Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133362e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133362e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: OP/PZ1emSjrpIdL6Az65e+yqqw/htSjRfHnOLFLzDK0=
Subject key identifier: 82:A6:B1:1A:38:17:6C:C8:FA:DC:2C:82:CB:38:C9:A0:80:10:70:3C
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 44DF034703A145515F1F32EEA4BA68245D5C47CA
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133362e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:22 +0000
ROA not before: Sun 05 Apr 2026 02:29:22 +0000
ROA not after: Sun 04 Apr 2027 02:34:22 +0000
asID: 28238
IP address blocks: 187.0.136.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:df:03:47:03:a1:45:51:5f:1f:32:ee:a4:ba:68:24:5d:5c:47:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:22 2026 GMT
Not After : Apr 4 02:34:22 2027 GMT
Subject: CN=82A6B11A38176CC8FADC2C82CB38C9A08010703C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:2e:2d:3e:2f:e1:5a:f9:68:f5:70:cd:b3:
3e:b8:b6:29:eb:f9:64:1d:6b:95:45:92:a9:b2:a9:
8c:55:16:25:77:4a:0e:27:12:e0:78:20:2c:21:31:
c3:eb:ff:2b:71:bd:b1:a7:b9:39:6e:7b:9f:34:5d:
df:35:48:6d:ff:9b:e0:38:f6:99:ea:c4:2f:24:3b:
38:91:36:66:ac:bd:11:3b:6a:ab:99:9a:db:5d:e8:
63:00:95:62:1e:a9:f9:e0:b9:48:39:59:d3:58:ce:
1f:3e:6e:e0:6b:35:2e:9b:51:8e:d2:2a:8b:02:14:
d6:63:70:3a:5b:33:2c:f1:5c:c0:64:22:84:e4:a8:
31:e6:14:16:37:60:54:24:d9:73:22:94:ba:ce:fd:
2b:d7:b2:a9:95:69:21:b6:13:c9:85:4f:81:67:f3:
43:c4:24:f1:70:ea:b1:97:ae:ba:da:70:27:71:90:
39:2a:69:b7:cb:b9:f2:5e:da:84:c2:fc:38:b6:56:
27:ce:bd:76:6f:ed:17:d6:27:f1:b8:0f:cf:f4:23:
d4:1b:7b:c1:a9:36:b0:3c:ea:5f:44:da:9a:10:79:
ad:9b:cc:53:28:68:03:28:a4:bd:7e:7a:04:05:d2:
23:22:d6:a1:e8:d5:ad:a1:47:ae:5f:99:20:21:8d:
86:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:B1:1A:38:17:6C:C8:FA:DC:2C:82:CB:38:C9:A0:80:10:70:3C
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133362e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.136.0/24
Signature Algorithm: sha256WithRSAEncryption
99:19:b4:f9:a6:15:19:a0:33:00:89:31:e8:5f:b1:55:b6:6d:
95:fa:30:4e:1b:e1:06:59:bd:20:d4:56:64:05:cb:df:c5:6d:
91:2d:62:c4:f6:e9:f7:35:2f:22:ad:75:7f:15:a8:b8:3b:54:
4f:3e:02:af:4b:89:31:d4:b2:4e:e5:06:64:f3:81:bf:a3:de:
2d:35:dd:9a:4f:54:ee:bc:6a:87:87:88:ff:0f:14:8b:65:a2:
19:21:dc:85:47:3f:d0:24:49:2b:8c:ab:9c:94:e8:7c:5a:e4:
c6:36:59:2e:f7:52:6b:c5:12:80:1e:78:43:ec:3d:ba:0a:be:
0e:85:98:3b:f5:27:31:dd:b0:c8:b5:8c:1e:8b:e5:cc:a3:36:
93:70:9c:c1:9d:ca:e5:1f:95:b7:c7:d1:2c:e2:19:39:75:36:
58:6c:bf:1d:ec:7a:06:a3:e5:a0:a0:c6:6b:34:65:71:00:82:
15:d6:b3:10:9e:94:bd:05:27:3d:60:ce:6b:05:8c:c1:a8:26:
25:01:89:a2:77:e9:d1:14:0f:35:d6:ff:26:1c:32:5b:fa:1a:
72:23:81:4e:1b:5b:5f:ad:ea:85:f1:4f:57:d6:47:b0:83:fa:
f4:cc:dc:6f:69:93:4a:5b:80:8c:61:0f:49:e8:97:78:7a:05:
15:80:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:22:01 2026 by rpki-client