Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
File: 3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier: fAN+7MHJACpilHvSff/EqGZeUyF/iw9tJacRff1ZsSs=
Subject key identifier: F6:E2:F5:F9:62:6C:91:90:C7:9A:82:54:7E:99:E7:FE:39:46:C4:82
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 39B0530BD8B655140811EB5BD604106B155D240E
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
Signing time: Tue 10 Mar 2026 19:30:15 +0000
ROA not before: Tue 10 Mar 2026 19:25:15 +0000
ROA not after: Tue 09 Mar 2027 19:30:15 +0000
asID: 28584
IP address blocks: 177.129.236.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:53:0b:d8:b6:55:14:08:11:eb:5b:d6:04:10:6b:15:5d:24:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:15 2026 GMT
Not After : Mar 9 19:30:15 2027 GMT
Subject: CN=F6E2F5F9626C9190C79A82547E99E7FE3946C482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:07:27:8a:dd:d3:66:69:7f:a0:73:e7:01:
8d:1d:1c:43:bd:cd:dc:c8:2c:58:02:d0:20:94:87:
01:b9:0d:bb:68:9b:2d:28:f2:d4:ec:c3:fe:2b:27:
77:a0:ab:cc:50:72:1e:77:0f:c5:a7:b1:df:e1:26:
0b:fb:df:57:fa:b3:c2:14:c9:51:53:51:13:3f:59:
9d:f3:39:6a:c3:2b:0e:7d:29:18:b2:94:79:21:5d:
55:ff:22:02:4c:d2:0a:3e:61:db:2f:e0:0b:07:00:
6a:a7:cb:47:b9:89:9d:a8:60:21:dc:7e:25:5d:24:
14:f8:60:c8:27:05:2b:8e:55:4e:99:76:4b:e2:74:
e6:63:70:8b:08:43:5c:85:00:f1:b0:e2:dd:b7:b8:
df:53:5d:7a:a2:35:25:46:b5:20:54:a7:36:b0:08:
a2:a3:e2:9c:2f:b6:d0:d0:7b:89:76:8d:ab:69:06:
57:7f:e7:36:bc:5a:92:dd:68:f5:cb:ca:46:ee:e0:
7d:ce:6b:c4:70:8a:e0:d9:17:ad:e6:d6:80:88:4b:
c4:20:b5:47:73:e2:00:b9:86:36:0d:63:c1:75:4a:
23:7e:fb:4b:94:fe:66:be:0e:d1:e4:67:c3:23:70:
6a:29:80:b3:49:85:d2:74:cc:0a:57:c4:f2:9e:56:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E2:F5:F9:62:6C:91:90:C7:9A:82:54:7E:99:E7:FE:39:46:C4:82
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e3132392e3233362e302f32322d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.129.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:4d:41:65:91:37:11:18:4c:f6:fd:21:a1:d0:28:1c:25:76:
b9:01:c1:14:4c:ea:20:72:25:db:0c:f7:da:e6:0f:d7:9f:3a:
ed:7d:aa:f9:2f:8f:15:8c:d8:cb:1a:c5:e7:6c:0e:70:44:ee:
89:59:f0:29:a7:aa:95:aa:da:71:7b:2b:f6:be:4a:80:e0:ac:
d8:f4:32:69:a4:c6:02:1f:b4:81:e0:61:c5:7b:bf:c4:12:44:
af:fe:08:dd:b3:94:89:1b:5e:43:45:e4:5e:27:00:7c:7b:72:
35:5f:eb:f6:f5:a7:75:0f:50:cb:83:9c:65:d5:9c:7d:12:bc:
3f:27:4e:2d:fb:7d:be:76:53:6e:b6:86:4e:09:73:e3:3e:21:
6d:bc:b4:d7:c0:25:dd:b3:73:d1:a7:9f:5b:1a:0c:67:f2:80:
41:cc:90:d8:33:f2:80:3e:b5:aa:5c:9d:1c:0f:66:ee:2b:ba:
b0:fc:25:0a:4d:ff:61:b7:9b:13:9f:bc:f7:f8:2e:42:c7:99:
f7:da:0b:bb:bb:13:e6:81:d0:f9:58:2c:9c:4b:55:d1:6a:25:
ae:74:e5:7d:bf:66:77:6f:72:2c:b3:46:2d:e7:a6:19:4d:51:
e2:55:d0:d7:29:43:8c:60:d6:d4:d2:2e:f2:e5:90:6d:74:cd:
b0:94:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:59 2026 by rpki-client