Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132362e302f32342d3234203d3e20323731303333.roa
File: 3138372e38342e3132362e302f32342d3234203d3e20323731303333.roa (raw, json)
Hash identifier: hV4JjPwXo9Ndi/y2NP50rEvDUj9kspp/2cHR4zVBfxA=
Subject key identifier: BB:0B:6A:C2:F8:16:20:31:44:7C:44:ED:3A:B7:53:A1:E9:5E:A9:2A
Certificate issuer: /CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Certificate serial: 79EF76E65B3166FFA6A38FF0420807863522BF00
Authority key identifier: B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132362e302f32342d3234203d3e20323731303333.roa
Signing time: Thu 25 Sep 2025 14:53:31 +0000
ROA not before: Thu 25 Sep 2025 14:48:31 +0000
ROA not after: Thu 24 Sep 2026 14:53:31 +0000
asID: 271033
IP address blocks: 187.84.126.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ef:76:e6:5b:31:66:ff:a6:a3:8f:f0:42:08:07:86:35:22:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B91DF15E0342DBD1AB58797AF188E016532F7C4E
Validity
Not Before: Sep 25 14:48:31 2025 GMT
Not After : Sep 24 14:53:31 2026 GMT
Subject: CN=BB0B6AC2F8162031447C44ED3AB753A1E95EA92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:b4:40:ac:eb:26:80:6a:09:f4:ff:e4:02:
46:3b:75:4a:91:93:fd:50:91:80:86:e6:17:83:4d:
20:15:36:38:d9:03:d8:8d:34:b5:ad:bf:cc:81:ed:
53:24:cb:f5:22:f6:1f:d1:ab:e0:60:58:26:48:d9:
34:83:c2:fa:f1:14:21:63:38:2f:e3:15:0e:e6:21:
50:95:13:a3:04:c8:71:63:be:d5:85:5e:f7:e2:69:
0e:02:ff:52:ac:75:dc:d6:b5:64:88:14:3e:9f:11:
dc:82:af:bd:f4:c8:ee:64:51:b1:cf:de:fb:5b:f3:
4f:7b:b7:c0:c6:e7:d3:24:ae:15:fa:90:56:b5:4c:
4e:87:19:39:75:6d:54:0d:01:64:34:59:30:4a:88:
c1:74:03:41:f2:47:42:b1:72:eb:ef:5f:45:14:25:
1c:8d:17:a1:8b:4d:a4:37:91:0d:bc:6d:88:d9:5c:
e1:ef:58:3a:f7:09:70:f1:b0:32:37:01:78:dc:7d:
1d:af:33:f4:e2:81:ff:3e:bc:bf:7a:44:0a:7c:80:
83:68:d1:6c:ce:b0:fb:c8:b9:f3:0b:96:f0:23:8f:
07:e7:85:29:af:a8:eb:8a:16:7f:d6:a9:36:c0:79:
ef:58:3f:07:1e:53:34:f4:f4:f8:3c:aa:99:f0:34:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:6A:C2:F8:16:20:31:44:7C:44:ED:3A:B7:53:A1:E9:5E:A9:2A
X509v3 Authority Key Identifier:
keyid:B9:1D:F1:5E:03:42:DB:D1:AB:58:79:7A:F1:88:E0:16:53:2F:7C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B91DF15E0342DBD1AB58797AF188E016532F7C4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXLmKGqgtZv3TJmpBt8xn7MF9tfE4XNDkqvR4G1aYrgu/1/3138372e38342e3132362e302f32342d3234203d3e20323731303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.84.126.0/24
Signature Algorithm: sha256WithRSAEncryption
63:59:9c:5b:dd:0f:b7:be:de:eb:ad:5e:2b:81:5f:23:53:3e:
76:21:51:39:cf:d9:bd:1d:8c:b2:a2:45:2f:b1:88:22:96:5f:
b6:b9:a9:53:49:63:0a:b7:c1:63:50:41:b2:26:d0:43:3d:fc:
d2:9b:4f:41:35:a2:89:b7:c2:ba:fc:20:d3:e9:c5:09:3c:d5:
e3:e4:cb:8e:dc:00:1e:9d:ef:ad:4f:1c:59:db:5d:c7:08:7e:
e5:f6:09:44:d3:42:0d:15:a3:52:aa:93:c9:84:bf:c3:4b:cc:
39:a8:89:52:1e:e8:a1:4d:35:f4:03:6e:00:ea:fe:e8:1e:77:
dc:40:d3:ad:b8:70:2d:1c:12:87:d3:69:ce:2a:f2:b2:7a:01:
39:fd:0a:eb:64:87:cc:30:3e:a4:98:9a:9d:ca:87:05:60:2f:
ad:75:7d:da:e0:e3:60:cb:fc:83:e1:1d:27:ba:43:f0:97:fc:
d7:4e:d2:17:e4:b3:98:07:ba:ef:9d:ea:ad:0d:0f:a1:92:b2:
67:72:1a:68:fb:f8:bd:f3:36:d1:06:16:f8:0f:2a:50:a0:ff:
b2:a5:ab:86:c6:7d:ab:0a:a2:3a:c3:2c:90:0d:29:a3:6f:39:
f1:ec:a1:e9:04:07:e1:5d:0f:b9:9b:04:e2:37:eb:fa:26:8c:
2b:20:de:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUee925lsxZv+mo4/wQggHhjUivwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxREYxNUUwMzQyREJEMUFCNTg3OTdBRjE4OEUwMTY1
MzJGN0M0RTAeFw0yNTA5MjUxNDQ4MzFaFw0yNjA5MjQxNDUzMzFaMDMxMTAvBgNV
BAMTKEJCMEI2QUMyRjgxNjIwMzE0NDdDNDRFRDNBQjc1M0ExRTk1RUE5MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCbRArOsmgGoJ9P/kAkY7dUqR
k/1QkYCG5heDTSAVNjjZA9iNNLWtv8yB7VMky/Ui9h/Rq+BgWCZI2TSDwvrxFCFj
OC/jFQ7mIVCVE6MEyHFjvtWFXvfiaQ4C/1KsddzWtWSIFD6fEdyCr730yO5kUbHP
3vtb8097t8DG59MkrhX6kFa1TE6HGTl1bVQNAWQ0WTBKiMF0A0HyR0KxcuvvX0UU
JRyNF6GLTaQ3kQ28bYjZXOHvWDr3CXDxsDI3AXjcfR2vM/Tigf8+vL96RAp8gINo
0WzOsPvIufMLlvAjjwfnhSmvqOuKFn/WqTbAee9YPwceUzT09Pg8qpnwNMVrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuwtqwvgWIDFEfETtOrdToeleqSowHwYDVR0j
BBgwFoAUuR3xXgNC29GrWHl68YjgFlMvfE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFhMbUtHcWd0WnYzVEptcEJ0OHhuN01GOXRmRTRYTkRrcXZSNEcxYVly
Z3UvMS9COTFERjE1RTAzNDJEQkQxQUI1ODc5N0FGMTg4RTAxNjUzMkY3QzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MURGMTVFMDM0MkRCRDFB
QjU4Nzk3QUYxODhFMDE2NTMyRjdDNEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hYTG1LR3FndFp2M1RKbXBCdDh4bjdNRjl0ZkU0WE5Ea3F2UjRHMWFZcmd1LzEv
MzEzODM3MmUzODM0MmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7VH4wDQYJKoZIhvcNAQELBQADggEBAGNZnFvd
D7e+3uutXiuBXyNTPnYhUTnP2b0djLKiRS+xiCKWX7a5qVNJYwq3wWNQQbIm0EM9
/NKbT0E1oom3wrr8INPpxQk81ePky47cAB6d761PHFnbXccIfuX2CUTTQg0Vo1Kq
k8mEv8NLzDmoiVIe6KFNNfQDbgDq/uged9xA0624cC0cEofTac4q8rJ6ATn9Cutk
h8wwPqSYmp3KhwVgL611fdrg42DL/IPhHSe6Q/CX/NdO0hfks5gHuu+d6q0ND6GS
smdyGmj7+L3zNtEGFvgPKlCg/7Klq4bGfasKojrDLJANKaNvOfHsoekEB+FdD7mb
BOI36/omjCsg3us=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:23 2025 by rpki-client