Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3133392e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: 5Xxu7EcU0ccvhjgLOY3irD86JZ5oLWEuVI8r/v80EbM=
Subject key identifier: 6A:16:01:39:6F:7C:A3:88:4E:21:FB:AD:EE:88:04:04:A9:A4:77:4A
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 060665B701A01D2857119CC5D0F73AEC5420C196
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:20 +0000
ROA not before: Sun 05 Apr 2026 02:29:20 +0000
ROA not after: Sun 04 Apr 2027 02:34:20 +0000
asID: 28238
IP address blocks: 187.0.139.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:06:65:b7:01:a0:1d:28:57:11:9c:c5:d0:f7:3a:ec:54:20:c1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:20 2026 GMT
Not After : Apr 4 02:34:20 2027 GMT
Subject: CN=6A1601396F7CA3884E21FBADEE880404A9A4774A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:ce:95:f5:d2:37:5c:ef:d6:0c:dd:29:fa:
0b:78:23:f6:a3:2b:e0:1f:aa:23:77:e0:98:e1:bd:
b8:7a:3d:34:f2:d0:ce:de:0e:a2:8d:e4:0b:4a:54:
56:69:dd:04:8c:2f:ea:16:d6:d5:d9:ea:e4:86:6c:
08:88:f8:71:b6:ec:39:a1:b0:7f:17:84:c3:0c:30:
c5:3f:9f:58:54:65:11:48:d9:07:0f:72:55:e3:c0:
09:54:d8:82:d8:70:82:bc:6d:ed:14:05:10:be:b0:
80:28:18:58:f7:d5:49:e9:f0:f8:c3:96:eb:77:93:
19:0b:45:50:ca:74:71:a9:cf:67:2f:85:da:74:b9:
92:bf:5b:c4:f6:ac:14:fc:7c:aa:0e:65:53:d0:91:
e2:32:ab:0e:af:cc:c7:6d:f3:fe:80:35:6f:81:bc:
c3:c4:a4:e6:5d:97:b1:bc:32:37:80:99:14:bc:7a:
55:65:d9:0c:f6:0e:32:49:57:a5:a7:78:31:e0:7e:
bd:43:81:48:d2:ca:7a:11:83:71:c4:f0:f8:ba:33:
96:ca:ce:1a:66:20:5b:e4:c4:ec:92:8a:78:b7:0b:
11:58:c8:82:8a:c0:e9:f8:1b:c2:31:53:73:38:a1:
f6:b1:56:dc:fe:8e:9c:fd:76:90:14:a1:88:1c:d8:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:01:39:6F:7C:A3:88:4E:21:FB:AD:EE:88:04:04:A9:A4:77:4A
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3133392e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.139.0/24
Signature Algorithm: sha256WithRSAEncryption
53:78:17:00:8e:28:b8:30:6c:96:72:61:2f:63:bf:91:1c:6b:
37:43:b1:3e:a7:7c:03:e2:1a:65:69:18:f5:af:02:48:27:57:
0f:dc:da:4a:98:aa:4e:14:cf:d3:cb:b6:50:5f:32:7c:c0:0e:
84:ca:8a:f1:15:06:32:77:ee:ce:97:1b:51:af:1e:5c:5a:f8:
26:6d:f2:b5:7e:d1:4d:39:01:cb:06:3c:41:15:c9:7c:c3:ab:
20:09:2d:bc:40:58:78:7e:99:a6:14:63:ca:38:ac:06:29:cd:
b4:a8:eb:5d:c1:57:af:7a:27:58:80:bb:5e:9a:b9:15:85:c6:
74:58:a4:96:e1:46:a7:40:27:57:07:da:fb:e0:8d:b1:5e:83:
fc:cb:28:81:d1:b6:ce:94:81:69:a1:29:22:1c:7e:a6:bf:2c:
62:bd:3b:00:ab:fb:32:78:a9:3d:7b:49:72:23:96:9b:2d:1f:
76:65:d6:65:45:06:a0:00:89:f0:44:0e:42:a5:1f:e5:42:e2:
69:8e:df:fb:81:5a:fb:af:61:9e:0e:20:0e:1a:d9:55:ce:67:
d2:0a:b6:29:1f:cf:4c:26:90:ee:1a:4a:db:65:b0:7f:c2:6e:
61:19:97:1d:47:8b:fc:96:9b:48:5f:01:51:31:a1:c8:36:d9:
f8:47:4e:b6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBgZltwGgHShXEZzF0Pc67FQgwZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzNkNDNzlDODM2NkE4NjY0QTRFMzFBOTY1QkFFMURB
QTA5NDA0NTAeFw0yNjA0MDUwMjI5MjBaFw0yNzA0MDQwMjM0MjBaMDMxMTAvBgNV
BAMTKDZBMTYwMTM5NkY3Q0EzODg0RTIxRkJBREVFODgwNDA0QTlBNDc3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgf86V9dI3XO/WDN0p+gt4I/aj
K+AfqiN34Jjhvbh6PTTy0M7eDqKN5AtKVFZp3QSML+oW1tXZ6uSGbAiI+HG27Dmh
sH8XhMMMMMU/n1hUZRFI2QcPclXjwAlU2ILYcIK8be0UBRC+sIAoGFj31Unp8PjD
lut3kxkLRVDKdHGpz2cvhdp0uZK/W8T2rBT8fKoOZVPQkeIyqw6vzMdt8/6ANW+B
vMPEpOZdl7G8MjeAmRS8elVl2Qz2DjJJV6WneDHgfr1DgUjSynoRg3HE8Pi6M5bK
zhpmIFvkxOySini3CxFYyIKKwOn4G8IxU3M4ofaxVtz+jpz9dpAUoYgc2NUVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUahYBOW98o4hOIfut7ogEBKmkd0owHwYDVR0j
BBgwFoAUrzbMecg2aoZkpOMalluuHaoJQEUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZMZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9O
NVkvMy9BRjM2Q0M3OUM4MzY2QTg2NjRBNEUzMUE5NjVCQUUxREFBMDk0MDQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMzZDQzc5QzgzNjZBODY2
NEE0RTMxQTk2NUJBRTFEQUEwOTQwNDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWTGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzMv
MzEzODM3MmUzMDJlMzEzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsAizANBgkqhkiG9w0BAQsFAAOCAQEAU3gXAI4ouDBs
lnJhL2O/kRxrN0OxPqd8A+IaZWkY9a8CSCdXD9zaSpiqThTP08u2UF8yfMAOhMqK
8RUGMnfuzpcbUa8eXFr4Jm3ytX7RTTkBywY8QRXJfMOrIAktvEBYeH6ZphRjyjis
BinNtKjrXcFXr3onWIC7Xpq5FYXGdFikluFGp0AnVwfa++CNsV6D/MsogdG2zpSB
aaEpIhx+pr8sYr07AKv7MnipPXtJciOWmy0fdmXWZUUGoACJ8EQOQqUf5ULiaY7f
+4Fa+69hng4gDhrZVc5n0gq2KR/PTCaQ7hpK22Wwf8JuYRmXHUeL/JabSF8BUTGh
yDbZ+EdOtg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:30 2026 by rpki-client