Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133352e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          qWRLoZf6gPdNqRnplgjCmTDFhXd9/SiqcUOLT8cmQA8=
Subject key identifier:   E9:33:3B:8A:D1:5F:D2:A1:78:D9:E8:B0:9B:DC:F3:0B:DB:1D:8E:85
Certificate issuer:       /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial:       5018D3C89BE046AB40AC8CE48EE43A558CB8AE2B
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133352e302f32342d3234203d3e203238323338.roa
Signing time:             Sun 05 Apr 2026 02:34:22 +0000
ROA not before:           Sun 05 Apr 2026 02:29:22 +0000
ROA not after:            Sun 04 Apr 2027 02:34:22 +0000
asID:                     28238
IP address blocks:        187.0.135.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:18:d3:c8:9b:e0:46:ab:40:ac:8c:e4:8e:e4:3a:55:8c:b8:ae:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
        Validity
            Not Before: Apr  5 02:29:22 2026 GMT
            Not After : Apr  4 02:34:22 2027 GMT
        Subject: CN=E9333B8AD15FD2A178D9E8B09BDCF30BDB1D8E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:e1:6b:e1:f7:73:9c:3b:ac:fc:9c:84:94:
                    16:99:59:24:d9:e1:28:94:df:a1:52:6b:eb:2b:3a:
                    12:b3:56:1c:0f:90:1c:a6:82:16:02:5e:f2:57:2c:
                    65:65:07:ca:50:63:a3:e6:d7:b3:63:f2:03:39:8d:
                    49:59:1d:9e:a9:e6:d1:49:e8:c8:8e:2a:a8:6c:d0:
                    60:a1:00:d9:2d:de:bd:76:23:2c:95:b3:03:2c:e8:
                    a8:71:33:4f:23:ff:e0:01:7c:ef:40:4d:a7:bc:2d:
                    91:c0:56:53:5c:fa:c8:42:af:a7:66:54:5a:28:25:
                    f7:2e:21:c2:8f:71:92:4f:a1:5c:13:6a:d5:69:6a:
                    fc:99:8a:2a:88:fb:02:e2:47:ed:61:d9:87:b7:55:
                    96:13:99:14:cf:7a:06:25:a0:eb:ad:db:59:2e:c8:
                    f9:17:a7:73:89:61:32:93:15:8d:fa:2f:fa:2a:82:
                    48:ee:7d:b3:ad:86:f4:8c:aa:6a:d0:08:5d:87:75:
                    fc:7a:48:99:69:0d:ac:dc:9a:dd:32:dc:42:25:b8:
                    89:62:40:63:ab:3d:2c:1b:d0:dc:8e:30:9e:a3:89:
                    13:90:ea:3c:57:5c:86:96:bb:c6:4a:ef:88:8b:7e:
                    1a:80:8f:d2:bc:8d:af:1b:eb:5c:f9:5f:8f:c1:81:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:3B:8A:D1:5F:D2:A1:78:D9:E8:B0:9B:DC:F3:0B:DB:1D:8E:85
            X509v3 Authority Key Identifier:
                keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133352e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:29:4d:8e:40:de:1a:8c:bb:78:f9:d7:d8:9e:34:39:ea:
         9b:32:bc:a1:f7:22:2b:33:aa:3f:ca:46:49:81:2c:2d:9c:fb:
         61:32:8a:97:99:83:e3:f5:13:0f:92:32:a8:0a:a0:19:63:b3:
         dd:ac:ec:44:b9:b4:6c:b9:79:48:c7:c6:a9:db:f0:99:b0:e2:
         1d:60:d3:f2:98:58:4d:51:54:fa:6d:86:a1:38:9a:b1:0a:dd:
         6d:cd:35:16:fe:25:c7:dd:d8:9f:95:9e:eb:50:9c:6b:72:77:
         84:33:43:ca:b3:e9:e3:23:20:a3:e4:b9:ac:42:8a:ec:88:1d:
         1e:2a:f5:11:c4:f9:a3:d7:28:1c:fc:92:6a:64:a5:81:3a:0e:
         e6:c2:52:7a:83:66:30:3a:e6:2e:9d:56:90:aa:71:cd:08:77:
         7a:1f:d7:13:bb:57:23:b3:ab:68:f4:fc:62:5b:64:42:65:13:
         ab:26:0f:a6:4c:8b:b8:73:03:a6:7e:b0:1d:b8:ef:5a:0f:3e:
         ec:56:b5:0d:e9:b5:40:4a:f2:8c:63:b1:b3:b9:94:9b:24:3c:
         0d:30:dc:af:9f:45:d9:13:32:ba:61:3e:a9:ab:9a:65:52:5e:
         a9:2b:ac:d6:9b:bb:4b:bf:0b:4f:9b:f6:0f:e1:c1:71:23:ac:
         20:99:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:30 2026 by rpki-client