Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
File: 3133312e37322e38302e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier: mQqY1f/gepzkxx2QqVmNC0ufnJ6bNPIofPv/KrHc2io=
Subject key identifier: 4A:87:38:54:02:69:54:A8:D1:DF:9C:F8:32:A5:10:DE:BF:24:EF:4B
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 100E61B281DBEBEAF40577678DA1C01F3EE1F7A3
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
Signing time: Tue 10 Mar 2026 19:30:17 +0000
ROA not before: Tue 10 Mar 2026 19:25:17 +0000
ROA not after: Tue 09 Mar 2027 19:30:17 +0000
asID: 28584
IP address blocks: 131.72.80.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:61:b2:81:db:eb:ea:f4:05:77:67:8d:a1:c0:1f:3e:e1:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:17 2026 GMT
Not After : Mar 9 19:30:17 2027 GMT
Subject: CN=4A873854026954A8D1DF9CF832A510DEBF24EF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:06:88:a3:86:74:50:47:72:74:f1:8e:f0:
3c:34:5f:e5:87:3c:0a:46:3f:01:dc:bf:7d:4a:d9:
39:4e:e3:90:c4:47:17:95:7b:24:23:58:27:eb:53:
74:5c:b8:e7:ab:22:bd:91:ef:ad:5e:da:88:06:50:
ea:fd:5f:cb:4c:d7:9b:73:39:1a:fd:57:2c:54:5c:
b8:9d:47:70:cd:9d:b8:77:d0:14:34:95:2c:43:2b:
d5:15:99:ec:fe:28:2a:d9:ba:ab:f8:0d:ac:80:4c:
5e:08:0a:58:74:35:68:71:27:5f:25:d3:30:d3:41:
ed:59:56:07:a0:95:5b:79:c3:18:9e:78:8a:04:fb:
e4:fd:7d:ab:57:61:31:dc:55:8d:d5:f7:30:3b:f1:
e9:00:5e:b6:e7:9f:00:54:24:83:30:44:b1:b5:24:
00:dd:48:f3:8e:35:73:08:13:44:11:90:45:f6:d6:
e9:b2:5c:4c:9e:a8:e9:e7:e4:88:da:10:b2:a8:ed:
9d:9b:1b:d9:24:16:8c:e3:cf:47:e1:ef:37:d0:6e:
ef:e6:b3:20:c3:cf:56:f1:fa:d0:ca:a4:50:98:9e:
8a:be:35:58:79:e2:df:e5:01:c8:11:da:04:cd:95:
e7:cd:54:47:96:73:16:6f:60:01:b8:e3:55:df:65:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:38:54:02:69:54:A8:D1:DF:9C:F8:32:A5:10:DE:BF:24:EF:4B
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:96:51:94:42:1a:60:8d:08:10:7a:c7:1c:fb:f5:d5:49:36:
b4:73:c3:2b:bf:79:71:04:3a:6f:f1:25:7f:e3:bb:25:66:61:
71:c0:fe:5c:8a:77:a0:ca:7f:45:78:ab:ba:10:db:37:24:9d:
2e:0c:f4:03:ce:f0:d6:be:f2:bd:5c:b5:9a:f8:60:72:a0:b7:
66:42:43:d1:9e:d6:c5:d5:c1:be:39:7c:cb:8b:28:c4:db:0d:
a0:6e:bf:77:0e:e7:6f:84:9f:f3:16:80:44:a8:79:04:85:91:
12:60:53:1d:3f:04:15:a7:3b:2c:f6:44:cf:b3:fd:7b:2c:31:
96:f8:c9:8a:89:d3:73:c6:a7:a1:ea:26:de:2c:45:d2:65:df:
83:51:43:eb:2f:f8:d0:0a:45:93:14:00:10:ac:67:e5:cb:28:
44:a5:f7:26:d4:9a:be:c8:e5:21:5d:45:79:23:54:b8:01:c0:
0e:6a:9c:4d:9b:bf:ce:4e:5a:95:64:b7:6c:41:b9:fe:40:14:
1f:5b:f7:2c:46:28:7a:9b:ce:e3:6d:06:6e:7c:0b:bf:f7:e5:
e5:dc:fb:18:e9:7d:0b:de:2c:51:d9:3b:9e:78:4d:5a:f4:2e:
6f:83:e8:e8:5d:56:6d:76:0e:9e:29:0a:20:25:6c:69:dd:f1:
cf:45:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:16:00 2026 by rpki-client