Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
File: 3133312e3130302e37322e302f32322d3332203d3e203631373536.roa (raw, json)
Hash identifier: 6WmvkvdYVEZnQ2Ww/RWv+7kYOqvICd8qDeE/ZUsubJY=
Subject key identifier: 65:49:9C:F5:A5:23:84:E6:94:7F:59:42:A1:92:00:6B:36:7F:AD:9C
Certificate issuer: /CN=5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C
Certificate serial: 211346B2172CE704ACACD9EE730B1B2ED8237AB3
Authority key identifier: 5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
Signing time: Tue 24 Mar 2026 16:24:39 +0000
ROA not before: Tue 24 Mar 2026 16:19:39 +0000
ROA not after: Tue 23 Mar 2027 16:24:39 +0000
asID: 61756
IP address blocks: 131.100.72.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:13:46:b2:17:2c:e7:04:ac:ac:d9:ee:73:0b:1b:2e:d8:23:7a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C
Validity
Not Before: Mar 24 16:19:39 2026 GMT
Not After : Mar 23 16:24:39 2027 GMT
Subject: CN=65499CF5A52384E6947F5942A192006B367FAD9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:98:07:a9:40:70:69:4b:ae:ff:f7:78:8a:
6f:06:fd:7d:77:0c:36:fd:0c:c0:d0:40:78:9d:2a:
c0:3d:14:1e:b0:29:c3:8f:66:b1:b4:8a:ab:c8:8a:
5b:18:cb:14:a7:95:b2:7b:fa:7a:43:1e:4a:be:cc:
77:9e:21:19:86:d5:62:8f:86:88:c5:10:a9:e8:d1:
d1:8c:d5:89:04:97:4a:9e:25:64:6a:15:0b:2e:b8:
a6:40:36:5d:13:cd:15:bc:16:c8:fe:0f:09:93:05:
c6:83:76:45:03:5e:17:52:5b:d3:79:44:21:a5:8e:
2e:5b:e4:ee:a0:7b:c8:02:bc:76:e8:8a:f6:58:ae:
17:11:ca:c1:2b:5c:a5:2a:42:0e:ca:c9:1b:48:db:
2e:15:bd:07:42:a8:3e:75:bb:2e:b0:09:03:ae:ce:
5a:3e:ef:67:cc:f1:73:cd:be:a4:39:fa:d1:89:74:
50:a3:f9:d8:b7:28:dd:b5:b3:63:40:4d:f5:ab:78:
b0:e7:92:12:a8:f1:b2:40:1b:f7:c1:f1:16:4e:12:
e9:5c:ab:ca:98:82:82:2d:cd:46:d0:18:01:60:56:
7c:ce:20:39:28:c8:a4:29:a3:3c:48:c8:4e:6e:37:
7c:7c:14:5d:5b:9e:75:b3:e1:b5:85:33:b0:ab:01:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:49:9C:F5:A5:23:84:E6:94:7F:59:42:A1:92:00:6B:36:7F:AD:9C
X509v3 Authority Key Identifier:
keyid:5B:D5:4D:BB:9B:1C:B2:8D:14:A2:06:D5:AE:9B:8F:E8:30:77:4D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD54DBB9B1CB28D14A206D5AE9B8FE830774D5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/3133312e3130302e37322e302f32322d3332203d3e203631373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:4e:7b:be:e4:e2:07:f9:e0:85:05:a8:07:57:cc:1a:28:66:
2e:97:1d:65:9b:37:d1:98:be:66:6f:e1:8a:dc:8a:99:1e:67:
83:5e:5f:ff:23:7a:88:e2:fc:64:ee:f0:64:53:b8:ff:00:42:
a3:9f:4c:99:47:0d:30:93:77:6c:5f:67:9f:fa:82:ed:bc:9d:
21:38:b4:d9:32:00:54:45:8b:15:21:9a:f4:22:91:59:60:02:
79:e3:fe:cb:74:6d:be:d9:04:fa:eb:da:67:24:e8:a8:fb:ee:
53:3a:72:c0:fb:81:b6:10:53:36:b5:61:b4:96:2a:7e:1e:27:
8e:09:3f:39:c8:f7:bf:f1:38:f3:8a:d3:99:19:a7:ec:f1:bf:
3d:14:49:6f:a8:bf:eb:a8:a9:04:16:50:70:77:89:fe:c0:75:
1e:d6:b8:c0:35:8b:d0:ae:cb:96:8d:2f:36:50:62:11:20:25:
24:c8:6e:76:90:f6:db:7f:d3:ae:a8:4b:04:66:3b:05:ec:90:
ab:de:2d:43:35:04:2e:89:56:e1:2b:eb:44:2c:43:08:5b:b7:
44:12:54:30:22:15:56:c1:23:37:b9:50:e2:30:8b:ac:57:ca:
7a:62:8c:5e:f9:5e:47:14:c4:33:67:f6:da:ab:ca:71:19:7b:
ec:c2:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:04:27 2026 by rpki-client