Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133382e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: 3EOaETtWOCitugNz7r+OhygKe04RE+LfSFHTBvA20Ow=
Subject key identifier: 2D:5E:3C:9A:7E:AD:3A:C8:B2:97:FD:CB:B0:DC:98:8A:7D:3A:57:E5
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 65A1F6352E9B1FB5B0492E92BA5096F0DFF4F8F4
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:22 +0000
ROA not before: Sun 05 Apr 2026 02:29:22 +0000
ROA not after: Sun 04 Apr 2027 02:34:22 +0000
asID: 28238
IP address blocks: 187.0.138.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a1:f6:35:2e:9b:1f:b5:b0:49:2e:92:ba:50:96:f0:df:f4:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:22 2026 GMT
Not After : Apr 4 02:34:22 2027 GMT
Subject: CN=2D5E3C9A7EAD3AC8B297FDCBB0DC988A7D3A57E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:4d:1c:39:03:ad:9b:db:09:16:3e:c0:2d:
2a:d9:89:df:54:6a:ae:d3:71:1a:ae:b7:80:19:08:
d8:45:24:aa:f8:05:df:4e:ed:f8:91:11:ce:b2:ab:
e0:18:8d:cb:33:3f:6e:06:a2:ee:fc:87:d8:0e:66:
84:d0:2a:61:4c:a8:59:66:10:dc:82:5c:75:94:9b:
32:f7:d3:f5:9c:3d:30:d3:67:6a:13:5e:a6:b8:02:
47:ba:bc:61:33:af:13:c9:5e:3d:77:45:04:70:64:
f7:fd:f0:be:cd:b7:1e:fd:69:d4:a4:bf:43:27:e6:
9c:6b:f2:14:eb:7e:1b:ca:fc:7d:e4:af:5b:90:3b:
b0:f3:3b:0d:66:72:f6:09:cd:c1:3c:d3:14:8b:d3:
b5:38:99:3a:84:d5:8a:0d:cb:ab:14:4c:d4:3c:e8:
d1:9e:cc:07:81:27:5f:34:43:50:8b:50:61:69:7e:
06:44:4d:ce:30:cb:c5:08:0f:07:73:28:ae:d6:aa:
77:d9:d4:d8:8f:2f:91:2b:75:9f:25:29:71:9c:b8:
b8:ab:7c:28:74:f3:f4:de:97:57:b7:22:13:75:6e:
8a:31:ff:a6:1c:1f:b6:a2:e2:47:83:45:13:a1:71:
27:20:f1:b8:ce:51:97:92:43:5d:57:17:f2:1a:10:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5E:3C:9A:7E:AD:3A:C8:B2:97:FD:CB:B0:DC:98:8A:7D:3A:57:E5
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133382e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:36:f9:af:5f:1b:4d:72:ba:3e:87:82:fa:f4:aa:a0:e0:a8:
f7:9f:91:7a:c1:af:a0:12:97:dc:50:91:ff:a5:43:49:10:d4:
83:d8:5d:e2:b2:f5:06:6a:48:19:c1:11:7e:80:39:25:5f:69:
d9:1c:39:68:06:90:a9:a9:03:75:91:64:d3:8e:43:6d:56:9d:
94:04:d0:cf:9d:71:b6:3f:5b:2c:6a:90:67:1b:9c:2e:2e:44:
58:79:c3:44:e5:b7:4c:8f:00:55:ed:3a:af:8c:f6:b0:55:7f:
8d:7e:96:d8:e6:26:b0:b2:1b:b6:23:1f:4f:02:33:b1:4c:b4:
87:95:8e:9f:50:fe:2b:21:15:35:e0:c1:d4:78:0d:3e:a9:b9:
ef:6d:03:e5:ed:8f:fe:18:59:91:7d:a4:f5:9f:3a:d0:30:84:
e9:ea:1c:09:56:d9:44:9d:b7:61:66:5d:85:af:6c:42:7c:1b:
0b:0d:47:15:eb:4f:6c:cf:35:49:3d:e5:6f:95:c1:dd:39:4a:
85:e3:bc:5d:5a:14:40:4f:ad:8e:00:9c:f1:ea:a5:f5:c8:2a:
a4:c5:fa:3c:0b:0b:ca:34:95:ea:29:1c:07:3d:16:87:c1:b2:
cd:69:0d:24:91:8d:9d:e3:4c:fc:9d:b1:48:d0:93:63:b1:f4:
47:df:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:32 2026 by rpki-client