Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa
File: 3137302e3234362e39392e302f32342d3234203d3e203532373231.roa (raw, json)
Hash identifier: Fp0tVZ7KdRyz+Ga/ATy38psqsKR+TpLvjMPWrF8Mldg=
Subject key identifier: 02:87:61:74:D3:05:97:A9:D5:4A:4E:5B:82:23:4B:F1:62:C5:4B:22
Certificate issuer: /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial: 1D0AE98A0B12A215769A52DB8F44E90155BF5763
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa
Signing time: Tue 22 Sep 2026 17:11:56 +0000
ROA not before: Tue 22 Sep 2026 17:06:56 +0000
ROA not after: Tue 21 Sep 2027 17:11:56 +0000
asID: 52721
IP address blocks: 170.246.99.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0a:e9:8a:0b:12:a2:15:76:9a:52:db:8f:44:e9:01:55:bf:57:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Validity
Not Before: Sep 22 17:06:56 2026 GMT
Not After : Sep 21 17:11:56 2027 GMT
Subject: CN=02876174D30597A9D54A4E5B82234BF162C54B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:ef:fa:46:c2:d0:fe:27:79:3b:43:8b:92:
36:46:b3:3c:a4:70:41:4a:05:ec:17:95:dd:c9:c2:
e4:47:9f:94:1a:ef:a6:48:f0:89:6d:36:e8:5e:5b:
93:6b:e3:58:15:92:b9:b7:50:b1:a2:76:94:5d:a6:
d7:e2:e9:6d:12:8d:6c:20:61:3f:79:e6:a1:9f:57:
17:33:00:fe:55:73:b4:01:57:3e:84:8d:bf:1f:44:
ea:d2:ea:4d:49:d8:3b:a1:cf:29:dc:e2:da:8d:ec:
1d:79:7d:9c:0f:e2:3c:90:07:8d:30:c7:06:cd:b4:
29:dc:92:9b:12:a4:58:cc:01:1b:72:91:c1:24:d2:
d0:a0:24:fb:67:fe:24:9d:7e:78:0a:59:87:2c:fc:
78:bb:09:03:8f:b4:a0:17:77:c8:22:f9:25:e9:f9:
d9:1f:b0:55:74:a4:37:83:e9:37:7b:00:e3:19:89:
d4:bc:c5:ff:0a:36:27:d0:5f:1d:97:89:aa:2e:5e:
6c:81:75:26:94:d4:88:4d:68:a2:bd:4a:22:70:b8:
bb:1e:26:b6:a9:8e:c0:43:a1:18:28:8c:35:67:1e:
2c:9f:01:8b:0c:f8:3b:cc:c3:b1:3e:e6:94:3d:0e:
44:bd:c2:60:34:38:62:09:35:bd:4b:05:5b:d3:f2:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:61:74:D3:05:97:A9:D5:4A:4E:5B:82:23:4B:F1:62:C5:4B:22
X509v3 Authority Key Identifier:
keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3137302e3234362e39392e302f32342d3234203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
43:42:8b:b4:e0:e0:84:85:5a:4a:29:38:a9:76:7f:71:d5:80:
42:c0:ec:c9:e5:b0:e0:1e:4a:56:7b:4a:c0:41:9c:2e:9b:97:
67:34:87:3f:ed:3e:cc:24:bd:a8:67:29:b0:82:14:4d:e8:90:
d7:84:38:d2:40:bf:df:4d:3c:99:d7:ba:38:31:d3:b5:48:43:
a4:ea:5b:e1:a9:ac:0c:c1:9a:62:83:c9:99:00:87:55:0f:f8:
76:e5:3f:24:da:4b:34:cd:86:12:85:e4:ed:23:d7:21:63:b2:
8a:a2:46:e0:54:01:cd:4f:b0:ac:4a:bb:f0:f7:ea:00:bc:50:
89:23:2f:56:12:1d:80:25:ca:06:8b:f6:27:a0:0e:e1:7d:3f:
0e:5b:48:f5:c7:fd:74:df:12:39:42:df:06:e7:d3:8c:94:07:
d3:27:bc:a3:14:32:0e:e2:bb:78:76:79:aa:28:ba:54:0e:c4:
19:ad:12:24:e3:64:95:0e:71:b7:6d:43:f3:c7:f0:b2:a2:b4:
1e:f5:b5:e4:10:e3:bb:05:7b:3e:10:99:1a:f5:4a:5b:81:7d:
b7:0c:a2:11:3d:3d:a2:23:40:1c:8c:2b:c1:6f:8b:48:cd:01:
7e:31:ea:e9:af:76:2d:d9:31:01:c9:2e:11:79:42:9c:f3:f3:
63:5c:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:39:45 2026 by rpki-client