Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
File: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: iBgHobzyVVy9nPyqoKmKck2C99wFwNqk8/CNK2D3UPQ=
Subject key identifier: D6:02:C4:DE:C6:9B:2F:53:1B:B6:72:81:53:A0:B9:F1:FB:62:CC:61
Certificate issuer: /CN=1D04DA2167EAB61049603273A1F09A004273C40A
Certificate serial: 49FF3C26E2F386A2BA01E5107B74E643E81CB08E
Authority key identifier: 1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D04DA2167EAB61049603273A1F09A004273C40A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
Signing time: Mon 10 Aug 2026 19:36:20 +0000
ROA not before: Mon 10 Aug 2026 19:31:20 +0000
ROA not after: Mon 09 Aug 2027 19:36:20 +0000
asID: 263256
IP address blocks: 170.247.200.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ff:3c:26:e2:f3:86:a2:ba:01:e5:10:7b:74:e6:43:e8:1c:b0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D04DA2167EAB61049603273A1F09A004273C40A
Validity
Not Before: Aug 10 19:31:20 2026 GMT
Not After : Aug 9 19:36:20 2027 GMT
Subject: CN=D602C4DEC69B2F531BB6728153A0B9F1FB62CC61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:35:61:73:87:96:7d:f0:08:3b:07:96:bb:
62:1e:2e:76:1d:2d:f9:4a:6b:05:a5:e2:bb:5d:8e:
30:01:ca:3d:e6:70:66:80:db:63:68:96:e7:ac:1a:
72:22:2e:09:c5:23:2b:3f:70:97:87:86:63:66:7c:
13:9e:26:12:a6:d5:fc:2c:5b:03:e5:31:4c:a7:cb:
1f:30:f6:04:d7:cb:c1:3d:6d:84:64:e4:db:66:d6:
33:7d:10:03:a8:2b:aa:d4:cc:03:18:92:06:8c:17:
80:4e:d7:4b:0f:19:10:e5:b5:3c:4f:44:b0:d9:6b:
3c:a5:dc:4f:43:a0:56:c1:41:7c:c6:bf:24:a8:2e:
3c:33:ed:8e:e4:7b:bb:2a:c9:75:65:5e:d5:3f:64:
b7:2d:4f:c0:3a:96:2b:d5:0e:1e:f8:fa:ba:0e:68:
0e:8f:df:32:9d:ca:7e:bd:d9:08:07:dc:b0:0b:2f:
e6:ed:3f:a3:67:4e:a3:84:d0:e6:27:da:5f:8f:f6:
fb:bf:5f:a9:41:93:fb:82:6d:83:38:5e:62:95:52:
57:35:e9:fd:fc:77:c0:18:47:a9:ea:e6:9b:52:d5:
bb:4f:bf:e6:91:bc:f9:bb:1c:8e:c5:3f:42:94:23:
2c:cd:48:78:98:8b:b4:b1:fb:37:46:ab:8a:44:c5:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:C4:DE:C6:9B:2F:53:1B:B6:72:81:53:A0:B9:F1:FB:62:CC:61
X509v3 Authority Key Identifier:
keyid:1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/1D04DA2167EAB61049603273A1F09A004273C40A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D04DA2167EAB61049603273A1F09A004273C40A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:f3:d0:46:d2:34:a4:db:10:cd:e2:2a:28:d0:14:34:11:33:
1c:25:52:3a:d5:8f:12:1d:fc:e4:94:e3:c2:49:9e:57:de:ee:
0e:fa:31:2c:ca:64:b8:e0:bb:61:a8:2a:29:b2:24:54:5c:b8:
ea:75:12:a9:30:23:e4:89:0d:a3:b2:f0:5b:07:35:f1:68:92:
dc:9e:87:ae:5c:3d:87:32:35:9d:a6:ab:9a:15:c8:62:fa:c1:
cb:ae:89:0c:17:59:c2:59:08:0b:58:d3:ae:c8:c8:54:47:33:
03:91:4f:7f:7f:5e:d0:b2:07:ae:0d:19:63:98:b7:6d:52:d3:
4c:e6:e5:99:a0:9c:de:6a:ab:5d:00:e7:ee:9e:db:70:51:85:
be:ee:bf:5f:72:1c:e0:c1:53:fa:e7:f4:96:28:9a:02:d7:a1:
f8:98:e7:f1:bb:75:b1:e6:66:78:1a:a2:86:b9:1b:4c:52:3a:
86:e1:39:88:d6:d5:50:ec:77:1e:b8:22:5e:d3:3a:ce:93:79:
09:7a:b6:70:46:39:84:d3:09:1b:30:09:ed:0b:15:ef:05:e2:
f1:f7:a5:4b:75:d7:e9:80:af:c2:cd:28:17:b9:83:0c:a5:20:
57:9b:62:e9:9b:94:84:59:81:f2:ea:66:b7:8a:e6:a6:b7:d0:
3b:2a:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:39:46 2026 by rpki-client