Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
File: 3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa (raw, json)
Hash identifier: n8IpYHFEPN8cU4KsgKPmeMhBpXFgRUsq58MmEuubxwM=
Subject key identifier: 84:D4:B5:44:10:37:F3:53:7A:21:F9:B5:EA:AE:ED:CC:C4:11:B6:24
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 680120EC331E1820E1F8B30AEC58D45D17D651C1
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
Signing time: Tue 10 Mar 2026 19:30:13 +0000
ROA not before: Tue 10 Mar 2026 19:25:13 +0000
ROA not after: Tue 09 Mar 2027 19:30:13 +0000
asID: 28584
IP address blocks: 200.159.160.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:01:20:ec:33:1e:18:20:e1:f8:b3:0a:ec:58:d4:5d:17:d6:51:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:13 2026 GMT
Not After : Mar 9 19:30:13 2027 GMT
Subject: CN=84D4B5441037F3537A21F9B5EAAEEDCCC411B624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:25:3c:8d:1e:c1:f6:3c:85:21:fc:41:30:
e7:cc:26:4b:a2:d6:40:35:8a:5b:68:e8:f6:6b:a2:
21:43:a0:32:fe:99:cd:b3:ca:7d:54:43:8a:55:28:
c9:51:32:cf:82:02:76:1f:4c:b7:15:54:4b:41:95:
8f:b5:9a:6d:db:54:99:b0:ac:a0:fa:63:6a:d2:c5:
6e:ad:22:b0:42:9f:35:41:eb:57:63:41:e3:1c:db:
ed:5d:3c:e7:cf:84:eb:b2:66:3b:fe:4b:59:f3:e8:
78:1b:a0:7a:45:4c:61:23:a7:49:37:8a:78:e1:2d:
58:08:06:bd:ec:88:e2:ab:19:db:82:77:aa:74:f7:
a2:4a:39:5c:72:8e:fa:ce:0a:75:a5:e8:93:d5:b7:
25:c2:7a:9f:9e:b0:22:5d:0c:d5:ac:d9:4e:b3:d4:
c8:17:f6:c7:42:55:79:ae:87:e6:3d:29:fc:20:7e:
3d:72:15:6f:11:5b:85:41:7e:ca:a5:65:02:6f:fb:
8d:14:43:5d:0a:c8:69:a5:85:8f:2b:21:68:29:d9:
7a:91:b7:16:46:04:9d:f6:c9:7a:bc:5c:20:19:1e:
e5:a4:0b:6a:c9:c2:0b:8d:e9:4f:22:60:d9:c7:98:
2c:75:f7:0e:d6:74:f6:2c:e9:e6:11:44:19:59:1a:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:B5:44:10:37:F3:53:7A:21:F9:B5:EA:AE:ED:CC:C4:11:B6:24
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3136302e302f32302d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.160.0/20
Signature Algorithm: sha256WithRSAEncryption
88:71:38:ac:b1:bf:17:4e:cf:41:0f:ea:38:25:90:78:a8:79:
11:8f:4c:84:ba:fe:08:91:0f:d8:c5:2b:9e:f7:9e:cc:40:fe:
c6:e0:cb:ae:bf:92:90:69:98:74:19:45:b7:7b:44:66:cc:34:
8a:24:a1:db:cd:03:5d:1c:01:ec:7e:3b:02:49:ed:6b:63:29:
62:14:e1:0f:13:a3:b5:d9:3d:2b:5d:91:ae:00:f5:21:6d:05:
f3:d1:75:d4:12:a2:e0:45:7e:ef:2b:c9:e7:7a:e2:b2:70:9f:
d0:4e:17:13:ff:b7:f8:9a:1b:77:d2:f9:ea:e7:9e:9c:45:ab:
8e:db:86:97:32:52:42:d7:c6:33:fa:08:98:66:e2:09:aa:2f:
3a:b8:bd:75:cf:b1:0c:38:ab:23:39:3b:30:79:07:5b:00:7d:
09:e0:d0:58:f6:1f:f6:1a:48:4e:f6:42:c4:a8:f8:b5:0c:dc:
e6:e5:23:11:fc:6b:2f:f9:e2:23:5f:78:d2:b3:78:fc:5c:b7:
a8:b3:3e:e3:7e:88:ec:c6:05:17:21:44:42:cd:bc:6b:e8:86:
a3:7e:f4:0d:10:2f:e7:0d:6c:8d:41:8e:f4:8c:3f:29:fa:27:
c3:b6:9d:04:87:da:d2:e9:d9:71:e2:17:59:88:c4:21:1f:06:
c4:5f:89:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaAEg7DMeGCDh+LMK7FjUXRfWUcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzMzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4
MzdEQzVFMzAeFw0yNjAzMTAxOTI1MTNaFw0yNzAzMDkxOTMwMTNaMDMxMTAvBgNV
BAMTKDg0RDRCNTQ0MTAzN0YzNTM3QTIxRjlCNUVBQUVFRENDQzQxMUI2MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqCU8jR7B9jyFIfxBMOfMJkui
1kA1ilto6PZroiFDoDL+mc2zyn1UQ4pVKMlRMs+CAnYfTLcVVEtBlY+1mm3bVJmw
rKD6Y2rSxW6tIrBCnzVB61djQeMc2+1dPOfPhOuyZjv+S1nz6HgboHpFTGEjp0k3
injhLVgIBr3siOKrGduCd6p096JKOVxyjvrOCnWl6JPVtyXCep+esCJdDNWs2U6z
1MgX9sdCVXmuh+Y9Kfwgfj1yFW8RW4VBfsqlZQJv+40UQ10KyGmlhY8rIWgp2XqR
txZGBJ32yXq8XCAZHuWkC2rJwguN6U8iYNnHmCx19w7WdPYs6eYRRBlZGgvfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhNS1RBA381N6Ifm16q7tzMQRtiQwHwYDVR0j
BBgwFoAUEjOWHgVZ8jmu1PUENwh+9oN9xeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC8xMjMzOTYxRTA1NTlGMjM5QUVENEY1MDQzNzA4N0VGNjgzN0RDNUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMzM5NjFFMDU1OUYyMzlB
RUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzIzMDMwMmUzMTM1MzkyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIn6AwDQYJKoZIhvcNAQELBQADggEBAIhxOKyx
vxdOz0EP6jglkHioeRGPTIS6/giRD9jFK573nsxA/sbgy66/kpBpmHQZRbd7RGbM
NIokodvNA10cAex+OwJJ7WtjKWIU4Q8To7XZPStdka4A9SFtBfPRddQSouBFfu8r
yed64rJwn9BOFxP/t/iaG3fS+ernnpxFq47bhpcyUkLXxjP6CJhm4gmqLzq4vXXP
sQw4qyM5OzB5B1sAfQng0Fj2H/YaSE72QsSo+LUM3OblIxH8ay/54iNfeNKzePxc
t6izPuN+iOzGBRchRELNvGvohqN+9A0QL+cNbI1BjvSMPyn6J8O2nQSH2tLp2XHi
F1mIxCEfBsRfiRQ=
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:47 2026 by rpki-client