Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132392e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3132392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: uGgj/wZETPYVUOf1SJuwJtfEoqyDdLWCzl/TAAtfTQw=
Subject key identifier: 16:07:8C:20:52:02:46:2E:DC:8D:B4:12:7B:48:9A:C8:4E:53:D5:1B
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 3D4060BBC717114D847324BF6645B2CD55A5B3DF
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132392e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:20 +0000
ROA not before: Sun 05 Apr 2026 02:29:20 +0000
ROA not after: Sun 04 Apr 2027 02:34:20 +0000
asID: 28238
IP address blocks: 187.0.129.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:40:60:bb:c7:17:11:4d:84:73:24:bf:66:45:b2:cd:55:a5:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:20 2026 GMT
Not After : Apr 4 02:34:20 2027 GMT
Subject: CN=16078C205202462EDC8DB4127B489AC84E53D51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:77:7c:eb:e4:fe:85:2a:a9:38:0d:a0:a9:
74:63:a5:4f:bf:f3:9f:f1:b4:52:2d:3a:ee:ce:f4:
8c:22:f7:30:e4:c3:38:c0:bc:1d:8d:8d:14:54:95:
a7:7b:1e:b8:9f:0b:59:f0:76:38:fd:33:50:da:3c:
a5:91:e4:ee:86:ca:fd:14:71:7c:11:b6:f9:0a:f2:
b8:cd:0b:f2:04:e5:d7:7e:cc:83:e1:96:1c:c0:c5:
65:3c:57:14:dd:4c:de:2c:5b:e7:c1:3f:e5:81:f5:
b9:e2:f8:b3:58:a2:db:2c:64:f4:a5:1c:48:b2:92:
ea:95:91:31:33:cb:85:40:75:33:a9:90:b9:1f:9f:
dc:4f:74:3a:38:1b:a6:5b:96:12:1d:78:54:20:c5:
d4:d5:30:dc:68:4e:10:94:fb:bb:80:e0:e3:8d:91:
b9:7d:a7:36:32:ab:49:5a:d6:6c:77:d9:77:75:b5:
d8:19:07:8f:e8:b9:9a:53:ce:7b:cf:b9:4a:f9:e5:
66:e3:71:13:33:e3:b0:93:ed:63:e9:ce:2d:05:d8:
27:19:56:a1:86:7c:5c:8d:d8:27:e2:15:88:e4:22:
cc:c2:c6:5c:17:78:4b:d5:42:f0:d1:21:1a:c0:3a:
6f:ba:73:52:26:e8:1f:ea:f7:b5:3e:62:95:f8:d4:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:07:8C:20:52:02:46:2E:DC:8D:B4:12:7B:48:9A:C8:4E:53:D5:1B
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3132392e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:34:15:1f:7b:5c:b4:02:45:49:6b:5d:9f:38:0c:c6:59:cc:
c6:5a:6f:fc:7d:2b:e9:7c:dc:3c:ad:eb:e2:09:ce:1a:95:f2:
c3:6a:f9:ab:db:46:27:d3:39:4a:fc:47:b7:39:be:97:2a:84:
6f:85:df:1e:bd:63:9c:41:d0:ed:93:a0:f9:1a:97:75:b3:47:
07:4c:d2:8d:49:de:97:83:74:c0:af:2e:62:b1:3c:4b:aa:3d:
03:a0:2c:6b:70:37:d2:c4:fc:97:4a:f4:be:b2:82:a1:3e:94:
04:eb:72:0b:79:72:19:05:25:f2:1c:92:29:c9:7d:18:26:53:
be:63:90:43:c1:1a:3e:79:fd:c7:0c:9d:4c:11:67:1e:b5:4a:
c6:20:d0:11:9d:c3:09:17:f3:2f:8c:37:dc:74:7b:6c:69:96:
c6:c3:87:e3:f0:0a:1c:0a:2c:f5:08:c9:c6:06:0e:d3:4e:99:
06:72:82:a6:b7:a6:22:65:13:46:51:63:ce:0f:c5:fe:9a:d2:
fe:0e:d8:a3:aa:03:49:5e:50:5d:cd:0b:b2:6f:c6:6c:c0:cf:
17:e9:e6:3d:d7:6c:2d:8d:ad:38:de:bd:fd:34:6e:28:a7:67:
a7:67:ce:03:73:33:4f:2c:b7:cc:70:e3:67:28:45:03:fd:6a:
fa:a5:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:29 2026 by rpki-client