Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/3137302e38332e34302e302f32322d3332203d3e20323636343632.roa
File: 3137302e38332e34302e302f32322d3332203d3e20323636343632.roa (raw, json)
Hash identifier: m/CLB44LJRAq/Oz0l5MCen5Lt61UcnSQDV4dCfw/NQU=
Subject key identifier: 49:30:61:C9:F6:F5:CB:AB:7C:FE:EE:7A:70:B5:37:65:46:56:FC:4B
Certificate issuer: /CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Certificate serial: 798F9803D293D770E9C122D7436F110364C85006
Authority key identifier: 0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/3137302e38332e34302e302f32322d3332203d3e20323636343632.roa
Signing time: Tue 24 Mar 2026 14:09:03 +0000
ROA not before: Tue 24 Mar 2026 14:04:03 +0000
ROA not after: Tue 23 Mar 2027 14:09:03 +0000
asID: 266462
IP address blocks: 170.83.40.0/22 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8f:98:03:d2:93:d7:70:e9:c1:22:d7:43:6f:11:03:64:c8:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E686F37C80B20480C4AE8C509583AA4CDABCA3B
Validity
Not Before: Mar 24 14:04:03 2026 GMT
Not After : Mar 23 14:09:03 2027 GMT
Subject: CN=493061C9F6F5CBAB7CFEEE7A70B537654656FC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:dd:cf:37:7b:31:7c:3e:87:47:2e:00:ac:
25:dd:68:82:7f:8d:45:04:f4:b2:55:7a:69:f1:47:
ca:47:45:1e:ec:57:a6:b1:3a:00:dc:5c:eb:1a:55:
ba:11:73:91:18:67:7b:41:c0:77:ad:e7:e2:69:e6:
1f:20:ed:6b:6c:1a:50:ba:7d:67:54:26:87:b8:80:
a5:ff:a5:ea:3a:48:79:a9:da:f5:1e:8a:61:b0:65:
e9:37:8e:85:0f:29:d3:1c:00:3e:47:75:fb:ce:0c:
10:eb:29:13:36:2f:e9:9b:60:3f:8c:d0:12:4c:c6:
12:6e:81:3b:6b:79:1b:58:47:c0:e2:21:d3:6c:c1:
fc:24:ac:d5:46:f2:e9:33:c9:91:2d:2c:ab:b9:07:
97:2f:aa:0e:85:d2:48:b9:47:c5:b1:35:c8:4e:2c:
de:7a:03:43:ad:22:52:41:5b:78:1a:ac:eb:40:8c:
5a:ed:76:0d:8a:03:4f:0c:fa:c1:5d:d5:c9:e6:3a:
f0:1f:1f:54:e4:e0:1e:6e:33:26:da:90:60:14:ea:
dc:54:ed:46:2f:a7:d3:82:5b:eb:1e:c8:68:e6:2d:
b2:86:3c:e8:ac:e2:8a:35:14:0c:5d:99:01:f4:70:
35:24:1a:78:8f:1d:a3:fc:fb:49:d0:55:ae:cf:b2:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:61:C9:F6:F5:CB:AB:7C:FE:EE:7A:70:B5:37:65:46:56:FC:4B
X509v3 Authority Key Identifier:
keyid:0E:68:6F:37:C8:0B:20:48:0C:4A:E8:C5:09:58:3A:A4:CD:AB:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E686F37C80B20480C4AE8C509583AA4CDABCA3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoeofHi9XokQVyFJctj61yqct1AzTW1omwbkyq5NikZC/0/3137302e38332e34302e302f32322d3332203d3e20323636343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.40.0/22
Signature Algorithm: sha256WithRSAEncryption
38:7c:8e:e1:e5:c1:11:cd:4b:0d:0a:df:f8:f4:8e:76:eb:5d:
c8:57:66:ea:ee:ac:cc:a7:fb:6f:3e:59:bf:f0:37:e4:5c:46:
04:d0:b6:cb:ea:5d:ef:db:96:fa:b5:bc:2f:ad:49:d3:03:e8:
8b:20:cf:08:78:8f:77:f5:fb:85:d3:35:ee:c1:03:8d:f4:93:
55:52:8f:10:ca:c0:d4:33:61:14:a8:a7:83:fe:21:d1:9a:e8:
f0:3b:b0:16:25:aa:0a:ba:47:79:cf:60:4d:1d:28:00:66:d3:
53:71:4d:e4:6f:7f:79:51:f3:44:98:b9:ff:45:d8:b4:cf:35:
6a:a0:53:d0:83:12:19:46:86:7f:99:dc:de:9b:50:fc:02:21:
c1:cf:7a:0f:5f:59:89:9d:5c:a5:50:03:49:d9:22:9a:9d:52:
c3:e9:ee:16:bb:9d:b6:da:97:fc:0c:9e:2c:ca:0c:a3:07:53:
08:cb:f3:4c:87:5a:cc:d6:92:ca:59:be:c4:ac:90:27:89:eb:
4b:be:bd:37:da:fb:a5:3a:e1:98:3b:f4:69:19:c7:88:80:e5:
ea:90:2f:0a:d8:88:2b:d0:52:bf:1f:18:74:7e:06:57:9a:29:
a7:cf:6a:f9:e0:d8:24:8d:42:05:9c:f2:20:f2:2e:9a:93:35:
4f:9f:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:01 2026 by rpki-client