Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134332e302f32342d3234203d3e203238323338.roa
File: 3138372e302e3134332e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier: npi/CtgZs72Vpiu5urNf/lJC4/Adgrd/cgjXhN5mzkI=
Subject key identifier: 1A:9E:3C:3F:26:35:0A:97:6D:5A:91:17:D2:39:24:95:42:3F:46:90
Certificate issuer: /CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Certificate serial: 27BA08F4B32980C9A7CE2D82DCA55B9ED7F4BD38
Authority key identifier: AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134332e302f32342d3234203d3e203238323338.roa
Signing time: Sun 05 Apr 2026 02:34:18 +0000
ROA not before: Sun 05 Apr 2026 02:29:18 +0000
ROA not after: Sun 04 Apr 2027 02:34:18 +0000
asID: 28238
IP address blocks: 187.0.143.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ba:08:f4:b3:29:80:c9:a7:ce:2d:82:dc:a5:5b:9e:d7:f4:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF36CC79C8366A8664A4E31A965BAE1DAA094045
Validity
Not Before: Apr 5 02:29:18 2026 GMT
Not After : Apr 4 02:34:18 2027 GMT
Subject: CN=1A9E3C3F26350A976D5A9117D2392495423F4690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:c3:b4:2d:45:e4:d9:ca:fc:1a:22:49:ce:
72:5f:ae:e7:b7:5d:ef:ea:73:ce:15:04:6e:bb:70:
a2:2a:d9:fc:5a:cd:fe:52:fb:be:04:69:26:e6:c3:
b2:30:5e:6c:3c:af:21:df:d9:f6:b6:5a:29:b8:5c:
22:64:7e:a1:ca:a1:b3:78:36:1b:01:b2:dd:99:a4:
69:88:b6:2c:bc:a9:d3:c6:d0:ae:32:81:b8:f8:93:
87:a1:c3:de:e6:7a:63:ed:57:ff:c8:88:72:02:a6:
b1:cb:02:42:f9:34:3a:36:91:04:90:27:4e:fb:ca:
dd:ad:be:e0:7a:8b:4c:aa:9f:db:00:ae:1c:63:a2:
c2:4c:f0:74:30:61:8d:3d:34:90:67:92:71:e3:a2:
1a:e3:96:59:91:10:c1:3a:fc:c1:c6:ae:57:95:43:
9e:c2:13:36:d6:35:e5:c3:d3:68:e4:a1:62:7c:5f:
9e:54:75:13:b8:83:ce:04:de:2c:1c:ba:82:f6:ce:
e3:b3:4b:30:e8:9f:94:44:4c:59:1b:af:65:a7:5c:
43:22:cd:01:76:06:2f:6f:ed:fb:90:d5:5c:29:d9:
50:b6:0d:be:04:03:aa:a6:05:8d:f8:80:df:2b:de:
65:d2:b4:3c:fc:c8:02:27:e5:de:e8:a3:08:a8:7d:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:3C:3F:26:35:0A:97:6D:5A:91:17:D2:39:24:95:42:3F:46:90
X509v3 Authority Key Identifier:
keyid:AF:36:CC:79:C8:36:6A:86:64:A4:E3:1A:96:5B:AE:1D:AA:09:40:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/AF36CC79C8366A8664A4E31A965BAE1DAA094045.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF36CC79C8366A8664A4E31A965BAE1DAA094045.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/3/3138372e302e3134332e302f32342d3234203d3e203238323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.0.143.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d2:93:ef:2c:c8:ef:d1:92:c8:26:38:c1:43:d1:02:55:1d:
c4:b6:41:af:f7:5c:ff:13:3b:26:7f:46:c9:89:0e:70:7a:ab:
1b:dd:b1:b1:b1:3d:60:23:c2:29:12:68:b1:74:41:97:c4:20:
ff:a0:bf:f2:88:37:22:09:0b:dd:bf:84:2e:7d:fc:d0:4d:83:
26:2c:65:cf:ac:3f:cc:c9:6b:59:72:e2:f1:97:d1:06:b1:4b:
2f:f4:7e:2a:44:fd:9f:4e:90:99:f8:a5:73:04:89:25:97:3f:
b5:ad:ed:82:8e:66:07:c7:3c:13:39:ae:f4:5c:48:2c:91:7c:
5d:48:37:6b:fe:ae:0e:1c:3e:20:69:4a:8c:dc:e6:25:a8:9b:
2c:21:5f:77:d8:3e:0a:2e:fe:df:70:5a:1a:b4:a2:ce:5b:56:
a6:0d:48:d9:9a:34:4a:3a:60:6d:6d:f4:4d:7d:38:65:d6:27:
89:08:35:d7:97:7e:9f:ce:95:f2:62:fb:5f:ab:65:32:bd:19:
0f:66:2f:47:a9:99:c1:8a:b9:4f:38:b9:83:90:63:a4:99:9a:
17:1a:43:d9:fe:a8:b6:c8:23:fd:83:b2:63:fb:8d:96:a4:1b:
0a:b0:c3:7f:fc:e8:04:af:6a:db:55:9f:ab:be:ea:2f:c2:84:
e7:fb:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:58 2026 by rpki-client