Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
File: 3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier: 5j1rGgFWhR1zi19oSSu2/AqNLBtV2NHEVNAW1dc4OyE=
Subject key identifier: 75:B5:60:B2:99:6D:6E:26:5C:B4:A4:BD:75:A4:7E:64:18:D5:39:1C
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 4AEEE40329932FCE2FB0165E161B1DDBEB2C72F8
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
Signing time: Fri 16 Jan 2026 02:01:53 +0000
ROA not before: Fri 16 Jan 2026 01:56:53 +0000
ROA not after: Fri 15 Jan 2027 02:01:53 +0000
asID: 264367
IP address blocks: 138.185.216.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ee:e4:03:29:93:2f:ce:2f:b0:16:5e:16:1b:1d:db:eb:2c:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Jan 16 01:56:53 2026 GMT
Not After : Jan 15 02:01:53 2027 GMT
Subject: CN=75B560B2996D6E265CB4A4BD75A47E6418D5391C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:de:57:17:c8:c6:b4:b0:6a:4f:5f:61:e0:
07:1c:5f:cc:98:25:65:32:6e:97:a5:25:86:ba:ed:
aa:d5:9f:5e:19:3b:6e:6e:25:dc:e9:8e:91:c7:7e:
ef:50:8c:b7:b4:e8:cc:bd:c7:3b:8b:52:1b:c7:8c:
7a:90:ab:9e:a3:22:37:cf:db:88:2d:dd:b0:f6:b0:
55:dc:5c:ea:98:eb:ae:be:0f:c9:7a:3e:fb:ca:f4:
39:28:7a:ab:cc:f3:dc:18:34:4a:93:e1:bb:13:cf:
4f:ea:34:2b:4c:a5:f2:89:e7:30:c5:b7:f2:de:0b:
6f:18:4d:52:59:35:49:7c:1d:2e:8b:3b:84:62:32:
4e:dc:51:ec:73:40:7b:7d:24:80:3f:be:46:b1:7a:
da:3d:a4:0e:ec:0d:3f:fb:51:21:6e:59:ca:1e:dc:
21:1d:eb:de:22:8b:ed:cc:a7:99:df:49:61:3b:05:
64:fb:86:68:c4:2e:64:e7:ac:ab:45:36:aa:42:c2:
c2:1e:0f:5c:af:44:66:85:06:92:24:e6:01:69:01:
23:8c:79:f3:a6:77:9c:67:c6:14:4f:da:0d:1d:86:
bd:be:74:31:8e:11:6e:19:6e:d3:d5:fb:8b:db:49:
f6:da:94:b8:5e:24:5d:a8:c4:89:81:c2:9f:8a:76:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:60:B2:99:6D:6E:26:5C:B4:A4:BD:75:A4:7E:64:18:D5:39:1C
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.216.0/22
Signature Algorithm: sha256WithRSAEncryption
77:bd:fb:f9:5f:73:34:5e:00:55:97:5e:36:5f:b9:7e:36:24:
ec:99:26:6d:3c:e3:a8:ac:8b:81:67:c6:6b:a1:45:6a:09:da:
13:13:4e:87:07:74:36:d9:7b:7f:34:a7:ba:64:b3:1b:47:71:
33:ac:8f:a3:64:c9:0d:55:d3:31:50:02:60:2a:be:cd:65:9d:
ca:e2:fc:34:85:27:3b:ce:d8:e3:84:12:f6:50:67:04:bc:90:
45:b9:9a:2f:60:2b:ae:e7:13:8a:ec:1b:da:b2:4b:22:a8:22:
f1:1a:b9:52:a1:1b:e0:92:db:b8:3c:72:7d:5c:e3:cd:4a:e1:
cc:b5:46:e4:41:91:85:f1:ae:3b:bf:6a:80:a6:03:4e:5a:9e:
a8:32:f1:c5:55:37:bb:7f:36:bb:34:a5:41:20:ce:c0:6b:73:
91:7e:86:d0:c1:fe:94:bf:e4:43:38:bd:22:2d:c9:4a:85:f5:
d1:42:9a:2c:13:cd:25:99:11:2d:86:f0:e6:5d:e4:92:c9:d8:
0e:76:e6:d1:ed:a6:b0:ce:07:ca:13:ab:2b:de:59:2a:71:a3:
ed:8f:63:7e:70:73:05:75:fb:4f:cb:61:fa:47:89:a5:28:4d:
9d:af:f7:67:ab:78:d9:c2:db:39:bb:41:68:02:af:48:ff:30:
aa:e5:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:08 2026 by rpki-client