Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3134302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: l3biNSzgrCvX5qZqzdNIF/PrRd/iYevF5a1iVdmHY7c=
Subject key identifier: 5A:E0:1B:8F:FF:3F:AA:88:DD:B6:09:31:20:95:DC:83:B5:EB:4D:44
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 7E64F037392829DE5AA333DDD6714798BF15046A
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:19 +0000
ROA not before: Sun 05 Apr 2026 02:29:19 +0000
ROA not after: Sun 04 Apr 2027 02:34:19 +0000
asID: 28238
IP address blocks: 187.0.140.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:64:f0:37:39:28:29:de:5a:a3:33:dd:d6:71:47:98:bf:15:04:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:19 2026 GMT
Not After : Apr 4 02:34:19 2027 GMT
Subject: CN=5AE01B8FFF3FAA88DDB609312095DC83B5EB4D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9c:f2:c0:bb:79:ec:d9:da:63:de:c1:74:2f:
5d:8f:a1:a0:46:e4:e7:a5:b1:70:63:08:ff:91:5d:
c9:e4:10:32:c2:5a:ef:8d:06:b8:93:b0:85:e6:2f:
86:4e:23:20:ff:9b:92:ad:85:08:18:cb:92:a7:78:
20:49:65:d0:9b:fe:2b:aa:fb:29:4d:97:09:28:0e:
89:e8:de:ac:fa:65:e8:0c:b2:a6:c3:7c:f5:9b:f5:
8e:0f:de:01:be:2b:45:7b:fb:45:0c:05:4a:c5:e2:
3b:8b:c6:23:d2:1b:69:7a:57:cf:cc:3e:fd:fc:f1:
c8:03:20:7f:ed:b2:2d:47:46:c7:2d:58:7e:55:42:
8c:76:13:4b:92:50:1f:65:d0:97:fd:dc:b6:be:bb:
cb:65:ed:4d:4a:1c:6f:b6:a8:37:74:03:7c:77:e2:
57:7e:87:9f:14:68:32:64:30:c3:33:54:f9:3c:ca:
b1:94:0d:88:9e:2b:0d:07:af:75:8b:76:78:57:81:
6a:1a:9e:68:67:1c:1b:c8:6f:19:b5:1e:5e:01:1c:
ef:6a:55:31:eb:8b:58:20:7f:a4:99:5b:ef:25:66:
f6:46:2f:c4:42:fc:7c:b2:f2:c3:a3:09:ff:0a:c6:
20:b2:49:74:83:ff:7b:60:cc:d3:e9:97:db:46:51:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:1B:8F:FF:3F:AA:88:DD:B6:09:31:20:95:DC:83:B5:EB:4D:44
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134302e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:26:97:12:63:0f:19:cc:1f:64:bd:d4:b6:0d:bc:d3:91:7e:
d7:37:d9:ee:36:55:c4:7d:ef:46:c7:e2:15:de:27:f4:46:cc:
91:a4:5e:8f:90:d1:89:81:09:d7:35:f1:5e:b1:6f:4a:0b:38:
4a:f8:ae:9b:2d:1f:5e:33:4a:ae:9b:51:79:ef:42:3e:5a:75:
4b:ba:5c:50:d6:e2:17:d3:60:76:9d:fe:06:db:2b:43:f9:25:
61:49:34:04:91:2d:5e:a9:1d:d8:e9:94:84:88:9b:6f:30:ed:
e3:a8:01:1d:f8:e2:9d:31:c9:25:2e:ec:fd:16:7d:99:ef:c2:
e2:d3:e4:a4:7b:8e:46:2c:74:48:6f:2b:fd:18:04:09:e3:d7:
91:84:79:90:f4:91:6a:ff:df:d0:bd:e3:c9:1a:6c:bb:6c:1e:
30:11:bd:50:4a:3b:85:fb:1c:df:37:66:b4:80:e1:ca:7c:c4:
0b:9e:9f:4e:82:e8:e6:b1:08:b4:72:11:6a:e2:91:be:9a:96:
75:3e:23:e4:6d:36:50:22:38:86:3d:ae:0a:22:c8:ad:b1:b0:
ab:af:85:7f:d0:54:53:20:d2:f0:aa:58:40:cb:70:21:a2:42:
88:62:27:19:d8:ab:75:0d:6f:58:f9:4d:b8:55:70:9f:58:1a:
a7:d8:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:59 2026 by rpki-client