Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133332e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: WHn8X/yUIeRqDf9EmAXcD5SjzKUQRtUGGWqYehSxtiE=
Subject key identifier: 3E:5D:0E:A1:97:00:C6:8D:49:01:28:C7:CA:26:20:02:D6:8F:A1:0E
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 4D455FEB3E719873542FA32D2A32A90E68917E33
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:21 +0000
ROA not before: Sun 05 Apr 2026 02:29:21 +0000
ROA not after: Sun 04 Apr 2027 02:34:21 +0000
asID: 28238
IP address blocks: 187.0.133.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:45:5f:eb:3e:71:98:73:54:2f:a3:2d:2a:32:a9:0e:68:91:7e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:21 2026 GMT
Not After : Apr 4 02:34:21 2027 GMT
Subject: CN=3E5D0EA19700C68D490128C7CA262002D68FA10E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:93:a6:ae:f9:ed:e3:2a:cc:9f:48:3b:a1:
3b:cb:49:e2:bc:7d:6c:7b:dd:a7:5b:59:4d:b5:14:
ca:75:2d:8f:b3:50:cf:3a:02:6b:c6:b8:b3:2a:47:
5d:8f:5d:28:df:ed:c6:a1:4b:3e:8b:d8:7d:92:e8:
09:1f:72:4a:55:de:95:f8:cd:1f:22:d2:a7:45:30:
b1:f9:71:89:0a:31:2d:53:7f:2a:aa:60:47:35:04:
1f:67:42:cf:fd:df:27:9d:e5:9a:db:da:80:cc:79:
fa:84:88:64:d9:df:94:2f:82:a1:0a:19:5f:a5:cb:
96:7a:5b:2b:eb:a1:6d:c5:10:d5:da:3f:4c:e5:a2:
f3:dc:8c:5b:e4:d0:b9:81:db:2a:7f:1d:7c:ed:47:
70:de:16:4c:ab:5a:37:97:04:8a:ca:26:5e:12:7f:
10:08:bf:11:f0:d3:d4:00:90:2a:8c:34:c3:34:f0:
de:b3:d9:1d:6a:c7:90:91:9c:39:7d:1d:cc:77:87:
4a:e9:61:f0:5e:58:b1:18:87:3a:57:be:e4:62:71:
3a:81:3c:21:bf:13:cb:26:9c:0c:0e:c3:b4:84:59:
f4:6e:ca:b4:f4:81:45:2f:e1:50:77:2d:30:66:e0:
74:a6:92:8c:a3:b2:71:f4:19:1d:c2:0d:60:46:42:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:0E:A1:97:00:C6:8D:49:01:28:C7:CA:26:20:02:D6:8F:A1:0E
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133332e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5a:59:63:d8:4a:70:77:af:bb:3a:3d:78:19:b0:1f:0e:a3:
55:6d:72:3c:3a:69:e6:4a:07:9c:7c:15:20:d2:a1:5b:8c:6a:
06:d1:53:f8:96:51:d4:be:3b:14:7f:53:a6:7b:b1:1b:85:64:
20:8d:0c:41:13:3e:d3:3a:39:c1:68:72:c4:28:5d:f8:e9:f9:
15:f8:a2:93:ca:df:10:8f:35:c6:fb:45:95:5e:50:2b:8b:a0:
da:88:7a:ee:22:64:5b:58:6c:e3:da:38:e3:de:8d:75:67:53:
ff:44:4d:8c:9f:5e:8f:62:76:bf:d6:78:65:39:b1:8f:91:3d:
aa:8c:c5:53:6e:95:c9:56:20:ee:1f:12:4e:6c:d0:e6:5a:71:
ac:e9:00:61:73:b2:8b:bb:b6:03:63:02:83:d2:b7:a4:1a:2b:
0f:a0:5f:0f:69:9a:03:4e:88:fe:b7:0a:63:52:fc:20:3a:a0:
e1:de:be:82:ce:79:fc:c2:df:ec:fc:2d:e2:32:48:da:b0:12:
f9:3e:5b:73:e8:e7:57:c8:03:05:c9:7a:de:8c:44:d6:05:d0:
eb:9c:e4:cf:f3:3b:99:51:f9:07:67:f0:a2:ab:40:33:a8:ce:
55:53:0f:6a:99:ea:4f:d0:00:47:2a:77:55:f3:3b:e9:a1:35:
0c:85:a9:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTUVf6z5xmHNUL6MtKjKpDmiRfjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzNkNDNzlDODM2NkE4NjY0QTRFMzFBOTY1QkFFMURB
QTA5NDA0NTAeFw0yNjA0MDUwMjI5MjFaFw0yNzA0MDQwMjM0MjFaMDMxMTAvBgNV
BAMTKDNFNUQwRUExOTcwMEM2OEQ0OTAxMjhDN0NBMjYyMDAyRDY4RkExMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw25Omrvnt4yrMn0g7oTvLSeK8
fWx73adbWU21FMp1LY+zUM86AmvGuLMqR12PXSjf7cahSz6L2H2S6AkfckpV3pX4
zR8i0qdFMLH5cYkKMS1TfyqqYEc1BB9nQs/93yed5Zrb2oDMefqEiGTZ35QvgqEK
GV+ly5Z6WyvroW3FENXaP0zlovPcjFvk0LmB2yp/HXztR3DeFkyrWjeXBIrKJl4S
fxAIvxHw09QAkCqMNMM08N6z2R1qx5CRnDl9Hcx3h0rpYfBeWLEYhzpXvuRicTqB
PCG/E8smnAwOw7SEWfRuyrT0gUUv4VB3LTBm4HSmkoyjsnH0GR3CDWBGQhBvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPl0OoZcAxo1JASjHyiYgAtaPoQ4wHwYDVR0j
BBgwFoAUrzbMecg2aoZkpOMalluuHaoJQEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZMZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9O
NVkvMy9BRjM2Q0M3OUM4MzY2QTg2NjRBNEUzMUE5NjVCQUUxREFBMDk0MDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMzZDQzc5QzgzNjZBODY2
NEE0RTMxQTk2NUJBRTFEQUEwOTQwNDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWTGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzMv
MzEzODM3MmUzMDJlMzEzMzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsAhTANBgkqhkiG9w0BAQsFAAOCAQEAc1pZY9hKcHev
uzo9eBmwHw6jVW1yPDpp5koHnHwVINKhW4xqBtFT+JZR1L47FH9TpnuxG4VkII0M
QRM+0zo5wWhyxChd+On5Ffiik8rfEI81xvtFlV5QK4ug2oh67iJkW1hs49o4496N
dWdT/0RNjJ9ej2J2v9Z4ZTmxj5E9qozFU26VyVYg7h8STmzQ5lpxrOkAYXOyi7u2
A2MCg9K3pBorD6BfD2maA06I/rcKY1L8IDqg4d6+gs55/MLf7Pwt4jJI2rAS+T5b
c+jnV8gDBcl63oxE1gXQ65zkz/M7mVH5B2fwoqtAM6jOVVMPapnqT9AARyp3VfM7
6aE1DIWpQA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:16:14 2026 by rpki-client