Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133312e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: L3hEX4Ruiow6pHFYxPKaf3WZM7TbkaQNqQ2w0OEODi4=
Subject key identifier: BE:39:FA:57:83:27:8E:40:81:C0:25:58:6F:73:41:7F:C7:39:CC:D4
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 4BC1E1E8C7A039CEA76C2FEAB735E66792CB4024
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:18 +0000
ROA not before: Sun 05 Apr 2026 02:29:18 +0000
ROA not after: Sun 04 Apr 2027 02:34:18 +0000
asID: 28238
IP address blocks: 187.0.131.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c1:e1:e8:c7:a0:39:ce:a7:6c:2f:ea:b7:35:e6:67:92:cb:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:18 2026 GMT
Not After : Apr 4 02:34:18 2027 GMT
Subject: CN=BE39FA5783278E4081C025586F73417FC739CCD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:c0:35:fc:bd:e4:11:43:3a:2d:8d:f9:b6:
5c:2b:30:ca:0f:13:6a:0d:97:ff:aa:94:aa:84:34:
5c:07:ed:00:64:4e:78:21:fe:3d:cd:42:9c:1f:29:
17:a5:b1:3d:10:a3:3d:2d:e1:93:fd:f0:f1:d4:c8:
56:7b:7f:58:0e:22:bf:b9:36:f2:73:57:52:fc:2c:
4b:90:ee:36:c6:e0:19:e4:45:4c:a4:78:f6:57:91:
b9:76:2b:e7:50:8d:14:c9:b8:a2:5d:fa:d5:d9:84:
e5:bb:34:66:93:a4:e9:13:bd:72:ca:23:55:b8:41:
b2:d4:16:89:b2:5f:90:e5:0b:3e:e2:a0:ce:aa:7a:
a9:c4:49:4a:28:af:a3:05:0d:2c:0f:84:8a:92:a3:
0a:ce:31:db:9f:50:64:66:33:b1:fc:3a:e0:e6:dd:
04:37:77:b5:a5:42:8f:75:23:30:3f:c9:7a:86:60:
64:fd:c3:79:3e:66:69:fb:c9:fe:3d:5d:80:50:6c:
21:13:2a:7f:d4:ac:26:39:b7:c3:86:19:48:ad:83:
1a:56:d6:bc:69:42:58:5a:06:42:32:24:3c:c3:68:
47:6b:65:32:60:f5:41:da:7d:92:44:9c:a5:47:23:
34:70:aa:3c:83:84:4c:bb:57:2d:c4:4e:75:ce:1b:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:FA:57:83:27:8E:40:81:C0:25:58:6F:73:41:7F:C7:39:CC:D4
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133312e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.131.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9b:ac:6f:e9:44:7b:88:59:1a:ca:c9:49:4e:87:5f:30:f4:
d6:7a:81:3c:e3:5e:2b:8c:79:d3:e6:7d:bf:ba:d5:2c:eb:07:
8d:21:0c:98:a6:9c:38:57:b5:ee:2b:e0:94:99:7a:24:71:a1:
26:48:31:1a:1d:c3:fb:f0:4a:da:31:17:cb:36:2b:3d:99:e2:
35:98:68:d4:6a:bc:c0:68:12:dc:2b:61:5b:ef:aa:6d:47:02:
2b:14:52:79:b2:eb:2f:dd:06:83:20:88:83:fe:e1:02:6d:5a:
1a:ce:31:30:d9:c0:0c:a6:53:05:b4:ba:25:44:9f:8c:dc:e8:
69:20:fc:21:96:d8:49:67:55:da:7f:ce:d0:0b:78:88:9d:ed:
5e:c0:6c:3d:13:06:0a:a7:71:54:f3:8f:1c:03:f5:93:cd:d7:
26:94:d0:cf:62:0e:50:e3:22:1a:93:b4:58:b3:d9:fb:db:d0:
7c:47:fe:57:db:a3:d4:cf:68:aa:dc:49:33:35:f1:75:38:ef:
9a:e8:c5:a1:7e:6d:37:cc:1c:ce:f8:78:da:40:cd:09:fb:b5:
8c:aa:b4:ea:29:c6:e9:5c:d1:94:dc:2e:d6:5d:4f:0d:91:6c:
1f:24:f4:b9:21:e4:b4:ea:be:20:c3:55:c6:a8:c9:ab:49:2b:
49:f3:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:34 2026 by rpki-client