Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa
File: 3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa (raw, json)
Hash identifier: hofxl1Sy2q/Nmz2j6SgaPWq9eL78mYOGWv5UjWbVPBo=
Subject key identifier: D3:7B:F5:6E:95:CA:D2:F2:9E:6A:D3:02:B7:0A:48:DF:F5:EA:FB:58
Certificate issuer: /CN=B2EFD99E92406AF7ABBEF31EE4BB0E8542A6554E
Certificate serial: 08C3E4D1990663AF843477771333E566F9C7822E
Authority key identifier: B2:EF:D9:9E:92:40:6A:F7:AB:BE:F3:1E:E4:BB:0E:85:42:A6:55:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2EFD99E92406AF7ABBEF31EE4BB0E8542A6554E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa
Signing time: Tue 27 Jan 2026 17:22:52 +0000
ROA not before: Tue 27 Jan 2026 17:17:52 +0000
ROA not after: Tue 26 Jan 2027 17:22:52 +0000
asID: 270514
IP address blocks: 177.11.128.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c3:e4:d1:99:06:63:af:84:34:77:77:13:33:e5:66:f9:c7:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2EFD99E92406AF7ABBEF31EE4BB0E8542A6554E
Validity
Not Before: Jan 27 17:17:52 2026 GMT
Not After : Jan 26 17:22:52 2027 GMT
Subject: CN=D37BF56E95CAD2F29E6AD302B70A48DFF5EAFB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:74:33:75:2d:f2:19:e0:36:40:b7:bb:2e:
26:9a:f7:08:8f:e0:4c:63:40:1e:32:4d:bd:22:f6:
a8:a7:43:eb:8a:fc:ad:20:d4:cb:84:31:0b:a2:f3:
f4:66:59:31:66:67:00:31:cc:b3:c4:55:2c:09:4b:
67:d4:3c:69:62:ee:00:20:74:87:09:0f:91:d9:d6:
24:6f:cc:bf:42:59:d5:c2:60:3e:be:45:03:f6:1f:
cd:9d:b7:df:43:cd:1f:83:d2:4f:77:ee:db:8e:52:
18:3e:65:d7:de:82:2f:ce:04:c7:c1:0c:70:75:b7:
1d:3e:88:3b:bf:67:85:d1:0b:e2:61:43:44:89:09:
69:b5:4f:19:3f:e7:e7:01:b1:b9:de:8f:08:e8:98:
f0:91:67:b7:cc:26:fa:68:06:9a:53:e0:52:46:1b:
58:76:08:9b:ca:62:d3:7c:74:96:f8:18:77:c2:8f:
c4:c6:59:5a:0f:b0:6a:a6:95:18:26:4b:f1:aa:48:
66:57:14:77:6b:e2:3f:35:43:50:14:06:45:2b:98:
93:af:ab:b1:d0:7a:f5:4a:80:fa:59:f0:33:db:3f:
e7:de:35:f3:83:cb:11:85:3e:2a:a4:d5:ae:7b:93:
22:3f:d4:79:8a:ff:a5:46:db:b3:ac:4f:7d:e7:53:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:F5:6E:95:CA:D2:F2:9E:6A:D3:02:B7:0A:48:DF:F5:EA:FB:58
X509v3 Authority Key Identifier:
keyid:B2:EF:D9:9E:92:40:6A:F7:AB:BE:F3:1E:E4:BB:0E:85:42:A6:55:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/B2EFD99E92406AF7ABBEF31EE4BB0E8542A6554E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2EFD99E92406AF7ABBEF31EE4BB0E8542A6554E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/0/3137372e31312e3132382e302f32322d3234203d3e20323730353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.11.128.0/22
Signature Algorithm: sha256WithRSAEncryption
68:9b:7d:f2:61:95:76:19:2d:19:2e:08:a9:e5:d7:12:56:6f:
1f:3e:d9:82:c8:da:4c:2b:b2:3b:2a:3c:bb:7c:41:1c:78:49:
99:cd:95:57:49:0b:50:07:32:59:95:d0:09:e1:de:45:c6:22:
d9:d5:32:d3:00:33:ba:ee:91:a1:bd:10:65:e7:5b:40:98:f4:
72:9b:a0:31:4b:d4:62:97:ad:62:d7:bd:cb:ad:1d:78:15:c6:
3b:0f:54:7a:be:9a:01:b5:6a:1b:41:03:81:08:b8:aa:3b:0b:
b5:7c:a8:53:da:f1:9d:fa:40:1a:f1:68:df:1b:ee:60:79:e9:
01:b4:6f:38:a5:0c:6e:4b:93:fb:96:c1:b4:f2:cc:2d:e3:b9:
39:c4:ba:2e:87:c8:56:29:03:93:75:36:0c:c2:70:32:02:0b:
dc:fc:e3:d4:95:00:6d:ad:61:df:1e:38:1a:d4:53:bc:5d:fa:
90:d9:5a:23:b4:1c:1b:7a:a3:c9:a4:27:80:4c:4e:81:f0:3a:
7a:50:46:df:3d:f6:4a:a4:b8:dc:4b:32:b1:46:b7:b7:ea:b4:
f9:47:a3:27:29:ee:57:8c:f1:2e:7b:a5:47:40:2d:1d:18:1e:
30:57:93:8c:73:23:37:fc:b0:8a:d3:1a:91:50:13:ef:52:77:
74:96:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:17 2026 by rpki-client