Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38312e302f32342d3234203d3e20323634303838.roa
File: 3133382e39342e38312e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier: hT6vrA9lHsUMsPeBCX4vpoJmc5d8GIJIQWw4Rcm6Jb8=
Subject key identifier: FB:6A:11:1A:0E:8F:EE:0C:5C:0A:FD:F3:E7:65:BE:D0:90:34:44:B4
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 50E118D1309E740D6364FFD3EB97E1B344DE247F
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38312e302f32342d3234203d3e20323634303838.roa
Signing time: Tue 22 Sep 2026 17:11:59 +0000
ROA not before: Tue 22 Sep 2026 17:06:59 +0000
ROA not after: Tue 21 Sep 2027 17:11:59 +0000
asID: 264088
IP address blocks: 138.94.81.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e1:18:d1:30:9e:74:0d:63:64:ff:d3:eb:97:e1:b3:44:de:24:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:59 2026 GMT
Not After : Sep 21 17:11:59 2027 GMT
Subject: CN=FB6A111A0E8FEE0C5C0AFDF3E765BED0903444B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:08:e6:89:91:46:31:21:14:a9:11:6d:07:
d4:d4:e6:69:15:66:31:33:d3:68:c8:15:3e:bc:7e:
0f:0c:d5:51:47:b6:67:ba:bf:f6:09:87:23:da:e6:
77:e4:5d:7e:ff:aa:41:65:11:04:92:36:81:bd:91:
4b:e8:37:99:fe:09:04:0a:59:f7:04:77:8d:47:a4:
1c:e6:5d:b7:67:86:c8:9c:d5:6e:4f:a7:90:f6:81:
f5:e3:d0:e4:c9:71:8c:d8:0c:36:2b:b8:5c:79:b2:
da:5e:50:bb:54:5f:df:a3:ba:e2:29:ce:8d:b1:fd:
6b:12:ec:4b:d7:ad:14:4a:cb:57:fa:57:60:fd:37:
12:6b:23:53:ea:02:5d:1d:bb:98:3e:1b:a0:34:b3:
47:81:53:84:0d:32:70:02:09:eb:f8:aa:d7:f0:a8:
85:28:4c:f1:c9:e0:7e:6d:57:ee:cd:05:32:60:a7:
93:8a:95:fd:23:3a:50:1f:b6:93:30:e7:19:52:fd:
fb:71:55:f9:c7:7e:54:c4:26:48:4f:27:ad:45:23:
fc:1c:0f:05:2f:6d:b7:9a:8c:6c:4c:75:ad:f3:c1:
fc:21:31:50:21:9e:80:db:a6:38:81:10:bd:15:e3:
1d:a0:c6:c3:3c:88:b6:09:11:1b:9a:92:df:8b:2f:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6A:11:1A:0E:8F:EE:0C:5C:0A:FD:F3:E7:65:BE:D0:90:34:44:B4
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38312e302f32342d3234203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.81.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9e:fd:01:1b:a3:23:74:4b:76:a3:8e:bf:3f:9a:62:28:53:
05:38:8e:cb:88:06:8d:06:7e:5b:89:7e:5a:a5:86:cc:20:28:
76:8a:30:a8:5e:92:20:bb:3a:7e:eb:d5:cd:d3:0e:36:d8:ea:
a6:68:36:77:0f:d9:99:65:c9:b1:73:57:04:bd:b7:c3:4a:96:
5a:88:0a:cc:15:66:ec:47:18:c3:a8:31:46:42:4a:45:2a:96:
9f:ed:f7:33:24:e5:c8:1d:84:4f:06:23:c8:44:26:09:59:1c:
ff:32:8b:73:a5:64:84:2f:4d:7d:09:e2:60:a9:12:85:20:5e:
5b:b9:68:d5:8b:95:66:4c:f9:4e:c0:8d:5b:f8:cb:8b:54:16:
d5:06:65:dc:1d:07:75:b5:26:b8:d0:6f:a6:dd:60:a5:10:92:
e1:7c:e6:cc:e6:00:d3:1c:aa:d6:17:e0:6d:df:54:c4:8c:98:
fc:2a:0f:0d:e6:db:42:87:31:02:dd:94:02:75:ee:d6:7d:c6:
46:79:a6:1d:2b:92:c4:e9:9d:42:e7:54:9c:90:d5:10:31:df:
fb:05:06:07:0d:50:0d:0e:0d:01:36:03:6e:2f:4b:61:b9:1d:
f1:de:63:04:c3:88:28:5e:31:94:83:b1:06:e1:ff:f1:39:5f:
77:7a:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:42:41 2026 by rpki-client