Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: jNICY7nWK6+I3aCkhqpqG7W6PKtFiiystPGm1Xn6qjQ=
Subject key identifier: A1:F2:E6:D7:B3:0C:94:47:CC:F0:DE:57:BF:A6:ED:46:12:61:BC:4C
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 2EACBF8971024A390AAF14A608C717E02EDD82C0
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:19 +0000
ROA not before: Sun 05 Apr 2026 02:29:19 +0000
ROA not after: Sun 04 Apr 2027 02:34:19 +0000
asID: 28238
IP address blocks: 187.0.130.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ac:bf:89:71:02:4a:39:0a:af:14:a6:08:c7:17:e0:2e:dd:82:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:19 2026 GMT
Not After : Apr 4 02:34:19 2027 GMT
Subject: CN=A1F2E6D7B30C9447CCF0DE57BFA6ED461261BC4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:54:fa:0c:18:0c:b9:a6:5b:1e:53:e7:cb:
61:f2:38:3e:c2:93:9c:98:95:d2:ea:c7:06:e6:6a:
9a:5b:67:6a:0e:85:fc:cb:27:48:6e:06:cb:bc:fb:
bd:df:13:f2:be:93:92:46:c4:b9:d3:28:d6:e7:f4:
2f:e6:ec:b0:b9:14:ca:d9:27:86:35:84:c0:61:58:
11:76:b7:81:e4:13:98:51:58:0b:3f:32:7a:eb:ba:
12:d4:d0:d6:87:28:93:c3:5c:a6:91:67:97:f8:6d:
16:6d:b5:76:5f:63:52:14:fc:a5:21:19:7a:57:e6:
15:d5:bd:4d:cc:16:da:c8:0d:cf:0c:2a:c0:bf:06:
22:2b:76:05:23:84:6a:ae:08:49:7e:c9:05:d7:bb:
ad:72:82:0a:82:de:44:21:96:18:d5:b7:8d:37:bf:
0a:09:61:6f:b0:3c:9a:fa:46:2e:8e:1f:d3:83:19:
0a:73:f7:6e:76:d3:2e:53:e3:db:ca:9f:b3:15:cf:
4e:4c:64:17:44:9f:62:c6:e5:81:c7:2c:b5:11:dc:
1d:3c:86:a7:ad:14:03:c4:55:96:97:80:22:fb:46:
f8:e5:c4:c0:d6:00:0c:f4:61:c5:87:82:40:52:37:
36:f9:d7:3f:d7:44:2e:be:8a:56:23:7a:f5:6c:e3:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:E6:D7:B3:0C:94:47:CC:F0:DE:57:BF:A6:ED:46:12:61:BC:4C
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2d:28:10:04:7a:84:bc:43:3f:01:f4:0d:26:89:c1:98:d6:
94:e2:14:ab:00:15:00:28:78:67:f3:e8:4e:16:78:59:e4:22:
45:d0:eb:ad:94:84:ea:78:cb:13:0b:58:44:cc:58:f6:25:54:
49:0a:70:7c:53:5f:a7:45:a2:c1:1d:41:1a:4b:d8:e1:c3:a3:
fa:a0:00:bf:57:02:39:43:3d:c0:b7:8b:7e:e0:f6:2c:d5:93:
a2:b3:18:5b:2a:62:a3:81:ae:b5:45:b7:bc:e4:95:a2:aa:b7:
c1:02:cc:b0:ce:38:89:97:5c:04:84:e0:4b:4e:b4:f9:61:f5:
ee:1f:d8:a9:50:69:d5:ab:da:14:34:e0:6a:b4:e0:39:f4:75:
3d:da:a2:cc:ac:f7:36:02:ef:cb:95:36:b6:b6:79:56:56:5e:
30:a9:d0:5b:46:d0:b8:cf:26:ef:05:1a:1e:6c:78:2e:c9:4c:
0e:72:68:65:2d:50:83:82:95:7b:b6:b1:21:26:e5:3e:59:ca:
b7:2c:12:fc:c7:8e:09:af:c1:c1:44:71:f3:50:39:14:e6:e7:
45:1c:4b:fc:96:ec:d6:fc:6c:52:24:33:8c:4d:82:14:a4:08:
6b:39:49:37:ce:b9:16:69:80:12:bd:14:05:d6:2b:df:f2:67:
ed:fc:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:57 2026 by rpki-client