Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
File: 3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa (raw, json)
Hash identifier: 4H2SRJu8Ra7BZXw8+KqdGngOExepfPjJNSuG7yv1RgE=
Subject key identifier: 26:36:9E:E1:22:36:C8:F0:AA:A9:28:FE:43:B1:07:1A:A4:83:D1:41
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 41F33FA936C6C19F2759E18C27FF2E7D5745977E
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
Signing time: Tue 10 Mar 2026 19:30:17 +0000
ROA not before: Tue 10 Mar 2026 19:25:17 +0000
ROA not after: Tue 09 Mar 2027 19:30:17 +0000
asID: 28584
IP address blocks: 200.159.176.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f3:3f:a9:36:c6:c1:9f:27:59:e1:8c:27:ff:2e:7d:57:45:97:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:17 2026 GMT
Not After : Mar 9 19:30:17 2027 GMT
Subject: CN=26369EE12236C8F0AAA928FE43B1071AA483D141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:e7:e4:49:1c:d8:20:c8:ed:28:8e:ec:7f:
9a:4f:7e:83:44:0e:ca:0d:12:9f:02:d5:8a:10:de:
5b:06:6c:31:22:37:a2:a7:7f:c4:68:69:cc:7e:fc:
d5:bd:5f:b3:ba:1d:4c:9b:2b:a4:c8:f4:d2:f4:92:
11:4b:26:5d:52:0f:b3:91:82:1f:2a:77:4b:3c:92:
09:9a:49:fc:5c:0e:2e:86:34:11:c1:ec:ba:a7:a8:
41:aa:9d:9b:0b:93:da:56:fb:47:90:bf:b9:a5:29:
2d:bb:d0:0e:fa:a6:2a:cc:0f:f8:5c:4c:8f:57:cb:
66:a6:22:b1:13:43:51:bf:c6:93:80:6b:85:85:51:
e2:bd:06:32:6a:a6:16:e2:5b:5d:45:a8:dd:bd:b2:
4f:44:42:71:92:82:e9:3c:bd:df:46:82:1d:94:b4:
8f:a3:3b:cf:cf:5e:52:8a:4f:55:8d:d6:8e:41:54:
fe:d9:be:a4:0b:88:52:2e:48:a1:94:a3:5b:5f:fd:
e0:8a:e1:f0:d5:cd:ff:49:29:94:21:31:ce:60:3f:
d1:58:60:a2:4f:a0:e6:e6:7d:3c:b4:e7:c1:fc:b9:
49:5f:23:43:b3:05:07:0a:24:7c:e0:9b:08:8c:9f:
50:27:0b:85:ed:3f:b9:33:b0:96:70:39:31:be:f5:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:9E:E1:22:36:C8:F0:AA:A9:28:FE:43:B1:07:1A:A4:83:D1:41
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3135392e3137362e302f32302d3234203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.159.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:4b:69:89:f0:ed:f6:b1:05:c6:e6:95:03:c2:88:22:03:38:
9d:c0:12:ac:19:41:40:2a:77:bc:df:5a:e6:70:a1:8c:b4:42:
8b:9f:ff:96:45:43:60:4a:b9:fd:ba:f0:1c:6d:31:b7:77:a5:
3e:de:77:ec:11:32:56:42:d9:0e:7d:3c:0b:f9:fc:4a:b1:0d:
4e:10:ce:30:db:81:95:28:b4:b1:ad:51:d5:17:62:78:0a:93:
5d:b7:b4:b3:93:79:9e:71:ae:a4:5e:35:7e:e2:66:0f:4b:62:
61:16:67:bc:29:9d:09:36:14:22:3f:50:cf:0c:e2:d1:c9:77:
59:2f:29:73:47:4c:c3:4d:14:31:a0:8b:9d:18:d4:95:65:5d:
d7:1f:5c:90:db:92:cc:1a:d4:7b:44:39:12:8a:2a:7b:fb:d3:
79:28:d6:f4:38:2d:ee:ef:05:dd:e0:b0:eb:05:10:0e:84:52:
12:ae:d8:0b:a3:e9:3a:00:74:f7:98:0c:34:99:dd:f3:8d:16:
78:13:0f:ab:de:17:de:b9:e7:8c:23:45:83:7a:ed:bc:ce:7c:
77:a1:80:b9:d0:67:1a:24:bd:d9:e9:19:c5:b1:b7:ca:37:4f:
7e:49:64:36:92:0d:41:37:a2:44:72:bf:5b:5d:fc:d2:58:f1:
3b:41:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:20:43 2026 by rpki-client