Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa
File: 3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa (raw, json)
Hash identifier: j/CqzFkIe64ShDRQ/qH9wV74gVWn52q+PFbjfhxFKSo=
Subject key identifier: 28:CE:01:87:31:A4:C1:E8:53:3F:0D:CA:8E:C3:E5:8C:1A:7C:6B:FF
Certificate issuer: /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial: 575B3D9799BDC30BA26B53AE7237CA86D29C795E
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa
Signing time: Thu 01 Oct 2026 21:00:34 +0000
ROA not before: Thu 01 Oct 2026 20:55:34 +0000
ROA not after: Thu 30 Sep 2027 21:00:34 +0000
asID: 263840
IP address blocks: 138.185.126.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5b:3d:97:99:bd:c3:0b:a2:6b:53:ae:72:37:ca:86:d2:9c:79:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Validity
Not Before: Oct 1 20:55:34 2026 GMT
Not After : Sep 30 21:00:34 2027 GMT
Subject: CN=28CE018731A4C1E8533F0DCA8EC3E58C1A7C6BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:4e:8d:a9:ea:d8:9a:ef:38:2e:99:ce:d5:
b0:ba:54:ab:c8:0a:91:a5:c7:13:c7:12:d5:75:c3:
ec:78:77:90:26:de:34:7c:99:44:ba:e1:2f:86:80:
72:ac:4c:d5:46:50:10:15:03:bf:ab:d6:dd:1c:31:
bf:de:ca:08:57:02:c8:39:af:6a:47:9e:06:42:7a:
ea:af:4c:9a:ae:af:dd:2b:89:5d:cf:73:3d:d2:4a:
b5:1c:96:30:2f:56:98:c9:e0:05:64:f0:90:ed:29:
97:3f:72:3d:71:ec:5e:ce:59:c2:5a:9a:24:9a:b9:
db:82:00:48:16:d6:ef:be:f9:ee:b1:ed:0c:27:d7:
ef:b1:c9:92:c4:be:ba:f7:0a:6c:bb:99:bd:97:c3:
6f:39:af:d9:96:cd:2a:11:b5:fd:f8:e0:dd:86:ea:
e7:57:2c:4b:7f:d0:63:ab:d0:94:ce:c7:52:bc:49:
ea:28:76:d7:7a:d1:18:b4:11:27:b4:f1:94:ba:17:
32:c1:73:98:e8:38:5d:7d:9d:ba:79:1c:9d:05:96:
ca:59:7b:80:a9:17:59:01:f0:36:39:40:91:7e:f7:
0b:f1:75:14:ac:d2:20:a3:18:63:26:76:db:22:a6:
c6:65:fb:e6:16:7f:9e:81:a4:1d:f9:68:e5:f2:84:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:01:87:31:A4:C1:E8:53:3F:0D:CA:8E:C3:E5:8C:1A:7C:6B:FF
X509v3 Authority Key Identifier:
keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9f:06:34:ec:0e:2e:91:cf:92:21:4b:9a:d6:84:17:25:28:
f1:cf:55:f5:7e:46:10:99:09:47:df:60:d6:c1:bf:5e:4c:bb:
a4:74:46:fe:b0:df:c5:b7:4f:43:e8:f7:9d:2a:a7:92:d7:82:
8d:6a:10:e7:06:4c:54:14:fe:a9:d0:19:8f:60:32:7e:08:8c:
41:67:f0:17:ea:b5:d1:f5:32:b3:58:a5:94:96:07:b7:f2:4d:
f8:37:df:a2:fe:e1:95:69:e3:1f:55:3f:77:13:f5:84:a7:a4:
00:f7:d0:d8:04:fd:9e:0c:35:20:23:0c:ac:07:1b:76:98:6b:
da:0d:0c:6d:74:a2:8e:b9:2b:c6:cc:8f:be:bd:ca:2e:0e:ae:
07:6b:15:d6:87:a2:9c:e3:02:1f:5c:5f:7f:6a:2e:ba:90:67:
30:15:30:b0:6e:99:a2:75:dd:d1:71:57:74:11:07:9c:81:d1:
87:81:e7:a1:ee:7f:d3:af:b4:f8:7d:cc:a3:e4:c1:5f:c0:d0:
53:92:87:27:20:38:04:ed:40:c5:20:73:ca:1e:1c:c6:f8:ec:
de:ea:06:e2:df:bb:d6:76:5c:c8:a9:1b:ab:1f:e6:61:5e:bc:
77:54:ff:b5:28:43:29:62:7f:35:cb:fc:d5:b3:5d:4d:e4:96:
c6:fa:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:37:07 2026 by rpki-client