Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
File: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (raw, json)
Hash identifier: qk3Wa3KURUhz1WmxkSca16nuJPzVJYg7dWN2m/h8Ydo=
Subject key identifier: 85:C5:B2:17:70:F0:FE:4F:AC:21:8E:A0:CA:5D:BD:DB:D2:97:3C:05
Certificate issuer: /CN=1D04DA2167EAB61049603273A1F09A004273C40A
Certificate serial: 7C10B60D119708AB1B5BF0FC0387D1D3AF8FB9E6
Authority key identifier: 1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D04DA2167EAB61049603273A1F09A004273C40A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
Signing time: Mon 10 Aug 2026 19:36:24 +0000
ROA not before: Mon 10 Aug 2026 19:31:24 +0000
ROA not after: Mon 09 Aug 2027 19:36:24 +0000
asID: 263256
IP address blocks: 198.58.8.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:10:b6:0d:11:97:08:ab:1b:5b:f0:fc:03:87:d1:d3:af:8f:b9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D04DA2167EAB61049603273A1F09A004273C40A
Validity
Not Before: Aug 10 19:31:24 2026 GMT
Not After : Aug 9 19:36:24 2027 GMT
Subject: CN=85C5B21770F0FE4FAC218EA0CA5DBDDBD2973C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:14:55:36:10:68:f4:dc:65:28:ea:0c:ea:
8f:9a:af:1c:82:5b:38:b0:db:5f:a0:a4:a2:29:26:
71:1a:97:08:c1:d4:61:3b:6f:95:e4:76:b3:c6:bf:
5d:cd:54:4c:c9:75:1a:d5:08:10:8f:76:ae:84:f3:
2a:87:48:ae:d9:45:6b:90:bc:95:5a:e4:3e:1b:c4:
16:45:42:ac:44:c5:19:d8:d6:8c:41:d7:cd:dc:c9:
67:3b:5d:2a:c4:28:b5:88:d9:e7:10:74:cd:7e:f8:
1e:29:86:08:42:73:81:06:c8:7a:3e:02:e0:ef:e2:
8c:e2:05:64:12:3e:d8:2e:cf:44:28:42:61:42:e5:
7e:f3:be:59:e3:ac:3b:d4:a6:99:bf:cc:53:77:3b:
fa:bd:3a:f6:94:4b:ef:5e:40:44:2d:ea:76:ae:59:
96:b4:35:6b:0e:7c:e5:42:f0:72:f2:4e:fb:d0:d6:
f8:e1:f5:8c:34:d5:63:26:2d:62:f3:eb:9c:29:cd:
28:b5:e1:33:1d:d8:44:39:ab:0f:47:09:70:b0:a0:
98:65:58:4a:51:08:96:1b:0c:81:b2:23:36:3b:d0:
bb:8d:77:7c:a0:83:0d:96:ad:8a:3e:43:0f:81:d7:
b3:9d:e5:ff:37:36:63:de:c2:e4:98:12:c1:3f:46:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:B2:17:70:F0:FE:4F:AC:21:8E:A0:CA:5D:BD:DB:D2:97:3C:05
X509v3 Authority Key Identifier:
keyid:1D:04:DA:21:67:EA:B6:10:49:60:32:73:A1:F0:9A:00:42:73:C4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/1D04DA2167EAB61049603273A1F09A004273C40A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D04DA2167EAB61049603273A1F09A004273C40A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32322d3332203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.58.8.0/22
Signature Algorithm: sha256WithRSAEncryption
07:94:cf:29:b3:ab:3f:21:16:85:ef:40:23:93:e9:18:f0:0a:
a9:6e:6b:02:35:71:9b:b9:fd:68:76:34:ba:46:e7:e0:2b:3a:
16:7a:bd:d2:5c:bd:94:4d:13:18:c0:5e:46:a6:9a:16:8f:2e:
07:c3:33:71:3c:4d:32:2a:42:fd:46:53:39:97:a8:9e:d7:ea:
59:d2:e3:ed:cf:a4:0c:5d:55:d1:68:67:06:df:43:43:01:a6:
01:db:41:c3:8f:57:11:ff:b7:33:a8:78:37:18:18:7a:eb:04:
e9:49:ad:69:7b:7f:62:5d:07:80:ec:c1:88:7a:9d:a2:bf:44:
b5:81:98:39:1f:13:be:d5:bd:3f:11:77:6f:00:07:b6:8c:6a:
e6:32:c1:45:e5:09:c9:1c:a0:ee:e7:fa:8c:ec:fb:f6:14:5d:
e3:05:64:12:8a:1e:03:1a:37:11:d6:ab:77:8b:03:e8:a9:92:
22:1a:99:a9:43:35:53:75:67:5a:d6:a4:a2:cb:61:95:37:a6:
80:f4:4a:9e:1a:71:0e:58:4e:41:97:8d:99:ba:da:9e:e4:6c:
10:7b:8c:ee:f2:39:08:fb:2d:84:58:f3:fe:a1:9d:8a:08:82:
ca:77:31:69:21:93:c5:30:8e:fb:e0:d8:90:6d:1b:6e:02:34:
15:41:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:28:13 2026 by rpki-client