Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
File: 3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier: M6thMsgw0Tax4KHYsJc44JQsb8NLidYTIy2jI4bs4Xk=
Subject key identifier: 00:E9:8B:6D:88:55:2F:DB:F6:A5:E5:2E:33:B4:72:AE:46:D7:26:D8
Certificate issuer: /CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Certificate serial: 319B7F3EDB0ADF45FBCE09214370654959F96455
Authority key identifier: B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
Signing time: Thu 02 Jul 2026 15:54:24 +0000
ROA not before: Thu 02 Jul 2026 15:49:24 +0000
ROA not after: Thu 01 Jul 2027 15:54:24 +0000
asID: 263995
IP address blocks: 138.255.229.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9b:7f:3e:db:0a:df:45:fb:ce:09:21:43:70:65:49:59:f9:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Validity
Not Before: Jul 2 15:49:24 2026 GMT
Not After : Jul 1 15:54:24 2027 GMT
Subject: CN=00E98B6D88552FDBF6A5E52E33B472AE46D726D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:b6:f3:e0:87:49:7b:53:e3:fb:4d:50:47:
a5:68:1a:24:04:82:c4:d6:d2:36:45:8c:79:dd:b6:
3d:cd:86:53:13:43:e8:76:96:b0:c0:bd:8b:d5:25:
f6:9c:56:d7:14:b3:51:42:67:58:50:1d:6d:39:bc:
e7:4a:77:05:2f:16:82:97:82:a8:19:93:55:e3:e7:
9c:bf:5c:51:87:01:6f:9d:71:75:c4:1b:95:df:c0:
0a:80:84:6c:16:67:30:75:c3:e6:a1:6e:fd:85:bb:
61:fd:2e:1a:d8:1e:2e:d4:13:e2:2f:03:7a:cd:d2:
00:1f:8f:fa:28:21:73:31:06:a1:2e:a1:95:46:2b:
06:9b:b8:2a:46:28:21:1f:fc:c6:a6:6d:24:35:69:
9f:6d:4e:79:2d:a3:f2:e1:0f:f1:59:d5:d2:8c:26:
2b:17:ff:f9:e6:60:5b:bf:12:82:eb:a9:69:84:bb:
d8:b7:4d:0a:bd:7f:de:df:4d:94:0d:00:e6:c9:54:
19:25:49:69:f3:2b:b0:eb:ea:be:d0:0e:31:f9:32:
4c:38:0f:c1:4b:72:4c:ce:43:bd:dc:8b:4f:a9:e9:
89:9f:f2:2c:34:ba:eb:c3:7a:1a:d0:1a:54:ec:41:
f9:c3:ae:63:ab:f8:d1:fa:6a:20:21:68:e6:2b:90:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:8B:6D:88:55:2F:DB:F6:A5:E5:2E:33:B4:72:AE:46:D7:26:D8
X509v3 Authority Key Identifier:
keyid:B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:03:cc:34:ff:e4:ad:9d:9d:7b:5e:0d:5d:35:8a:15:91:25:
7b:fd:0f:e0:fa:b0:dd:9b:6e:09:d2:a6:1f:1a:e1:27:03:8a:
e0:8f:99:5b:6c:71:6d:a7:5a:14:30:d3:60:f6:6e:34:9f:9d:
5b:6e:db:03:c1:a3:9f:d1:a2:0e:70:c5:22:2e:3a:bb:fa:d3:
7b:81:9e:7a:5a:46:c8:57:79:3e:ea:cd:e6:ab:1c:08:d3:bc:
45:2b:25:90:0c:c0:6d:2a:87:d7:d9:e8:12:0e:a7:23:5f:85:
87:71:cd:76:62:ba:d4:c7:20:49:9f:e3:40:fc:79:ed:5c:9a:
a8:2f:b3:5e:35:c5:1e:13:b6:66:43:8b:ea:14:d8:16:b2:16:
df:29:40:31:9a:78:57:cd:89:2d:01:1a:33:c0:aa:f9:75:89:
fc:16:40:c0:1c:81:1f:35:df:4e:6c:c9:5e:5a:8d:cc:3d:37:
9a:9d:28:a0:24:0d:1a:01:86:86:78:92:2f:b8:99:51:e9:83:
45:d1:99:b3:2a:9d:84:08:7d:19:35:75:68:a3:0f:73:2d:50:
e9:8b:db:39:1a:fe:24:ba:92:97:33:16:48:3a:97:3b:1a:4f:
dd:05:9b:fc:27:83:b1:ad:d4:5c:f0:98:3d:97:9b:2e:10:d6:
9b:61:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:57:12 2026 by rpki-client