Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa
File: 3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier: G3EGwT4EMV0dN3gvq3ZiepZlNmICgTSdMkDndijf/dc=
Subject key identifier: F6:FE:56:97:05:7E:11:23:61:F2:34:75:6B:E5:86:80:58:09:85:C9
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 03F458A75E023011C2C2EF306D4F5E73794891DE
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:12:03 +0000
ROA not before: Tue 22 Sep 2026 17:07:03 +0000
ROA not after: Tue 21 Sep 2027 17:12:03 +0000
asID: 52721
IP address blocks: 138.185.111.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f4:58:a7:5e:02:30:11:c2:c2:ef:30:6d:4f:5e:73:79:48:91:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:03 2026 GMT
Not After : Sep 21 17:12:03 2027 GMT
Subject: CN=F6FE5697057E112361F234756BE58680580985C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:82:94:0e:47:5f:86:be:3c:9b:f0:75:8a:
29:72:c5:89:fe:1a:1b:95:da:8b:75:6f:db:15:65:
ea:34:e9:3a:41:56:dc:04:6b:08:d2:44:c6:c6:97:
6a:7c:8b:69:d0:3a:1b:7f:e7:45:b9:ee:2a:27:b7:
b6:cc:64:26:c0:83:5e:9f:f5:5c:88:c6:d9:a1:49:
d5:aa:fa:a7:9f:d8:6a:88:c1:bc:0d:29:48:be:59:
ce:cc:bd:a9:5f:a0:ad:fc:fe:eb:8b:56:68:a2:78:
89:fe:74:2f:15:cb:82:01:65:2e:8e:50:4e:56:9c:
32:28:69:3e:ae:b2:99:81:09:06:da:be:7f:ef:9f:
cc:56:ab:0b:ce:a6:13:84:bd:9a:3c:d2:e2:00:31:
a1:ce:c1:07:bc:65:7a:c4:f6:c5:dc:21:56:cc:e4:
d7:c1:d7:ae:d6:91:9d:98:95:03:bb:8e:c1:54:f2:
3f:f4:13:2f:0b:ae:4f:ee:f6:51:2f:08:ca:79:cc:
85:88:58:ec:17:31:e0:f2:04:0b:59:0c:26:b4:f0:
13:41:ff:f1:79:af:c9:71:5e:0c:c0:46:18:2a:2f:
2b:05:55:10:5f:ee:f2:ab:e5:40:60:1e:3a:35:72:
78:bc:10:3c:00:77:96:6a:bb:a7:26:db:28:50:72:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:56:97:05:7E:11:23:61:F2:34:75:6B:E5:86:80:58:09:85:C9
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e3138352e3131312e302f32342d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e2:66:37:ee:8c:d4:bf:a0:3e:5e:28:44:5e:3f:7f:ce:52:
93:44:bb:d1:c7:47:0f:23:cf:36:a4:30:d4:99:0e:51:e6:68:
0d:42:3a:30:bd:db:43:e5:87:23:cb:f2:bb:cc:c5:2d:46:ca:
c1:9a:96:b4:ab:c3:7b:27:16:96:4d:81:3a:90:27:fe:f5:e7:
14:1f:e7:e9:bc:be:08:62:bd:2a:22:e7:18:ce:c4:13:7e:a6:
44:44:3e:18:e1:0f:4c:19:f3:d1:2d:43:b6:4f:f0:10:d9:df:
d2:eb:06:e2:e5:e1:14:e3:d6:8a:9f:92:d5:ae:47:92:7f:ee:
0d:a3:b3:fd:98:35:e6:44:71:0b:81:47:9d:72:b2:29:5c:73:
3a:e9:ad:55:6e:54:ef:a4:07:25:33:cd:d7:c0:e6:38:f6:48:
6f:a4:8f:31:39:88:86:8d:be:9c:7b:63:c9:89:3d:49:a9:44:
de:f6:20:35:13:de:68:10:18:15:bb:a2:95:33:39:08:74:93:
87:79:85:0d:22:4b:88:ec:40:5d:13:1c:e0:dc:3c:56:d8:ae:
95:f6:43:32:a0:ee:dd:11:50:eb:02:74:ce:d5:3b:36:d8:47:
1e:87:0a:33:02:7b:40:4e:53:1b:1f:b7:7b:53:e3:a8:f1:54:
d7:ce:ab:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:02:48 2026 by rpki-client