Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32342d3234203d3e20323634303838.roa
File: 3133382e39342e38302e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier: 7sRFyL4f6MosRDUokJvE7cWbhUqvelGWuFIKaRhNJXg=
Subject key identifier: E0:70:10:90:C8:D3:08:7F:10:6F:A7:1C:E8:15:D5:F8:E2:66:D5:4A
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 7BA63CF1CF6E256C15626A746142262B0C03BCB6
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32342d3234203d3e20323634303838.roa
Signing time: Tue 22 Sep 2026 17:12:00 +0000
ROA not before: Tue 22 Sep 2026 17:07:00 +0000
ROA not after: Tue 21 Sep 2027 17:12:00 +0000
asID: 264088
IP address blocks: 138.94.80.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a6:3c:f1:cf:6e:25:6c:15:62:6a:74:61:42:26:2b:0c:03:bc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:00 2026 GMT
Not After : Sep 21 17:12:00 2027 GMT
Subject: CN=E0701090C8D3087F106FA71CE815D5F8E266D54A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:6c:d8:59:dc:8a:c6:71:f9:f1:3c:4b:5a:
98:25:86:3c:b4:fe:bb:44:b0:85:ee:21:e8:a8:a6:
e4:75:3a:37:57:8a:36:27:f6:9b:31:73:a3:b8:6d:
ce:3a:ad:40:18:ae:a4:94:10:3d:04:28:b4:45:f1:
17:c4:cf:99:c4:cf:c0:b9:63:aa:2e:c4:5a:57:e2:
43:c4:8a:1c:39:cb:f5:53:05:8e:e7:f1:9c:e0:d9:
90:78:63:33:95:4b:e3:8b:bc:ab:87:26:39:c8:22:
a6:2f:69:1e:ff:09:06:a3:f2:5f:36:45:d4:d0:70:
d8:14:c4:5f:8f:b2:d4:6f:05:41:e0:09:82:29:e4:
30:0a:1d:89:7c:ff:0d:bf:22:52:7f:9d:8f:63:a0:
1c:a1:52:d2:a0:79:8b:7e:44:09:e0:92:d0:fa:ed:
b2:83:31:a7:fe:dd:23:ed:ca:da:c7:5c:1f:3b:68:
02:89:6f:69:3d:e7:18:7e:65:6b:3f:b8:d9:de:08:
6c:7c:82:a6:4c:aa:17:9c:6c:43:01:b2:46:26:df:
29:2a:a8:ba:ed:49:9a:fb:f1:13:8c:fd:f6:c0:62:
8e:67:cf:8c:a7:27:65:ac:1e:7f:a3:c3:12:3f:21:
1a:21:ed:61:b6:53:2b:3c:14:f9:18:81:8d:dd:4e:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:10:90:C8:D3:08:7F:10:6F:A7:1C:E8:15:D5:F8:E2:66:D5:4A
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38302e302f32342d3234203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.80.0/24
Signature Algorithm: sha256WithRSAEncryption
06:16:5b:81:5c:0e:f6:af:32:d6:af:e7:fe:c3:eb:e0:0b:d0:
6c:0b:c6:9a:c6:f1:6d:2b:de:82:d2:89:1c:50:1d:e5:fb:46:
c7:ce:19:46:5b:ec:c9:65:5c:a7:e7:ba:c5:d0:14:92:78:2e:
0d:ad:5b:fa:25:76:65:1b:c7:f2:65:5c:24:71:63:5c:b7:70:
b2:63:72:61:64:56:4a:68:2e:13:92:dd:2b:a3:2e:3d:1a:c7:
21:34:42:6e:a6:dd:f1:90:97:7d:42:60:9f:bb:77:68:13:5a:
6a:77:c9:46:6e:e5:38:1b:af:3f:2d:a3:40:80:a6:26:66:b7:
70:da:e4:55:eb:23:52:ff:6b:6d:00:e5:52:66:b9:78:49:7e:
52:bf:7a:5e:8a:95:92:1b:c1:ab:0b:5f:a1:8c:b3:90:59:2f:
23:ab:e7:0c:ac:75:43:97:ac:42:aa:24:08:d0:6d:53:eb:a6:
49:da:81:1b:e0:f2:1a:3c:c0:07:20:9c:70:c0:cf:6a:94:2b:
77:f8:30:7d:c6:62:e4:7c:9c:c6:ad:24:5b:93:0e:5f:14:f6:
30:43:42:9b:88:66:97:df:a1:d9:0d:f5:54:f1:fa:29:7c:3a:
39:9e:a7:b1:6d:d1:cf:8a:43:02:1e:79:60:97:94:80:73:9b:
62:2f:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:56:15 2026 by rpki-client