Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
File: 3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier: XmLGzc0d/Ep4GluS73b6fCc2khgIIeqSC/2JRzeGUkE=
Subject key identifier: 25:CD:41:D5:E2:3E:F2:70:CD:25:E5:60:32:C5:BA:3F:35:08:CA:7A
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 2DC369DA2E77F1A0C859753BF2B9E546879B1DAA
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:54 +0000
ROA not before: Tue 22 Sep 2026 17:06:54 +0000
ROA not after: Tue 21 Sep 2027 17:11:54 +0000
asID: 52721
IP address blocks: 138.185.108.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c3:69:da:2e:77:f1:a0:c8:59:75:3b:f2:b9:e5:46:87:9b:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:54 2026 GMT
Not After : Sep 21 17:11:54 2027 GMT
Subject: CN=25CD41D5E23EF270CD25E56032C5BA3F3508CA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:4d:b0:30:66:60:66:38:16:6c:02:9f:2f:
3d:a4:bf:e3:5a:34:1f:bf:b1:bc:85:d3:58:d7:28:
77:23:a4:67:aa:b8:b2:b5:f9:74:00:cd:9f:22:f3:
96:93:c6:84:3e:66:89:ae:93:9c:d1:39:be:70:5e:
83:1d:d8:e4:48:7f:75:77:da:3f:72:c2:82:e7:09:
c7:98:ed:e1:15:25:98:5a:e9:76:d7:51:f5:d2:9f:
a1:44:ca:9a:ed:8d:a1:f3:ed:d1:32:7e:dd:87:26:
30:77:50:32:c4:cc:eb:93:d3:10:42:cd:4e:5b:a3:
74:51:90:c0:a2:9b:39:7a:5c:55:49:f8:2d:c7:df:
43:36:44:9b:f9:26:e3:69:4b:cf:c6:a5:8d:ff:66:
80:a2:5b:5e:27:c1:1f:e0:84:b1:03:ce:e4:22:e1:
b6:ec:03:b7:65:25:a4:a5:10:e9:24:61:03:2c:9f:
ee:34:63:c4:3f:28:2e:7f:73:14:c5:c0:9d:9c:f6:
d1:fc:f0:9d:df:62:d2:43:2f:72:0d:fa:e5:ea:8c:
be:f0:d8:86:0a:be:b2:af:70:69:85:03:39:38:3f:
64:8b:0c:b4:44:7c:8e:5b:69:cc:5f:fa:9b:bd:dc:
fe:26:e0:b9:a1:74:dd:cc:45:aa:16:f9:d0:88:3b:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:41:D5:E2:3E:F2:70:CD:25:E5:60:32:C5:BA:3F:35:08:CA:7A
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3130382e302f32342d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7e:fe:cd:8d:4b:64:a5:8b:7b:70:2f:f2:af:cb:4f:bb:d5:
73:b0:63:4d:08:b2:95:bc:e0:20:8d:7b:6a:67:df:95:0e:83:
82:76:45:14:3d:66:f9:59:e6:34:a9:8b:a5:72:ef:e8:9f:47:
6d:95:4c:13:15:61:d8:31:d6:f3:5a:8d:b2:51:1c:19:b4:74:
ef:b6:fb:70:11:bf:f4:41:06:c9:81:ac:5e:c9:22:06:7a:86:
cf:2d:0f:9c:79:57:88:fd:2b:6c:c7:6e:a4:4c:c3:d1:aa:92:
aa:d3:d1:ce:0e:14:0f:b7:98:56:91:bf:f6:42:b2:28:81:df:
9e:96:67:f4:94:14:f6:8c:eb:bc:05:04:07:c5:2e:ab:d7:98:
31:c9:b1:93:cd:fa:3a:56:fd:98:3d:19:39:e8:e1:9c:a4:a1:
ce:0e:ac:81:63:c5:78:56:34:9e:44:91:e9:ad:24:7d:86:76:
5e:87:13:a1:9f:20:f9:f5:71:1f:64:1a:87:41:0d:b2:2a:b6:
74:8b:82:d6:8b:75:d2:60:9e:d0:5a:f2:3b:af:19:69:41:0f:
53:23:91:91:9d:60:0e:2d:cd:34:59:be:68:d1:29:11:6c:31:
72:aa:cb:f9:21:1b:0d:ca:0d:58:6d:d8:f6:28:b7:ea:18:11:
88:e7:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:48:48 2026 by rpki-client