Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133372e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133372e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: fHeQqvy7zlVIh0UOi7Mxle0aepqh4m4Ql72B9KQ1KIU=
Subject key identifier: BF:63:44:AF:47:04:4B:C7:11:E4:26:C4:7E:BC:6A:1F:C5:F7:EB:FC
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 42E97F9CCA448B554DF52DD563DFA8B962A2D6AC
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133372e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:21 +0000
ROA not before: Sun 05 Apr 2026 02:29:21 +0000
ROA not after: Sun 04 Apr 2027 02:34:21 +0000
asID: 28238
IP address blocks: 187.0.137.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e9:7f:9c:ca:44:8b:55:4d:f5:2d:d5:63:df:a8:b9:62:a2:d6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:21 2026 GMT
Not After : Apr 4 02:34:21 2027 GMT
Subject: CN=BF6344AF47044BC711E426C47EBC6A1FC5F7EBFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:35:b8:e4:17:f3:21:67:92:0c:a5:6a:44:
4c:d6:57:6b:26:36:78:32:24:8b:13:76:e5:e1:ee:
5a:e8:de:ef:25:52:93:66:74:07:b1:ad:02:ff:2e:
b2:03:69:4d:cd:95:0c:24:ad:d3:30:8e:a9:bf:b5:
d4:da:b9:b9:d0:75:9f:44:2d:bf:38:cf:02:41:9c:
7a:11:9f:6a:55:1b:0f:29:29:f1:bc:d5:22:39:9c:
f9:33:4b:32:a3:e7:9f:8a:83:66:4e:29:ad:da:bb:
c8:6c:11:e4:14:7d:5e:c3:e9:6e:7a:8b:5d:7a:19:
6e:ff:56:6c:77:46:eb:76:64:3e:d3:cd:93:eb:3e:
bd:87:30:c0:97:59:95:1e:6b:02:58:40:86:3f:07:
35:65:be:09:55:e9:4e:68:53:40:25:9b:4d:ac:1f:
6d:43:64:d0:18:16:55:77:84:12:05:e3:d9:a0:b5:
48:8b:54:b6:cb:cd:2f:8b:83:cc:8b:e6:41:e4:9d:
85:db:0a:c7:08:50:ca:5e:ab:17:ba:a7:4a:5d:89:
af:fc:e9:a4:a0:d9:75:8c:43:23:9a:f1:2a:fa:ce:
7e:c0:17:69:79:62:22:e2:19:38:01:96:73:6f:2d:
f4:cd:65:b7:ac:66:c2:a0:8b:13:b4:06:36:90:32:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:44:AF:47:04:4B:C7:11:E4:26:C4:7E:BC:6A:1F:C5:F7:EB:FC
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133372e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.137.0/24
Signature Algorithm: sha256WithRSAEncryption
53:32:80:99:36:02:47:7d:34:42:26:57:61:d7:4c:a5:b9:a1:
0b:ac:16:64:74:57:64:e0:30:39:94:6f:8c:e7:e3:d6:1a:ad:
77:bc:57:a4:8f:4c:1d:59:f1:1a:b7:67:b0:31:ef:f1:00:fe:
8e:04:60:80:18:eb:42:bd:5a:54:46:9a:42:75:e9:83:87:4c:
9e:8a:79:de:d4:d0:9f:7c:c4:21:54:a8:b6:11:1a:80:47:e5:
bc:9b:99:a0:c4:88:51:8e:49:56:a8:0a:37:ec:cc:ba:20:08:
aa:cf:f7:ee:84:3b:06:40:a6:78:4e:0a:20:0a:28:dd:3f:b9:
00:ac:db:60:61:27:30:b8:7b:7d:3a:3f:8a:fa:5d:c0:09:55:
34:0c:d4:4f:e2:fb:58:3e:16:b3:b9:7c:92:7d:c3:4f:3c:e2:
58:2b:b2:7b:46:96:34:f5:d2:cd:50:0a:da:f9:73:b2:da:ee:
9e:b3:d3:8a:08:51:5e:91:55:d1:85:70:57:6a:0c:ba:6e:0b:
03:24:d9:2f:54:55:e9:05:ba:14:55:b0:a3:2e:6d:34:40:13:
6d:11:b3:7b:73:bf:ad:07:02:46:c5:30:15:53:3d:49:63:c6:
19:92:62:e2:7b:6c:65:7e:57:83:65:0c:1a:e7:3a:2a:06:20:
a9:f4:25:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:30 2026 by rpki-client