Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
File: 3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa (raw, json)
Hash identifier: caZ1Qkw301rPAWpx/+VTeYyGE1g+BNYDhzAC+crvvo8=
Subject key identifier: B8:F1:DB:41:29:E7:08:35:6F:4C:AA:75:65:7D:4D:21:7A:E1:5A:7C
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 3711B72DF4B8C6A539E9E2F442787BD755870AAF
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
Signing time: Tue 10 Mar 2026 19:30:16 +0000
ROA not before: Tue 10 Mar 2026 19:25:16 +0000
ROA not after: Tue 09 Mar 2027 19:30:16 +0000
asID: 22128
IP address blocks: 200.160.144.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:11:b7:2d:f4:b8:c6:a5:39:e9:e2:f4:42:78:7b:d7:55:87:0a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:16 2026 GMT
Not After : Mar 9 19:30:16 2027 GMT
Subject: CN=B8F1DB4129E708356F4CAA75657D4D217AE15A7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:09:db:38:da:ae:9d:91:dd:f4:4f:56:32:
48:63:92:fa:c1:b6:78:68:45:02:af:23:f2:57:a5:
78:cc:03:08:da:42:fa:4e:f8:99:2c:c3:f3:bd:e9:
88:35:7f:23:19:50:15:29:3a:6f:e8:66:7b:12:3b:
05:59:a6:35:41:45:c8:74:aa:25:6f:66:f4:f9:24:
31:73:4f:3f:64:fd:b2:ea:0c:a1:94:85:52:d3:3a:
cb:89:21:dc:7e:4b:01:2e:77:d9:02:0e:c9:c9:48:
0e:c7:22:2f:14:d4:b7:89:cc:a1:80:0e:14:8e:06:
58:06:05:8d:ec:c8:32:bf:87:71:34:30:0f:6d:76:
42:b4:99:aa:87:2c:98:d2:26:ef:60:8f:da:82:10:
6d:d4:5d:6e:9d:61:bb:2b:03:ca:6a:1d:b6:ea:2a:
6e:36:04:a0:f0:f5:84:c3:bb:ca:df:de:d9:63:e0:
5c:d6:83:6d:09:11:d7:6f:44:15:ef:0c:e9:df:9b:
cb:03:f7:dc:13:9e:85:09:30:1d:db:a8:c2:6a:49:
bf:7f:d9:0a:56:7e:5a:a7:56:be:e1:4e:d8:c9:13:
a1:bd:53:e8:42:d0:b9:33:16:19:f4:e7:f1:91:7c:
7e:1a:0a:17:2e:20:b4:70:e7:17:1d:09:60:32:a1:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:DB:41:29:E7:08:35:6F:4C:AA:75:65:7D:4D:21:7A:E1:5A:7C
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3230302e3136302e3134342e302f32302d3234203d3e203232313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.144.0/20
Signature Algorithm: sha256WithRSAEncryption
92:6a:94:ec:e6:3d:c0:12:48:05:cd:df:b7:21:08:aa:8c:ac:
34:a4:00:d5:10:5c:69:41:27:bc:64:a2:79:10:f3:e7:4f:cc:
cc:b8:d2:f7:9b:44:ff:d5:0e:28:17:af:10:8c:1b:26:01:0b:
88:84:a4:3c:f5:72:2f:6f:9b:30:af:cf:c8:c6:41:f3:02:48:
e2:2e:e4:21:9b:f7:89:eb:32:f4:14:4c:51:5b:6d:89:9a:be:
e0:ac:e0:4a:7d:5a:81:f2:a6:43:06:44:69:14:25:cc:18:0c:
b8:30:c8:71:94:6e:11:43:26:a4:25:35:3f:a5:ca:98:0a:6f:
78:ee:7d:05:3a:e5:e3:ae:ab:25:1c:27:7b:51:77:b1:e3:76:
98:9d:e9:2b:0c:e7:8b:6b:86:ab:9b:1f:a6:0e:1c:53:16:c1:
4e:cb:99:4b:2c:78:ee:0c:e9:80:21:ed:b5:53:50:50:0e:c6:
42:38:28:e6:6c:41:55:72:8f:e3:9f:7b:ca:72:84:a8:ff:a9:
51:cd:b2:6a:bd:7e:88:0d:67:30:87:14:7c:d7:2b:0e:ae:e8:
83:63:08:47:20:fe:60:88:f3:98:a2:ac:b9:97:0f:2f:f0:d6:
59:a3:45:01:33:db:c6:68:b5:1a:ac:fb:8f:66:07:ab:84:45:
2c:e6:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:17:06 2026 by rpki-client