Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/34352e3137312e3234302e302f32322d3234203d3e20323638373333.roa
File: 34352e3137312e3234302e302f32322d3234203d3e20323638373333.roa (raw, json)
Hash identifier: KryQe9QtlGs8hNhMoaZwcaPb2YJhJulqdAXK9bz66kM=
Subject key identifier: 7A:56:7C:2C:4A:27:31:5D:27:B2:A7:57:C1:16:88:75:AC:12:2F:7C
Certificate issuer: /CN=13784D392592C9DC93DE762EA417B438C4310C4F
Certificate serial: 1AD76DA830C0F526EEEE4DE45FDC41436672DD86
Authority key identifier: 13:78:4D:39:25:92:C9:DC:93:DE:76:2E:A4:17:B4:38:C4:31:0C:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13784D392592C9DC93DE762EA417B438C4310C4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/34352e3137312e3234302e302f32322d3234203d3e20323638373333.roa
Signing time: Fri 06 Feb 2026 04:35:34 +0000
ROA not before: Fri 06 Feb 2026 04:30:34 +0000
ROA not after: Fri 05 Feb 2027 04:35:34 +0000
asID: 268733
IP address blocks: 45.171.240.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d7:6d:a8:30:c0:f5:26:ee:ee:4d:e4:5f:dc:41:43:66:72:dd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13784D392592C9DC93DE762EA417B438C4310C4F
Validity
Not Before: Feb 6 04:30:34 2026 GMT
Not After : Feb 5 04:35:34 2027 GMT
Subject: CN=7A567C2C4A27315D27B2A757C1168875AC122F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:84:f8:6d:77:06:8f:fa:89:26:e0:0b:d3:
4b:73:c0:fd:a3:da:1f:6e:c7:8a:ba:18:63:c0:2c:
14:28:95:f4:64:49:6c:7e:ce:f4:02:0c:8d:9d:ed:
eb:53:b6:87:38:7d:4e:63:67:9a:84:f7:f1:03:4f:
47:8c:76:70:c7:05:64:f8:a3:2b:bc:e9:0c:81:92:
e7:a8:12:5c:43:f1:40:5e:9e:10:69:b1:4a:6f:1d:
99:11:04:3f:27:76:07:74:64:1c:d7:20:fa:df:ac:
24:53:a1:02:ed:ee:61:27:36:32:f5:20:2e:7a:b4:
d8:c9:4a:68:8d:84:79:8b:da:6a:76:3e:86:5d:be:
a4:43:86:07:6c:b3:c4:88:d4:6a:46:63:a2:95:89:
6d:28:b5:b5:f4:c2:80:f4:40:da:7a:52:7c:8e:98:
88:62:c3:29:4e:3d:f1:c0:75:f4:fb:5e:63:e3:ee:
3b:54:01:09:33:33:04:76:2a:b1:7c:be:9c:f1:f6:
c8:a7:6d:bb:b6:4a:18:af:cf:bc:f6:df:d9:e9:09:
62:b8:70:2c:05:85:3c:f4:23:32:25:b8:c7:46:0d:
94:86:b2:8c:74:19:4f:1e:85:9f:b4:fc:aa:92:fc:
20:6e:0a:a2:21:52:7a:d0:e3:78:07:b4:03:dc:aa:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:7C:2C:4A:27:31:5D:27:B2:A7:57:C1:16:88:75:AC:12:2F:7C
X509v3 Authority Key Identifier:
keyid:13:78:4D:39:25:92:C9:DC:93:DE:76:2E:A4:17:B4:38:C4:31:0C:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/13784D392592C9DC93DE762EA417B438C4310C4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13784D392592C9DC93DE762EA417B438C4310C4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UJa8Do1P17XEBQUtp98ANLjv5rwvpSGd4r8ManMerPp/0/34352e3137312e3234302e302f32322d3234203d3e20323638373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.240.0/22
Signature Algorithm: sha256WithRSAEncryption
80:a4:0b:77:13:dc:86:e3:d3:d9:4c:8b:8b:de:4b:cd:51:95:
8b:e4:ae:63:e8:46:36:33:47:8f:b0:c3:4d:8b:40:0b:89:17:
0c:74:fe:09:3d:b9:44:97:a1:e5:57:5d:30:75:b3:10:8e:1e:
c2:e2:11:11:1c:e5:0b:d7:59:d1:ea:0f:dc:a7:b9:58:37:e2:
ec:da:6f:13:35:de:07:c3:fd:0b:b4:54:f0:49:f4:82:58:23:
5d:08:a7:24:0d:5e:02:0c:d5:6b:1a:c4:08:7f:e9:e3:2d:97:
16:84:ed:f3:1f:d1:75:40:e3:bc:d9:57:cc:9a:17:af:6f:d2:
e0:49:bd:fc:09:85:70:99:e7:22:f3:1c:7b:3d:20:82:8e:01:
88:fa:93:17:d9:9a:7b:5f:c1:0e:23:08:f7:a5:c2:c7:24:00:
ef:01:16:58:7b:da:f1:82:73:1b:3d:3d:4d:b2:98:b2:1a:a0:
6e:28:69:a6:5c:0e:fd:46:d0:91:12:2f:63:8d:0e:d2:62:eb:
aa:65:09:6e:06:85:54:bd:64:11:59:16:69:08:6c:3f:4a:f4:
c8:8f:9b:cd:70:c4:38:0d:26:cd:72:40:f7:18:46:be:fa:5d:
28:be:7c:01:42:b0:3b:30:e6:5f:11:29:94:73:77:de:b1:bb:
d5:fa:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:28 2026 by rpki-client