Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
File: 3133382e35392e34342e302f32322d3233203d3e20323634353935.roa (raw, json)
Hash identifier: oSLIdKs31R6kN8jMm7q2L6WMZOhFZtUS0CS1pi26pCg=
Subject key identifier: 9C:A6:00:85:21:69:B4:68:47:9D:74:1F:B5:19:CB:CB:95:5B:27:67
Certificate issuer: /CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
Certificate serial: 21D4EA183A85B1EBECBF5BE8D99FA95AE13E9ED1
Authority key identifier: 76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
Signing time: Mon 04 May 2026 16:45:03 +0000
ROA not before: Mon 04 May 2026 16:40:03 +0000
ROA not after: Mon 03 May 2027 16:45:03 +0000
asID: 264595
IP address blocks: 138.59.44.0/22 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d4:ea:18:3a:85:b1:eb:ec:bf:5b:e8:d9:9f:a9:5a:e1:3e:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7616FC53DDB4A888D13049E2C525FA7A5E052F6E
Validity
Not Before: May 4 16:40:03 2026 GMT
Not After : May 3 16:45:03 2027 GMT
Subject: CN=9CA600852169B468479D741FB519CBCB955B2767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:c1:fd:86:ac:8b:8e:71:a5:ce:66:37:45:
74:d5:f3:e8:c6:00:03:5d:e4:96:b8:e2:cc:f5:37:
7a:7c:e7:79:e2:ec:eb:2d:5a:1c:32:62:0a:98:79:
ee:cd:18:c2:9e:b7:0a:24:98:e8:30:42:dd:a0:94:
e5:b6:1a:1e:53:92:08:6b:3f:a2:04:6d:cb:4a:9c:
7d:32:80:c1:12:00:37:8f:b2:34:6c:5e:36:f8:24:
e8:88:9a:5f:62:d0:5f:32:2d:54:e9:62:79:81:cf:
30:32:9f:1a:f5:60:00:b7:68:09:b5:32:1c:de:57:
b7:2f:10:2a:66:65:8c:d6:ab:17:70:1b:d5:2e:21:
e4:94:b3:f5:f8:27:f5:25:22:29:c3:cf:3e:58:1d:
32:29:90:2c:0b:7d:e1:be:b7:f6:d7:dd:c9:ae:a1:
e9:9f:dd:90:2c:31:fa:16:1b:05:63:1c:51:c8:5b:
ef:43:c8:16:18:6f:af:b1:4f:de:9f:37:56:17:1e:
a8:f8:b8:3b:25:b5:e4:27:2f:23:c7:b9:83:b2:6c:
aa:7f:f4:d6:ef:3c:77:8b:a0:3c:42:ad:94:ec:17:
c2:92:20:ab:97:f1:70:7a:ab:f7:0f:25:99:39:0b:
9f:d4:2a:b4:5c:18:1a:2a:38:9d:05:7c:c2:3c:22:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:00:85:21:69:B4:68:47:9D:74:1F:B5:19:CB:CB:95:5B:27:67
X509v3 Authority Key Identifier:
keyid:76:16:FC:53:DD:B4:A8:88:D1:30:49:E2:C5:25:FA:7A:5E:05:2F:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7616FC53DDB4A888D13049E2C525FA7A5E052F6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:9b:6f:d8:c3:c9:dd:72:35:a5:de:07:f8:be:87:d6:fd:31:
5a:48:7b:02:fd:8a:fd:a9:a3:35:28:1e:da:09:75:b9:b0:80:
a2:3e:ac:d2:31:b8:50:0a:7d:36:2a:ae:59:ca:76:c9:9e:af:
83:cc:fa:58:8f:e1:9a:89:7f:b5:21:83:1b:4c:a4:09:3b:e2:
04:df:50:62:37:4c:3c:30:2b:02:9c:24:e9:ee:d1:11:48:98:
c2:14:c2:f9:7e:ec:e1:fa:e2:7f:75:ac:5b:9f:e3:ce:2c:e9:
e7:d7:d1:b8:ef:19:59:df:9d:90:01:e2:11:a0:4f:78:af:8d:
c3:45:eb:f9:24:56:78:4b:55:90:cf:40:71:9d:71:4a:47:30:
03:95:c3:64:3b:c9:07:50:1f:d8:cc:a3:18:d6:e6:01:cc:8b:
8e:54:c4:03:a8:34:7f:85:7d:6b:d3:ab:55:b1:b8:5a:64:38:
a1:d5:4b:c6:ab:64:fc:e4:0f:73:05:a1:28:9e:9c:1a:9b:17:
3b:04:08:04:7b:4d:20:8c:ac:be:25:26:28:48:e3:b4:34:a0:
4e:fa:d2:9f:79:56:0d:8e:b9:9c:c5:ae:b7:f2:d1:9a:26:b3:
49:b6:03:bc:51:3a:7d:74:75:b2:c6:2e:5d:4a:7f:41:ed:79:
2b:c2:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:58:23 2026 by rpki-client