Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
File: 3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier: wXnIiF7F1i/Rz4iGObXRriWTNx80+1I4UGGse/dhYL8=
Subject key identifier: 96:56:90:D1:CB:59:FF:12:76:ED:A7:D1:0A:B4:B1:E6:39:71:73:17
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 5BD9C7D67E788EAAC564FC0CAC971F7615C132DE
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
Signing time: Fri 16 Jan 2026 02:01:56 +0000
ROA not before: Fri 16 Jan 2026 01:56:56 +0000
ROA not after: Fri 15 Jan 2027 02:01:56 +0000
asID: 264367
IP address blocks: 131.108.32.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d9:c7:d6:7e:78:8e:aa:c5:64:fc:0c:ac:97:1f:76:15:c1:32:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 16 01:56:56 2026 GMT
Not After : Jan 15 02:01:56 2027 GMT
Subject: CN=965690D1CB59FF1276EDA7D10AB4B1E639717317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:fd:96:3f:de:7f:a2:1d:2e:8e:75:72:33:
b2:d7:dc:17:88:0d:9e:8d:7f:fd:36:d4:eb:4a:2d:
79:48:c8:cf:88:82:62:32:08:a9:f3:5b:fc:df:95:
c6:cd:a6:61:2d:33:98:72:65:0d:fe:63:43:a8:6b:
14:43:23:cf:5e:a0:42:2f:e7:cd:29:60:5d:16:cb:
8a:82:ba:4f:bc:91:c8:fc:52:20:2a:95:57:2d:b9:
a4:a5:59:a5:87:5b:8d:4f:af:23:4d:67:ce:2e:a1:
9a:e8:9d:f3:77:98:c8:81:d8:8d:51:c5:52:e2:08:
be:15:b9:b4:1e:50:30:8d:e3:81:d6:07:3b:8c:67:
b4:5d:a4:01:2a:fb:56:72:de:25:35:2b:7f:76:ed:
9b:34:2c:25:dc:b2:86:ae:ef:50:5f:24:dd:4f:7d:
dc:81:2f:7c:a1:de:2c:dc:d0:01:a3:2d:e0:8f:90:
cd:aa:19:e1:e7:bb:84:f6:9c:53:41:51:64:76:cb:
35:7e:71:af:22:c6:b8:d5:ce:ed:93:e4:16:b3:73:
e3:d9:43:b3:4f:83:62:30:83:9e:da:9c:47:dc:7e:
2d:03:00:9c:b3:96:fa:bc:10:d8:e8:0d:7a:97:df:
c9:7c:44:b9:b7:11:7a:4c:7e:a0:bc:ef:4c:a2:7a:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:90:D1:CB:59:FF:12:76:ED:A7:D1:0A:B4:B1:E6:39:71:73:17
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133312e3130382e33322e302f32322d3234203d3e20323634333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.32.0/22
Signature Algorithm: sha256WithRSAEncryption
49:7d:a3:cc:2a:c2:d3:95:6d:73:5a:c6:3d:4f:47:4f:8e:8e:
c9:1a:a7:9a:be:69:41:7e:73:ac:86:79:42:55:43:d7:a3:a6:
ed:22:c8:8d:57:f4:0d:61:22:d7:a3:ec:ee:37:9b:79:67:18:
43:7e:7d:65:ae:2f:c4:27:56:c1:65:1c:a4:1a:2c:c0:85:c7:
82:79:a6:3f:ae:f0:a3:e6:ad:93:5a:7e:b3:e4:dd:dc:a1:98:
f8:4d:3b:d5:8e:4a:bd:2e:2f:8b:d7:c2:1e:dd:ec:61:31:c6:
14:30:ea:3a:91:0b:86:9f:da:d5:6d:f7:ce:fa:3c:3b:b3:21:
31:03:de:86:84:3b:98:30:4b:46:32:48:3a:f2:07:a0:55:22:
34:48:cc:c9:cf:f3:15:2f:7d:3e:8c:5a:43:3b:30:26:f7:bf:
18:dc:32:ab:dd:fc:d2:e3:7a:60:0e:70:4f:b4:e2:99:75:59:
37:cc:a5:00:f2:f4:e1:85:05:ad:15:06:e5:39:86:56:94:75:
8d:80:6a:75:13:fd:3f:30:e1:83:74:9a:2b:f9:aa:de:be:ad:
68:d5:63:e2:e3:8f:3f:7b:81:af:93:61:9b:ec:88:57:2a:b0:
50:52:63:e7:c4:22:e9:5e:26:14:d7:3e:f0:36:0f:4a:40:48:
eb:82:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:07 2026 by rpki-client