Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28664.roa
File: AS28664.roa (raw, json)
Hash identifier: KmD1UubVbpkGx62+7p87+LM2oH3bYWlSjfdWX4eQJWY=
Subject key identifier: 13:D1:BA:E0:DD:81:04:3B:47:FC:17:15:5D:65:50:9B:1B:8D:D9:32
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 423775F9481354377832E99ACFECC963E2543D80
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28664.roa
Signing time: Wed 11 Feb 2026 23:36:07 +0000
ROA not before: Wed 11 Feb 2026 23:31:07 +0000
ROA not after: Wed 10 Feb 2027 23:36:07 +0000
asID: 28664
IP address blocks: 189.1.80.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:37:75:f9:48:13:54:37:78:32:e9:9a:cf:ec:c9:63:e2:54:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Feb 11 23:31:07 2026 GMT
Not After : Feb 10 23:36:07 2027 GMT
Subject: CN=13D1BAE0DD81043B47FC17155D65509B1B8DD932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:75:e0:67:a0:d6:68:6d:b2:b3:1c:35:e9:
71:d4:ef:c9:9a:5a:21:b0:d1:f2:f4:82:07:3b:5c:
08:97:d0:a2:e8:cc:ce:57:41:de:24:f3:68:5d:18:
5e:86:09:3d:fa:48:1a:59:39:5b:16:59:cd:cb:64:
3c:a3:d5:95:a7:ec:10:2f:c7:30:24:fc:b7:5a:aa:
2f:e4:d8:2a:c7:9a:cb:ee:06:90:b4:36:7b:bd:eb:
d5:db:00:f3:b3:cb:6f:9f:5c:a6:52:81:30:45:a6:
89:9d:be:20:12:28:98:b0:8d:9d:3f:e4:29:12:5d:
ba:84:6c:0c:25:a8:81:38:96:43:e7:fb:b9:19:59:
fa:44:34:46:0a:87:32:59:eb:b9:a0:c9:a5:83:0c:
8b:95:68:2a:d1:94:71:b4:10:57:81:19:14:07:b7:
df:e3:86:83:15:ed:3c:31:6a:2d:ac:2f:1a:b7:6c:
c9:4f:7a:ee:c1:ee:03:07:a6:11:69:9b:5a:db:47:
48:6a:b5:81:aa:a0:15:7a:22:cd:c1:96:dd:14:61:
f0:ff:74:a2:3a:3b:31:2d:1d:84:25:4d:71:30:d7:
47:c4:ab:5b:72:5d:08:11:a5:6e:5a:e8:33:37:03:
46:4c:0e:85:2e:d3:1a:64:3b:71:de:91:30:ba:f4:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D1:BA:E0:DD:81:04:3B:47:FC:17:15:5D:65:50:9B:1B:8D:D9:32
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS28664.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.80.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:f3:1f:42:60:51:c7:72:38:6b:dc:6b:c9:ae:ef:e5:8c:99:
91:a5:64:4e:8f:24:86:47:9f:21:93:09:c2:db:4a:08:4a:8a:
3e:a2:ad:82:c0:29:d0:34:02:9c:e7:a7:38:68:e1:d3:84:d0:
34:1d:b9:50:fc:02:8e:f0:86:c9:e0:c4:25:d4:82:c5:9f:bf:
3f:b6:5c:78:84:9a:17:43:bc:94:bd:8c:4e:49:ce:de:0a:f9:
60:4d:6f:25:b9:26:a9:5f:6b:ba:ff:4c:e9:0d:30:e6:a4:bc:
a9:01:17:86:ee:1e:ae:1f:ec:6a:f2:77:40:80:9f:9e:ae:14:
bd:d3:73:ab:70:3c:8c:91:06:73:aa:e5:ff:55:fa:37:5a:e5:
ce:6e:54:38:9a:4e:59:c3:47:4e:c2:ea:4b:bf:e2:90:05:0e:
fb:77:d9:4d:27:db:a9:04:ff:1c:79:c0:39:51:b1:b8:97:59:
c6:6d:96:89:e7:01:89:ca:1b:dd:10:d9:10:b4:3c:f0:c4:b6:
0f:56:2b:16:ed:52:58:83:38:32:f5:88:b9:1e:56:7b:ad:2d:
a9:53:d2:1d:e1:7c:19:8d:91:3b:9d:91:78:9f:b7:78:7c:7f:
7d:37:2f:ff:f8:be:08:2f:d3:ed:2e:5c:11:45:f0:d9:75:4d:
e5:43:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:10 2026 by rpki-client