f:6d:80:16:e3:5c:61:5b:3a:
ad:f2:a3:4e:20:6d:89:bf:c7:83:77:97:b3:93:3e:0c:e3:b6:
34:65:8a:76:bf:75:76:61:50:da:9b:a8:b9:7c:12:a3:d7:18:
45:9e:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:19 2026 by rpki-client