Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32312d3231203d3e203532353536.roa
File: 3137372e38352e3234382e302f32312d3231203d3e203532353536.roa (raw, json)
Hash identifier: uPRHzdeG8R3jqK05eRWdHmIE2F0hrznj8Be23wn5QII=
Subject key identifier: 5A:39:73:6F:E9:39:D7:F4:DE:7F:4D:29:7D:A0:4D:AD:DB:E4:BC:AF
Certificate issuer: /CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Certificate serial: 10D07E9D55D62B855A192E154A03B1F4BBF5FC67
Authority key identifier: EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32312d3231203d3e203532353536.roa
Signing time: Thu 14 May 2026 21:27:33 +0000
ROA not before: Thu 14 May 2026 21:22:33 +0000
ROA not after: Thu 13 May 2027 21:27:33 +0000
asID: 52556
IP address blocks: 177.85.248.0/21 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d0:7e:9d:55:d6:2b:85:5a:19:2e:15:4a:03:b1:f4:bb:f5:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF1F2ADF92F8632549A9CD143020F3B9572ACA50
Validity
Not Before: May 14 21:22:33 2026 GMT
Not After : May 13 21:27:33 2027 GMT
Subject: CN=5A39736FE939D7F4DE7F4D297DA04DADDBE4BCAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:c2:95:69:46:5f:d9:ce:d1:e8:41:39:92:
ff:86:94:9e:8d:2c:05:a1:86:f1:fd:7d:a6:25:29:
74:7b:ee:1a:17:db:aa:20:b6:bb:1d:ad:b6:2a:48:
22:ce:e3:78:fa:0d:cf:23:28:84:d8:b3:a3:e2:91:
45:8f:69:2b:24:0b:e8:21:95:12:30:7f:32:d9:d5:
40:6a:2c:33:5f:57:a9:d9:a5:95:c8:ef:07:5c:d9:
85:cc:e8:53:66:24:a1:e0:d3:1f:e4:2b:13:89:4a:
94:34:4c:86:69:92:ea:79:d0:02:1e:e0:b4:89:7e:
8a:ac:29:90:2f:26:07:5f:ac:2a:38:d4:2b:fc:c7:
0e:88:16:29:07:b6:5e:1a:ca:06:93:c9:d0:33:b5:
72:97:c0:c9:94:8c:27:70:80:86:69:3b:27:0f:a7:
8e:c8:37:18:dc:ed:4c:51:24:89:3b:e6:2d:e4:41:
be:69:9f:33:88:1d:51:bd:87:ff:d2:53:bb:64:d9:
b4:91:3a:3f:f6:36:8e:44:2c:f8:2d:4b:6f:f4:05:
4b:63:e4:8e:8c:db:b2:db:f7:3d:a0:a6:ba:75:b0:
a0:35:a5:a9:88:ef:1c:de:5e:1c:bd:53:f3:94:77:
07:cd:8e:45:e9:c7:33:92:47:d6:21:dc:75:d1:b7:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:73:6F:E9:39:D7:F4:DE:7F:4D:29:7D:A0:4D:AD:DB:E4:BC:AF
X509v3 Authority Key Identifier:
keyid:EF:1F:2A:DF:92:F8:63:25:49:A9:CD:14:30:20:F3:B9:57:2A:CA:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF1F2ADF92F8632549A9CD143020F3B9572ACA50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32312d3231203d3e203532353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.85.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:72:2f:ef:bc:09:20:21:60:62:2e:70:7e:f9:e0:d7:a9:cc:
96:a5:7b:af:5c:e1:ff:0d:b2:34:65:63:23:92:9d:7f:a3:6e:
aa:93:51:8e:29:1a:0a:54:27:75:22:cd:88:51:0a:0e:e5:18:
a5:32:40:e2:bf:c4:17:fd:81:c1:83:cf:2f:87:37:8d:8d:23:
0c:7f:0e:43:24:ca:cf:0e:1b:46:1b:d5:8f:2e:8e:64:a1:e8:
af:96:d2:05:5d:e8:87:b4:aa:b9:31:40:d5:e9:bc:50:6e:7d:
46:53:60:77:86:43:dd:0b:30:b5:fc:68:ad:5b:96:c3:5b:47:
1e:4f:a8:c2:84:83:ab:f1:03:96:16:8f:a6:f7:83:fc:a5:a8:
be:b4:b8:e6:55:99:cc:27:2e:1d:cc:78:76:18:68:ea:9e:39:
3c:4c:93:4f:1e:fc:19:c0:14:46:a7:12:d9:88:0a:6b:c7:d3:
59:26:c5:01:9b:f0:34:95:3e:bb:22:55:b8:72:8a:7e:e9:2e:
b5:61:da:6f:0e:f5:24:47:35:db:ae:df:0a:91:a4:80:ec:fc:
7b:c6:91:55:52:20:fd:39:8d:71:db:28:89:b2:e2:29:4a:65:
29:ab:e5:24:5f:fd:41:ab:eb:12:9f:75:d6:be:82:73:c9:3d:
b0:a3:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:22:18 2026 by rpki-client