Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
File: 3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa (raw, json)
Hash identifier: SgfoJIEcyEANIZCArC/THx6j5o6BSPs44Wr2rdhGeMA=
Subject key identifier: C6:64:87:19:7D:B5:CD:D3:BC:A1:5F:AE:05:BC:D1:62:48:1D:32:66
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 204154F5C74ABCEC37CECE72162B08934CCBCB06
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:16 +0000
ROA not before: Wed 18 Mar 2026 16:40:16 +0000
ROA not after: Wed 17 Mar 2027 16:45:16 +0000
asID: 263866
IP address blocks: 138.186.112.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:41:54:f5:c7:4a:bc:ec:37:ce:ce:72:16:2b:08:93:4c:cb:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:16 2026 GMT
Not After : Mar 17 16:45:16 2027 GMT
Subject: CN=C66487197DB5CDD3BCA15FAE05BCD162481D3266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:18:3d:04:6e:f9:3d:ab:30:c5:a2:f9:55:
21:c4:f7:fe:c9:83:d4:1c:01:44:9d:08:d6:a9:b9:
2f:41:0b:f2:39:68:0d:90:bd:f1:a4:d4:c7:d8:28:
40:0f:4f:0f:d9:65:54:ae:1c:3c:d0:19:5e:8b:1d:
61:f2:ca:9a:f9:e7:48:11:6e:6e:30:2e:27:d9:0a:
64:3b:ff:5c:12:0d:47:2a:b7:ac:61:bc:61:d9:20:
33:11:d9:84:bf:11:db:aa:83:5f:f3:47:00:0d:00:
48:ee:32:67:94:d1:8a:7f:15:63:35:d4:fd:70:2b:
0b:df:0c:9b:c4:4c:4a:0e:ef:9a:63:ea:f4:d8:78:
0a:97:10:ce:b3:14:9f:6a:32:94:6c:06:dc:a3:29:
7c:dd:6f:57:2d:a8:2f:14:a7:22:24:fa:75:62:8a:
80:d2:ac:d2:72:19:cf:8c:96:ee:35:b5:9f:45:c6:
f5:11:51:c0:e3:23:c0:a9:b0:ea:19:8a:fe:35:da:
f6:78:a5:3a:89:07:53:9b:c1:5c:42:b7:be:91:ff:
c3:de:8b:56:f8:96:6a:cf:16:a2:3c:6d:11:6f:f6:
a6:b9:44:ff:69:81:b5:5d:7d:be:17:1a:a1:74:7f:
b3:fc:23:1d:fb:43:99:3e:61:97:d8:c4:cc:64:bc:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:87:19:7D:B5:CD:D3:BC:A1:5F:AE:05:BC:D1:62:48:1D:32:66
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32322d3232203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.112.0/22
Signature Algorithm: sha256WithRSAEncryption
07:e8:4f:5f:de:b8:a6:0c:ac:c2:c8:53:08:1a:cd:b6:55:ad:
49:5c:b5:65:02:5e:8f:3a:36:7c:64:c8:80:28:ce:63:a3:1d:
40:b7:2c:2c:0a:2d:48:09:bd:67:48:ff:50:65:b2:f7:7c:c5:
27:9f:9f:a5:f8:38:ed:a4:53:d2:5f:6d:1d:af:9d:f8:78:0f:
8a:2c:c8:f1:08:eb:1c:84:10:cf:a7:df:2b:bd:f3:20:ef:37:
94:27:4e:16:d3:4b:6f:b0:7e:3c:4a:b0:f3:48:0d:c6:42:65:
0e:60:08:e0:45:c9:77:80:e4:10:d3:c9:39:c7:19:57:c3:89:
0d:e2:2c:a3:7e:e4:9c:90:63:42:43:b3:c3:ab:80:45:f9:54:
2b:39:3e:a2:5c:d4:cf:d6:7d:e7:79:17:01:ae:6a:43:08:64:
cc:85:26:27:5a:cf:27:74:18:06:c8:a1:21:9d:a6:f0:f1:36:
93:c2:09:9c:85:b4:e6:b1:7f:e0:4c:a6:cb:7e:58:fb:d4:9e:
7e:cb:34:99:b7:9b:97:d1:21:e0:3c:ca:a4:53:60:2e:22:78:
66:7f:b1:14:00:74:51:d6:55:7e:56:91:74:fc:82:02:24:26:
d1:e0:fc:c5:90:c9:f5:f1:3b:35:7e:1e:08:4b:94:bc:d1:06:
c9:b7:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:49:02 2026 by rpki-client