Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134312e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3134312e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: YARcY9Paz8P1wZkN20cPun9Prvc/9x8iojD+kQ7Bg9g=
Subject key identifier: 5A:0D:E1:04:3E:88:EF:B2:80:91:04:C0:A3:C2:32:AB:72:81:53:F2
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 06C487D3F6C0C652221045C7B7B1BB5A37FE4AD8
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134312e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:22 +0000
ROA not before: Sun 05 Apr 2026 02:29:22 +0000
ROA not after: Sun 04 Apr 2027 02:34:22 +0000
asID: 28238
IP address blocks: 187.0.141.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c4:87:d3:f6:c0:c6:52:22:10:45:c7:b7:b1:bb:5a:37:fe:4a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:22 2026 GMT
Not After : Apr 4 02:34:22 2027 GMT
Subject: CN=5A0DE1043E88EFB2809104C0A3C232AB728153F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:25:c8:19:99:ca:7a:77:01:3b:62:00:b7:
75:10:4c:cd:8d:4b:78:1f:8f:0c:85:90:5f:0c:4c:
8c:a4:18:2f:f7:6f:cb:7e:ac:ad:99:20:08:94:71:
6d:36:07:4f:53:1d:55:d3:1f:8e:7b:39:61:3d:cd:
cc:d9:ad:6f:02:8a:b6:a3:81:a3:f4:54:21:c1:7d:
28:7a:12:74:33:83:ac:60:6d:8f:5e:b1:56:45:86:
0c:69:9a:28:19:82:f5:40:64:f1:6b:4d:dd:eb:23:
22:62:4e:67:df:04:5d:c7:f8:26:c3:a1:a6:39:51:
33:93:e7:65:af:2a:0a:ba:61:08:43:73:ff:06:db:
34:85:e5:bf:bf:14:e5:7f:b8:ae:15:1e:45:35:0a:
36:7f:5a:ee:7b:55:c8:e5:e4:3b:5c:7a:49:9c:77:
41:88:46:48:26:2a:07:e9:d0:df:bc:bf:de:96:eb:
e5:dd:71:5f:ad:5c:61:c9:0b:30:b1:11:01:de:ea:
ef:1f:d5:73:d5:58:e7:f9:ec:bc:92:36:4d:69:0e:
16:90:c0:28:df:42:2b:f1:80:76:81:cd:cd:22:16:
33:10:3b:df:bc:1f:86:81:9d:82:fe:be:70:66:3b:
e3:f7:64:8a:e2:c7:1d:6e:95:64:e0:48:f6:7e:f2:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:E1:04:3E:88:EF:B2:80:91:04:C0:A3:C2:32:AB:72:81:53:F2
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134312e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:20:31:2c:e1:50:08:cf:ad:cf:a6:12:5d:fa:23:b4:29:02:
7e:cd:95:21:14:22:10:2c:5d:7c:3a:bc:21:cb:37:ae:ca:a2:
64:87:e2:85:48:ba:7a:42:28:9c:d2:d7:2e:92:80:f2:36:dd:
f6:ab:78:00:0e:6f:d4:28:23:af:e1:e9:0c:fc:50:9d:65:fe:
35:a3:66:90:8d:e7:64:2d:0a:38:0c:e3:7f:93:d9:10:3c:b4:
2b:e4:ca:0c:fb:c4:bd:dd:6a:d7:7a:36:e6:5d:5d:f6:04:85:
ae:a9:73:cf:29:1b:57:90:63:4e:8b:55:b5:c0:c9:32:4d:d8:
41:40:d1:6e:90:37:c2:ce:93:ac:c1:50:91:72:2d:8a:e9:0b:
fc:9a:b6:28:af:a6:90:24:fa:aa:5c:d4:da:67:ec:f4:7b:6d:
b7:5a:de:a0:ee:ee:db:46:0a:bb:2b:83:fc:d9:4b:81:28:6e:
6d:f9:d1:c1:0c:c6:a4:d6:0e:e7:b7:c7:c5:d5:0b:e0:94:89:
0f:d5:86:a0:04:a0:be:3f:6a:f5:44:5f:bf:a8:cf:5a:46:83:
0d:71:89:76:88:4a:7e:96:1b:01:87:9c:19:01:ab:1c:47:d8:
e7:3a:0b:57:d5:82:9b:77:5a:2d:1b:c4:a0:30:96:a1:c4:9b:
f7:cb:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:33 2026 by rpki-client