Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3234203d3e20323730353833.roa
File: 3137372e382e3134302e302f32322d3234203d3e20323730353833.roa (raw, json)
Hash identifier: oGl1bC736UBD+/2ETZ5HKVlJqcdUzq5SuzfBKXOhgGg=
Subject key identifier: 54:61:FB:4D:AF:D9:37:26:B2:92:D4:D1:92:47:4C:EC:A6:AE:D2:A2
Certificate issuer: /CN=1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F
Certificate serial: 2AA6CC201AC60113B00C1AFC82C2A873CC59D4BD
Authority key identifier: 1B:3F:F1:7B:9C:86:8B:B2:AD:F3:5F:EC:6C:CC:7C:88:BA:D4:A3:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3234203d3e20323730353833.roa
Signing time: Tue 14 Jul 2026 19:00:09 +0000
ROA not before: Tue 14 Jul 2026 18:55:09 +0000
ROA not after: Tue 13 Jul 2027 19:00:09 +0000
asID: 270583
IP address blocks: 177.8.140.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a6:cc:20:1a:c6:01:13:b0:0c:1a:fc:82:c2:a8:73:cc:59:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F
Validity
Not Before: Jul 14 18:55:09 2026 GMT
Not After : Jul 13 19:00:09 2027 GMT
Subject: CN=5461FB4DAFD93726B292D4D192474CECA6AED2A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:c0:02:be:cc:b9:8f:9a:36:45:ad:fd:7c:
f6:87:35:80:4a:8c:56:40:eb:94:2f:c2:79:44:66:
e6:33:e7:af:a9:0b:a2:42:3e:33:c1:78:19:81:47:
b0:d7:fc:4a:c4:cd:55:5b:0a:57:c4:09:fa:a3:bd:
c9:bb:a4:5b:bd:f4:ad:d6:5f:69:bf:ae:cf:d4:73:
71:6b:70:a8:cb:b6:0f:bc:70:75:ce:6c:fd:e8:f4:
a6:d9:48:ab:49:60:2f:92:cb:1c:4b:d4:ce:87:69:
c9:9e:ae:32:6f:3e:cc:8e:ab:ab:3b:84:0f:ad:08:
41:aa:d9:05:52:67:c0:ae:d9:16:ef:32:5a:d1:f2:
5e:4b:11:71:f4:2a:b6:e4:64:4f:cb:44:82:f7:90:
8e:b6:1c:f8:60:76:79:bf:d0:64:97:f3:ed:0d:a2:
fa:97:dc:20:25:40:c7:aa:69:0b:4e:90:7e:23:72:
e7:fc:4d:27:af:d7:4b:f6:1d:0a:6c:25:c0:e5:62:
c3:24:1d:0b:7d:3a:67:b1:2b:b7:71:55:bb:61:25:
e7:64:f8:16:84:77:53:e9:f7:e5:67:b0:da:47:71:
4c:ed:52:26:51:fd:77:68:5b:4f:f9:bf:6c:71:09:
be:20:30:46:86:e7:8f:e6:ae:fb:77:b3:0a:91:51:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:FB:4D:AF:D9:37:26:B2:92:D4:D1:92:47:4C:EC:A6:AE:D2:A2
X509v3 Authority Key Identifier:
keyid:1B:3F:F1:7B:9C:86:8B:B2:AD:F3:5F:EC:6C:CC:7C:88:BA:D4:A3:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B3FF17B9C868BB2ADF35FEC6CCC7C88BAD4A31F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134302e302f32322d3234203d3e20323730353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:59:b0:86:00:55:fa:49:35:3e:a7:2e:fd:6e:c7:e5:6c:ad:
e7:ba:57:ec:ca:a1:cb:b5:41:35:0f:61:5e:a4:c0:7d:77:b2:
c9:a2:b5:28:e1:e5:d6:af:84:ce:82:e8:42:f5:89:a9:f2:f5:
f2:a6:1b:b9:69:63:fb:74:07:83:95:4f:a8:31:0f:23:cf:00:
4d:dc:08:82:51:68:ae:ed:14:1e:9e:03:59:9b:f7:d2:3c:7e:
ee:81:b5:65:4c:5d:6c:e5:a7:04:81:49:23:b7:e4:a7:20:cc:
f9:50:18:9b:29:c8:6c:28:24:9f:41:54:33:d4:21:a5:1e:51:
1d:2d:24:58:77:eb:69:d3:f9:42:49:35:c4:33:5d:c2:3f:eb:
79:e4:cc:18:5f:7e:73:69:b5:d6:2e:e3:ed:7e:da:08:b4:f3:
81:10:13:74:c5:01:a2:1f:37:24:47:30:46:47:cf:fc:ac:7e:
b4:68:9d:59:d3:a5:07:45:3e:1a:37:d9:fd:d7:ad:ff:f5:90:
24:1e:42:2f:e6:48:ea:e5:3a:8e:81:dc:82:2d:02:57:c0:0e:
d5:47:7b:24:01:fd:d7:ce:ff:e5:9e:11:e4:6f:03:6f:e4:7f:
62:68:7b:16:94:64:1f:6c:05:6a:8c:d8:c5:01:e6:a4:fc:74:
fa:b0:40:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKqbMIBrGAROwDBr8gsKoc8xZ1L0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIzRkYxN0I5Qzg2OEJCMkFERjM1RkVDNkNDQzdDODhC
QUQ0QTMxRjAeFw0yNjA3MTQxODU1MDlaFw0yNzA3MTMxOTAwMDlaMDMxMTAvBgNV
BAMTKDU0NjFGQjREQUZEOTM3MjZCMjkyRDREMTkyNDc0Q0VDQTZBRUQyQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCww8ACvsy5j5o2Ra39fPaHNYBK
jFZA65QvwnlEZuYz56+pC6JCPjPBeBmBR7DX/ErEzVVbClfECfqjvcm7pFu99K3W
X2m/rs/Uc3FrcKjLtg+8cHXObP3o9KbZSKtJYC+SyxxL1M6HacmerjJvPsyOq6s7
hA+tCEGq2QVSZ8Cu2RbvMlrR8l5LEXH0KrbkZE/LRIL3kI62HPhgdnm/0GSX8+0N
ovqX3CAlQMeqaQtOkH4jcuf8TSev10v2HQpsJcDlYsMkHQt9OmexK7dxVbthJedk
+BaEd1Pp9+VnsNpHcUztUiZR/XdoW0/5v2xxCb4gMEaG54/mrvt3swqRUfdZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVGH7Ta/ZNyayktTRkkdM7Kau0qIwHwYDVR0j
BBgwFoAUGz/xe5yGi7Kt81/sbMx8iLrUox8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjYxRnFrczVVUzRjTjV2MlE5N2NaUkU2OUx2cWc0djM1em5vMVg2eVFK
eXgvMC8xQjNGRjE3QjlDODY4QkIyQURGMzVGRUM2Q0NDN0M4OEJBRDRBMzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCM0ZGMTdCOUM4NjhCQjJB
REYzNUZFQzZDQ0M3Qzg4QkFENEEzMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2MUZxa3M1VVM0Y041djJROTdjWlJFNjlMdnFnNHYzNXpubzFYNnlRSnl4LzAv
MzEzNzM3MmUzODJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQiMMA0GCSqGSIb3DQEBCwUAA4IBAQB7WbCGAFX6
STU+py79bsflbK3nulfsyqHLtUE1D2FepMB9d7LJorUo4eXWr4TOguhC9Ymp8vXy
phu5aWP7dAeDlU+oMQ8jzwBN3AiCUWiu7RQengNZm/fSPH7ugbVlTF1s5acEgUkj
t+SnIMz5UBibKchsKCSfQVQz1CGlHlEdLSRYd+tp0/lCSTXEM13CP+t55MwYX35z
abXWLuPtftoItPOBEBN0xQGiHzckRzBGR8/8rH60aJ1Z06UHRT4aN9n9163/9ZAk
HkIv5kjq5TqOgdyCLQJXwA7VR3skAf3Xzv/lnhHkbwNv5H9iaHsWlGQfbAVqjNjF
Aeak/HT6sEA/
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:07 2026 by rpki-client