Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
File: 3137302e3234362e39362e302f32322d3232203d3e203532373231.roa (raw, json)
Hash identifier: 41rUZKa9a5stU06q7mIZFtPW3uU9bH6LzoDv8Iz3kUA=
Subject key identifier: B8:B3:14:2F:B2:BB:69:58:A7:44:D4:EC:9E:EC:09:4E:22:6B:08:83
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 07EA7F83F18E9E975BB5D540A406B45D1136292F
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:12:03 +0000
ROA not before: Tue 22 Sep 2026 17:07:03 +0000
ROA not after: Tue 21 Sep 2027 17:12:03 +0000
asID: 52721
IP address blocks: 170.246.96.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ea:7f:83:f1:8e:9e:97:5b:b5:d5:40:a4:06:b4:5d:11:36:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:07:03 2026 GMT
Not After : Sep 21 17:12:03 2027 GMT
Subject: CN=B8B3142FB2BB6958A744D4EC9EEC094E226B0883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:b1:95:26:be:34:d9:8c:c1:6a:f6:ea:c1:
b0:fd:c6:33:d0:39:e5:4c:7c:02:82:62:64:0c:fc:
12:34:c1:ba:99:17:bf:95:2b:ff:4c:05:50:c4:67:
f8:57:c5:dc:e0:5c:a8:77:95:67:a3:6b:25:1b:3f:
23:9a:46:95:3c:f8:b2:32:25:ba:48:2a:71:7d:17:
6a:ca:2f:27:37:2e:a4:a7:15:ff:bb:33:e6:80:80:
a8:0c:e6:de:08:8f:c0:82:88:0f:ca:2f:4d:92:2e:
18:9b:41:a0:72:dc:63:c1:27:51:4d:24:8f:a3:4b:
71:18:13:e2:65:58:2f:4c:30:f6:00:c8:48:d5:5e:
08:d6:f6:29:ae:1c:e2:51:67:04:3d:80:a2:18:f2:
71:23:dd:66:2f:31:1a:f4:8d:62:c9:6e:66:17:76:
d5:dc:6d:f2:6e:22:cd:10:f5:e7:b2:e2:44:e1:a8:
58:6b:5f:ca:5e:19:7d:95:16:85:f7:f2:e3:58:c0:
09:19:e2:e6:28:b0:ae:ee:58:b4:b9:f5:9c:ba:87:
30:67:54:a3:86:5f:a0:c8:54:50:a3:46:a0:bc:13:
ef:4a:8d:40:54:30:b2:6a:57:44:76:b8:30:09:a0:
81:17:38:c8:1a:84:35:a5:de:1e:a7:a4:51:61:b2:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:14:2F:B2:BB:69:58:A7:44:D4:EC:9E:EC:09:4E:22:6B:08:83
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39362e302f32322d3232203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.96.0/22
Signature Algorithm: sha256WithRSAEncryption
05:88:45:11:36:59:78:e2:3d:08:65:23:f6:6e:8e:01:b3:82:
71:d1:12:02:50:fa:15:80:94:05:b6:6a:8f:c8:a0:19:8e:f0:
2d:01:73:38:cc:cf:a0:57:45:5b:0c:96:3e:0a:dd:88:d0:eb:
f0:e9:a6:c2:fe:87:06:c9:ea:f7:0d:15:dd:18:5d:e6:f6:5a:
d9:89:14:9e:02:c8:82:e5:15:ca:da:e1:39:67:ab:6d:96:c6:
49:86:63:31:af:37:39:af:c2:ef:22:d3:ed:7b:34:c6:06:e7:
90:3d:39:a6:0c:67:72:5a:06:bc:ff:f6:b2:cc:2d:04:37:28:
4b:78:b8:d1:c1:0c:2f:31:d3:9c:b5:72:b4:61:f4:14:48:13:
0c:1b:c3:92:cc:3e:32:77:3f:3b:8b:80:a9:32:13:f0:73:81:
b5:e0:0b:67:6c:1d:67:27:85:29:a1:df:29:9d:e5:f7:d1:da:
89:81:d6:9b:f1:89:40:c2:07:b5:4f:56:20:f3:a0:6f:4c:c0:
22:1f:24:75:39:fe:b6:85:d4:d4:e4:fd:d4:f6:6e:30:a0:61:
13:5d:db:c6:3b:84:9b:5e:e4:03:c8:cb:5b:8c:4a:4a:8f:df:
95:d8:19:70:89:e0:29:40:6f:60:05:87:80:f9:18:b1:39:fd:
d2:57:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:05:56 2026 by rpki-client