Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
File: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (raw, json)
Hash identifier: twtCiuY251rghpy/ZnA1fO9lvGDSvMZTLpzueDRZxxM=
Subject key identifier: F4:D3:46:17:06:03:77:15:A7:F6:7C:70:35:53:A4:4B:05:8B:DE:18
Certificate issuer: /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial: 163A475DB903CE6C291BF47844586295F9AA94E9
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
Signing time: Thu 17 Sep 2026 13:32:21 +0000
ROA not before: Thu 17 Sep 2026 13:27:21 +0000
ROA not after: Thu 16 Sep 2027 13:32:21 +0000
asID: 263650
IP address blocks: 138.255.148.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3a:47:5d:b9:03:ce:6c:29:1b:f4:78:44:58:62:95:f9:aa:94:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Validity
Not Before: Sep 17 13:27:21 2026 GMT
Not After : Sep 16 13:32:21 2027 GMT
Subject: CN=F4D3461706037715A7F67C703553A44B058BDE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:ab:6f:b0:41:89:da:63:9e:79:99:c3:16:
14:08:3c:f2:53:cc:de:ae:2a:9f:a7:7a:2c:5c:fe:
67:77:36:a4:a1:bb:32:cd:18:49:9a:ae:b3:88:59:
f5:3a:67:a5:91:aa:54:84:a6:65:ef:f7:46:41:c5:
52:5b:78:94:2d:b2:0c:19:99:cb:41:0b:c3:da:7c:
0f:1a:99:08:81:d3:bf:e0:7f:7c:4f:e1:f9:ad:b4:
1e:f6:ed:6b:87:d5:0d:76:b5:3a:89:a7:8d:6c:78:
e3:6c:ef:15:24:5c:fa:c7:0e:18:83:a3:f7:26:74:
b5:40:48:e1:dc:6f:f7:cf:f5:41:f5:a6:2d:fc:54:
da:1c:15:86:8d:ef:7d:9f:23:ff:db:62:bb:ee:07:
b9:e0:5f:42:81:91:37:70:80:02:dc:c5:f5:36:d1:
58:bb:53:69:33:48:24:d1:a1:43:1d:84:2a:8b:6a:
fb:6c:1a:db:11:85:a0:53:ef:bf:df:ae:4c:29:19:
02:5c:c0:f5:a0:6c:ef:87:5b:7d:b4:c1:9d:2e:6b:
ed:c9:b2:20:03:07:88:af:40:1a:5a:b8:28:9b:93:
cc:c6:ed:13:51:c1:6d:86:ea:cb:b7:a7:cb:45:38:
6e:4d:91:ff:fd:4d:2a:11:a3:3b:56:1d:dd:3d:cd:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:46:17:06:03:77:15:A7:F6:7C:70:35:53:A4:4B:05:8B:DE:18
X509v3 Authority Key Identifier:
keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:3f:47:e0:0d:9f:04:8a:49:d4:7d:36:fe:0e:c3:d6:91:7f:
b7:1c:b3:61:d9:b7:d8:a3:fb:83:12:1d:6f:3e:fd:be:39:93:
c9:cc:5b:a4:88:ea:40:8e:df:8d:d4:9b:81:b1:b2:80:b5:5e:
ca:80:ae:bb:f5:34:8d:67:57:4a:34:47:d8:8b:e3:1d:46:7a:
00:c8:a0:24:da:d0:a5:fa:71:c1:c5:56:ff:e1:18:34:e8:9c:
4c:95:0d:14:3c:92:f2:72:96:11:64:d3:45:42:c5:37:62:0d:
6f:47:96:24:5c:9d:a5:ba:38:19:d7:18:7e:6b:71:7a:83:1d:
66:fa:92:b4:6c:41:6b:c3:6f:3d:ad:ae:b0:bc:8e:c6:8d:cb:
31:f1:58:0d:fc:56:80:31:6a:9a:b7:44:e2:5d:7a:42:59:15:
7f:1f:d0:ed:30:31:9a:d5:5c:b0:ce:82:4f:86:bd:de:e6:85:
d0:27:e5:e5:13:72:ca:2f:25:0f:b8:8e:7d:79:d5:b4:b2:36:
81:e9:24:fe:90:78:f5:c9:d1:a4:72:d9:a1:24:40:f5:85:0c:
a6:55:c3:d2:8c:4f:73:a9:2d:3f:ba:94:0a:1a:ec:60:1e:2f:
e7:50:52:a9:7a:3f:85:d5:d3:8c:09:ce:b2:70:dd:70:aa:ba:
07:75:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:05 2026 by rpki-client