Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134322e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3134322e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: wC4Z+uYU8b1xhTx8LriuSLf4xJr3uxqqJex7Ht3Fd0Q=
Subject key identifier: 41:84:FB:80:66:21:7C:15:3B:04:D9:3D:E3:72:FD:38:EA:61:8C:AA
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 0819E76EEAC2F72273DD3E4409D0B7AD38B02356
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134322e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:22 +0000
ROA not before: Sun 05 Apr 2026 02:29:22 +0000
ROA not after: Sun 04 Apr 2027 02:34:22 +0000
asID: 28238
IP address blocks: 187.0.142.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:19:e7:6e:ea:c2:f7:22:73:dd:3e:44:09:d0:b7:ad:38:b0:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:22 2026 GMT
Not After : Apr 4 02:34:22 2027 GMT
Subject: CN=4184FB8066217C153B04D93DE372FD38EA618CAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:17:a0:6a:ab:dd:69:cc:84:bd:b1:bf:d2:
39:96:21:df:b2:ac:a4:db:ac:2c:f8:8a:95:dd:20:
bc:34:d1:23:1c:b1:57:cf:b0:47:fd:a3:b3:f0:06:
97:b8:ea:20:7e:c5:95:f4:bc:03:ad:d5:3f:c2:d8:
c0:e0:b3:50:73:e3:be:30:c5:20:5c:74:88:63:0c:
0f:24:bb:ee:8b:1b:f1:2f:a5:d0:54:77:c1:bf:58:
04:2c:d9:7f:00:27:cf:cc:fe:c5:4f:e7:21:b3:a1:
42:65:54:6c:75:6c:b5:ee:1f:36:57:0e:1b:a5:e5:
4f:c0:4c:40:28:38:03:10:84:20:21:3c:4a:52:ab:
b1:7c:0c:6e:cc:ed:c6:08:af:b0:ef:30:0c:ff:1c:
3f:7c:4b:91:70:73:21:81:fd:d8:26:27:6d:04:d9:
4c:8f:e7:02:fb:01:ff:ea:dd:31:ee:18:99:69:5a:
de:fc:dc:5d:39:45:47:54:f4:82:8c:5c:2b:9b:ae:
bb:bf:d3:d0:47:f8:e0:85:ab:dc:62:27:1c:4f:e9:
95:44:04:f4:b7:67:f1:f5:03:43:86:79:33:bb:12:
0a:ee:a1:f5:b9:d0:55:7d:9d:ab:ee:7e:81:51:39:
b0:e4:0e:1b:6c:85:a8:62:ca:14:d1:08:0d:7c:c9:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:FB:80:66:21:7C:15:3B:04:D9:3D:E3:72:FD:38:EA:61:8C:AA
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134322e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ac:51:90:5e:2a:67:7e:e1:9a:a8:61:a8:5d:94:47:ca:54:
3e:0a:4c:0d:82:8a:e5:8d:93:7f:ec:ed:19:98:0a:5a:2e:55:
fe:41:ad:c4:49:88:ac:63:a8:06:56:55:f1:8f:03:5f:d1:0c:
f1:e8:fb:39:9d:c1:b1:9c:43:4d:12:cb:c9:d5:69:50:46:de:
8e:93:38:09:2f:22:f4:76:c4:02:71:68:4d:9a:19:d3:77:19:
7e:d8:9c:cb:7f:f3:97:b1:41:84:57:72:5f:ad:ea:45:2b:98:
f9:b2:a6:70:76:17:b6:d3:1b:04:98:b6:ce:86:51:94:12:74:
e0:d2:7c:31:11:ff:84:7a:e5:33:8d:39:dc:58:0e:da:9e:1a:
01:24:79:c8:b0:f7:57:54:9f:75:e2:ce:36:fc:e7:29:14:25:
eb:d5:f7:ec:c2:41:d4:8b:c7:ea:5a:34:19:52:3e:a5:fa:29:
8c:e1:05:d0:02:ef:58:e8:6c:8b:16:5a:a6:0b:ef:30:f4:8d:
e6:61:f1:cb:3d:2f:34:d9:08:ad:42:68:ef:07:07:2f:f1:08:
fc:65:71:e1:ee:15:c1:d9:9f:07:0c:c5:d3:b6:72:ff:77:63:
42:4f:48:83:dd:95:cf:d2:af:32:5b:da:b0:43:ed:27:af:6c:
79:b8:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:22:00 2026 by rpki-client