Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38332e302f32342d3234203d3e20323634303838.roa
File: 3133382e39342e38332e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier: fhdvwpUplYRuVEIik4+qH5OwNX+BNy4TcDgWQUdFQW8=
Subject key identifier: 49:CF:F0:5D:C5:EA:80:79:D2:1B:BC:A0:27:DF:4E:4A:0B:3D:A8:6E
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 212540D9595ABA39DCBF7606A52D58275964A72D
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38332e302f32342d3234203d3e20323634303838.roa
Signing time: Tue 22 Sep 2026 17:11:57 +0000
ROA not before: Tue 22 Sep 2026 17:06:57 +0000
ROA not after: Tue 21 Sep 2027 17:11:57 +0000
asID: 264088
IP address blocks: 138.94.83.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:25:40:d9:59:5a:ba:39:dc:bf:76:06:a5:2d:58:27:59:64:a7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:57 2026 GMT
Not After : Sep 21 17:11:57 2027 GMT
Subject: CN=49CFF05DC5EA8079D21BBCA027DF4E4A0B3DA86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:7a:91:ca:3f:e7:18:ed:1b:a8:14:4c:a1:
04:a5:de:1c:77:5d:9d:f9:04:30:ca:ce:44:46:a0:
28:eb:05:99:5c:ae:9e:09:0b:c5:b6:81:02:a8:40:
a7:44:84:08:5f:d8:2c:30:9d:38:95:54:05:5d:4e:
9a:f9:17:eb:e8:70:58:66:fc:bd:25:4a:2b:5e:eb:
57:31:a5:33:d7:88:68:2c:d4:b9:f8:19:4e:3f:15:
0f:22:ae:77:3f:2b:aa:38:5d:00:55:fa:b3:34:92:
28:65:37:13:30:bf:91:81:ec:ff:c0:13:0d:67:0e:
e8:25:a7:3b:10:63:12:92:a2:56:99:d6:c5:48:88:
2c:1b:b5:3c:f1:59:12:c2:45:09:5c:b8:e1:2f:67:
3d:af:d2:51:25:1f:17:96:3f:6c:cd:e3:6f:c2:10:
2d:f0:bb:c5:f2:db:11:ad:90:e6:c5:10:78:c9:17:
e3:90:86:de:0c:c7:4c:0b:2d:d0:12:7e:ee:cf:87:
98:2c:cf:1d:a0:b3:e2:e0:13:2d:75:2b:a8:ca:41:
7b:f7:bf:22:15:28:c1:8c:57:ba:90:d7:be:4d:6f:
6f:a3:53:dd:b3:95:c5:e8:6f:19:e9:5d:5f:16:df:
1b:4c:1d:70:25:78:78:4e:79:08:55:94:1d:1e:18:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:F0:5D:C5:EA:80:79:D2:1B:BC:A0:27:DF:4E:4A:0B:3D:A8:6E
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3133382e39342e38332e302f32342d3234203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f8:09:72:f9:63:1e:9b:43:ff:17:7e:9f:9d:b2:80:8b:7d:
aa:0a:57:96:19:c2:7a:b7:8e:fc:93:a3:8c:13:11:6e:23:4d:
41:f0:f4:cf:b2:8f:f9:14:a8:db:eb:ae:47:df:df:31:08:35:
5f:bc:df:d4:48:9f:b6:b3:76:45:df:5e:bd:4b:83:8b:7b:38:
28:88:7c:99:b4:d2:fc:73:e9:41:e1:62:51:1b:bd:c2:f5:bc:
f7:dd:e2:5d:08:2c:81:66:13:dc:82:3c:8c:0b:81:1b:90:db:
00:e1:5b:db:49:8f:81:64:98:ee:c3:70:d1:d0:d1:10:f1:70:
b5:f6:9d:d5:56:99:10:01:88:81:6d:3a:99:eb:0d:b8:14:f4:
ce:33:2d:c0:13:2c:a8:5c:b9:4e:16:80:43:7c:e3:be:58:f5:
a8:c4:c0:66:7e:72:2c:38:dc:d4:71:06:4d:23:9e:fb:a8:22:
13:25:27:01:08:87:28:61:78:57:d7:0b:2e:2c:42:81:d8:76:
46:de:c5:3c:b6:d7:a9:d3:51:52:38:06:81:bf:b2:13:83:e8:
c2:0f:e1:df:64:ec:de:c3:84:0e:ae:cc:a8:2b:cf:bd:87:d4:
42:62:6d:bd:64:76:72:e9:c9:92:b1:db:7e:61:fe:ee:1e:81:
d3:1a:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:17:49 2026 by rpki-client