Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa
File: AS53135.roa (raw, json)
Hash identifier: KTJhU6Y/8OLqLhUBD83C0QgRIhlUnvkmFeyLRp2KpPs=
Subject key identifier: 77:3B:78:EA:10:7F:39:74:B5:22:82:2D:69:86:54:EB:C3:73:89:EE
Certificate issuer: /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial: 61CA262AB1CA10BBA70970D7DC3005C1A9A3C2B9
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa
Signing time: Wed 11 Feb 2026 23:36:07 +0000
ROA not before: Wed 11 Feb 2026 23:31:07 +0000
ROA not after: Wed 10 Feb 2027 23:36:07 +0000
asID: 53135
IP address blocks: 131.221.92.0/22 maxlen: 24
138.219.152.0/22 maxlen: 24
168.227.232.0/22 maxlen: 24
170.79.184.0/22 maxlen: 24
177.39.240.0/21 maxlen: 24
177.39.248.0/21 maxlen: 24
186.192.176.0/20 maxlen: 24
186.193.48.0/20 maxlen: 24
191.243.112.0/20 maxlen: 24
2804:1054::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ca:26:2a:b1:ca:10:bb:a7:09:70:d7:dc:30:05:c1:a9:a3:c2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Validity
Not Before: Feb 11 23:31:07 2026 GMT
Not After : Feb 10 23:36:07 2027 GMT
Subject: CN=773B78EA107F3974B522822D698654EBC37389EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:5e:bf:cd:a4:79:56:2c:27:83:f8:b9:71:
9e:de:b0:95:76:13:4f:72:4f:92:a8:9a:53:1f:1a:
e8:bd:ed:6c:e9:64:a5:cd:bf:de:3c:29:27:50:4c:
16:cb:bc:9e:75:ab:7a:24:c5:c3:bd:60:1a:92:27:
a5:1d:b9:85:14:b6:49:4c:d7:e5:bb:71:54:6d:7a:
55:a1:95:9a:ff:a4:38:40:13:76:8b:9a:d1:19:55:
fb:f7:6e:95:62:39:06:e6:46:c5:50:fd:bd:2c:fb:
f6:f6:3a:37:9f:c1:cc:d6:a5:15:b5:19:9a:41:24:
e2:71:87:1f:a0:07:11:88:e4:bf:29:40:7f:d3:bc:
41:e5:ac:2f:2f:c4:f2:49:4b:b6:9d:b4:b9:25:50:
e2:00:07:69:41:2c:e7:67:f9:68:2f:be:eb:9d:65:
c6:b9:ca:ef:b0:d5:c9:0a:b4:68:30:fd:a9:53:4e:
59:72:8f:da:48:d8:1b:b8:a7:c7:8a:4a:17:f6:29:
de:78:10:71:2b:d8:a6:7a:0e:71:ce:f4:94:94:f4:
a8:c1:af:c6:48:d9:d5:21:b9:7b:f0:99:21:8e:fa:
31:62:77:b3:e6:d1:1e:e0:3c:1e:2d:b2:d4:24:76:
b9:3a:dd:fe:a3:42:99:3a:41:48:09:42:be:4b:3f:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:78:EA:10:7F:39:74:B5:22:82:2D:69:86:54:EB:C3:73:89:EE
X509v3 Authority Key Identifier:
keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS53135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.92.0/22
138.219.152.0/22
168.227.232.0/22
170.79.184.0/22
177.39.240.0/20
186.192.176.0/20
186.193.48.0/20
191.243.112.0/20
IPv6:
2804:1054::/32
Signature Algorithm: sha256WithRSAEncryption
80:b1:3c:9e:19:15:73:ca:a9:a0:fe:b8:d1:fa:e0:64:96:b8:
0f:d1:53:41:8f:13:44:56:18:fb:ad:1a:cd:0b:fc:56:b6:ac:
19:4e:a1:1c:16:2e:6d:3e:f1:fe:73:99:ca:bf:58:64:c3:16:
66:f9:96:25:09:8a:12:2b:43:aa:19:3d:e8:43:59:ea:b5:3d:
0e:66:31:49:0a:61:8e:0f:9d:cc:12:bf:ec:13:e4:2d:77:45:
0d:1a:dc:54:0c:5c:0d:df:9c:b9:63:99:a9:23:42:26:41:b8:
79:67:3d:7f:65:f9:78:9d:c8:32:4b:9d:ee:7e:32:9e:9f:91:
74:0d:47:4d:e3:6b:33:ef:9b:5e:fa:1f:0b:6c:74:fd:55:c1:
dc:f9:6e:a4:72:ea:7b:df:ec:33:73:0d:2f:58:51:51:bd:5d:
c8:f0:91:1b:74:19:6a:88:46:68:be:49:70:c9:d6:a0:57:80:
01:1a:7f:23:49:7b:40:96:f6:d1:de:41:b4:82:e5:59:4a:32:
35:26:01:e7:df:d7:ad:90:e8:8f:97:55:67:f7:65:b6:1a:21:
54:9d:9d:1f:54:a4:6b:2d:2c:a1:c5:86:cf:b7:e1:36:e8:f9:
f8:aa:2f:ec:d1:46:18:6e:f2:d6:7c:7e:e0:2e:14:ac:3a:6e:
2a:8d:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:18 2026 by rpki-client