Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa
File: 3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa (raw, json)
Hash identifier: txQI1+GvPpG1eKLh4OjpfvnjujKbmlFbn94FSb7iW7I=
Subject key identifier: FC:B2:04:06:41:D1:19:CF:CF:EB:C0:07:C4:62:ED:E5:2A:C0:7A:EF
Certificate issuer: /CN=3D7F41D3B11458BBA134D22A2A7E6DD805142768
Certificate serial: 578BD218F26F55D0CC6674E1486C653B33C65B68
Authority key identifier: 3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa
Signing time: Thu 08 Oct 2026 15:03:00 +0000
ROA not before: Thu 08 Oct 2026 14:58:00 +0000
ROA not after: Thu 07 Oct 2027 15:03:00 +0000
asID: 266319
IP address blocks: 170.238.128.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8b:d2:18:f2:6f:55:d0:cc:66:74:e1:48:6c:65:3b:33:c6:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D7F41D3B11458BBA134D22A2A7E6DD805142768
Validity
Not Before: Oct 8 14:58:00 2026 GMT
Not After : Oct 7 15:03:00 2027 GMT
Subject: CN=FCB2040641D119CFCFEBC007C462EDE52AC07AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:43:79:4f:b1:11:c5:91:8d:f4:4f:58:ec:
aa:25:65:6c:04:b8:98:76:71:d7:ae:71:c3:10:a3:
aa:e2:0c:d1:1a:f0:57:55:83:2c:4c:ee:52:63:97:
ba:e8:4f:f4:a7:6f:8a:12:f6:72:8d:03:5a:e2:07:
ad:2e:15:71:ba:d9:d3:6f:c8:9a:e2:44:70:68:5c:
42:35:88:8b:26:5c:a3:5c:c3:04:9b:91:0d:86:a1:
67:88:1b:24:77:a1:20:ae:c1:6f:af:e5:fd:31:0d:
c5:be:e2:8b:14:fa:8d:df:74:fc:54:25:71:0e:e2:
ce:ef:61:0f:e6:99:b8:4b:4f:6b:1f:8e:ea:a5:92:
6f:cd:e3:90:2f:64:74:50:d7:44:28:37:1d:c6:0e:
c6:bb:13:8c:70:52:d2:ff:4d:01:ff:1e:67:e1:ba:
38:f5:04:db:83:a8:df:9a:fd:77:11:27:74:bd:1b:
99:48:86:e1:3d:65:8a:f1:bd:b7:b6:3b:02:70:9f:
29:22:ae:23:99:0e:4b:da:19:82:4d:be:a2:9b:c7:
76:18:dd:1c:ba:67:9c:24:79:a9:98:9b:7a:1e:9e:
34:2f:2f:c5:c3:66:95:b2:d8:1c:ac:e9:59:73:b7:
a2:d7:bb:6f:58:ba:a8:a1:e1:a9:38:d6:03:e7:48:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:04:06:41:D1:19:CF:CF:EB:C0:07:C4:62:ED:E5:2A:C0:7A:EF
X509v3 Authority Key Identifier:
keyid:3D:7F:41:D3:B1:14:58:BB:A1:34:D2:2A:2A:7E:6D:D8:05:14:27:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3D7F41D3B11458BBA134D22A2A7E6DD805142768.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D7F41D3B11458BBA134D22A2A7E6DD805142768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3132382e302f32322d3332203d3e20323636333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.128.0/22
Signature Algorithm: sha256WithRSAEncryption
51:65:fc:b5:ff:a8:6b:14:99:f8:c7:7d:ae:9f:92:35:26:28:
5a:1d:76:21:45:f1:eb:c8:64:7c:8b:d9:5d:85:f5:4c:0b:46:
23:f7:1a:12:f2:f9:c0:0f:01:ea:cb:c0:27:9c:6a:78:e1:ad:
73:b8:56:22:cf:3a:c1:4a:e4:16:cd:80:75:c6:8b:fa:65:a6:
e7:1d:72:a7:36:3e:ff:52:13:ee:b2:44:5c:a8:96:e6:c0:f4:
52:59:bd:69:0e:13:d5:6c:dc:17:31:e6:18:3d:22:9f:17:ca:
17:35:97:7d:1a:42:68:ac:48:84:05:4c:c8:6d:b1:e9:d0:82:
bd:c1:30:5c:22:df:b3:0a:8a:42:63:8f:4c:b2:dc:ac:b0:c3:
b5:b1:26:29:97:f7:ea:40:b1:20:64:4d:3a:46:6f:ac:a2:73:
f9:3b:0b:e0:16:12:49:5d:27:3d:5f:8e:21:78:3c:1b:88:d5:
ad:80:cd:47:be:82:bc:ae:b6:fd:b8:bf:dd:7e:98:d2:ed:2f:
dc:c6:fd:b6:34:cd:fa:af:da:4e:0c:c2:8e:ea:95:a2:06:ff:
05:2a:9a:3f:f9:d1:73:54:11:fe:05:ae:c2:1a:0f:78:d5:e7:
17:e7:41:ed:92:b5:45:63:19:71:4d:42:b1:13:8f:e6:53:cb:
48:3e:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:39:27 2026 by rpki-client