Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133342e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: TUQQ9zKoIb0XK8g6RWnoZpt/E45ezY6yZUSL7p83kpg=
Subject key identifier: C5:49:9D:B1:AF:9D:D9:7A:7A:BF:EA:A8:95:25:89:65:DB:68:AF:5A
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 7BA2E4508DD3F1A534A1C7BA7A91FDA8F172F6BA
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:21 +0000
ROA not before: Sun 05 Apr 2026 02:29:21 +0000
ROA not after: Sun 04 Apr 2027 02:34:21 +0000
asID: 28238
IP address blocks: 187.0.134.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a2:e4:50:8d:d3:f1:a5:34:a1:c7:ba:7a:91:fd:a8:f1:72:f6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:21 2026 GMT
Not After : Apr 4 02:34:21 2027 GMT
Subject: CN=C5499DB1AF9DD97A7ABFEAA895258965DB68AF5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:89:38:bd:30:15:4a:83:2d:be:fa:46:3a:
3f:ab:8f:61:cd:58:f3:77:9f:13:46:41:83:8d:30:
a8:7a:2f:78:61:21:17:23:ad:61:33:76:7d:41:74:
d3:a6:5c:c6:6c:e2:71:47:b6:8a:4d:7c:db:60:31:
eb:44:ac:57:4f:66:90:3b:e2:b8:77:b1:bf:e3:f9:
67:ad:48:9c:34:fb:36:57:60:20:88:c7:ba:31:d9:
87:63:a9:3a:5f:e5:47:25:b4:b1:eb:9b:56:fc:61:
c1:c3:67:8b:8e:51:f7:bb:6a:d2:7d:8f:ab:97:0d:
c7:4d:de:f9:2b:39:39:ac:38:18:3a:44:e1:78:41:
15:8c:cc:13:92:c4:78:cb:81:02:d0:a5:6f:7e:2e:
ed:a2:c6:c8:21:24:dc:12:f4:05:07:ec:a6:6c:83:
34:06:32:d4:58:84:02:e9:ba:da:e0:a0:39:58:74:
c5:3a:64:5b:57:33:86:2b:d5:57:bc:52:c2:af:47:
c6:cc:6a:43:3c:2c:5c:11:9e:df:61:6b:7d:5f:2c:
4a:d6:4d:76:b0:ba:ab:2c:7a:7d:60:9a:ec:44:87:
cb:74:61:60:4d:1e:c7:aa:d6:7e:03:d0:35:d0:9b:
99:54:cf:b8:c3:f1:b2:c8:32:98:09:7a:29:50:0d:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:9D:B1:AF:9D:D9:7A:7A:BF:EA:A8:95:25:89:65:DB:68:AF:5A
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133342e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ff:4b:34:b9:c5:a6:78:24:47:93:84:5d:1a:4f:e8:7c:5d:
5e:04:97:01:5b:2d:a1:ff:de:c0:02:f3:a0:aa:1e:6b:5f:c3:
d0:05:9d:ae:97:84:fd:17:1b:3c:5c:2a:96:52:1b:56:4f:98:
5d:7c:eb:98:2f:5e:e6:49:bd:2a:d1:22:e9:14:7a:41:7d:21:
1d:92:ae:1e:2a:e0:7f:04:fa:95:ce:a5:f2:d1:3a:9f:f9:e1:
9b:c4:8a:95:82:e7:c8:5a:1a:5f:3a:6a:5c:13:26:61:94:03:
87:75:52:bd:ec:81:10:21:aa:8d:ae:f0:71:c2:eb:9d:b4:9f:
19:68:94:8f:e0:90:b5:26:de:a2:b0:c4:90:31:9b:88:c1:cb:
79:5f:97:d8:c9:3a:40:29:0f:af:8e:ef:f8:6d:45:df:c4:ad:
4f:4c:39:1c:e1:5c:0e:93:3f:5f:9c:46:3f:63:f1:13:5b:65:
66:65:af:42:7c:1e:25:7a:15:16:71:41:18:6b:0e:09:f1:a8:
6b:26:db:af:a0:e2:d2:7e:66:28:79:95:56:7a:ca:61:d3:08:
38:91:e9:f1:90:80:dd:d1:31:ec:d3:a9:12:a0:ab:17:d6:46:
a4:1f:ae:8b:9b:ea:4d:6f:9f:6b:9f:87:3c:8a:6b:94:fb:dc:
cb:e7:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:29:24 2026 by rpki-client