Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa
File: 3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa (raw, json)
Hash identifier: 1PdxFgFepYKKMDACyF6NuoJC4sS3BqA+3cwC36N4f54=
Subject key identifier: 46:48:A0:62:37:E9:06:62:57:14:31:1F:8F:CB:64:5E:5B:5A:98:5E
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 4D54B9042E7E1C5D868725A82FD1C3CE5AC8DEE9
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:47 +0000
ROA not before: Wed 18 Mar 2026 16:40:47 +0000
ROA not after: Wed 17 Mar 2027 16:45:47 +0000
asID: 263866
IP address blocks: 138.186.112.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:54:b9:04:2e:7e:1c:5d:86:87:25:a8:2f:d1:c3:ce:5a:c8:de:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:47 2026 GMT
Not After : Mar 17 16:45:47 2027 GMT
Subject: CN=4648A06237E906625714311F8FCB645E5B5A985E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:2e:46:db:ad:81:19:fa:fe:9e:51:93:5e:
65:fb:9a:fb:3d:a9:2d:b7:6d:f4:34:ca:20:07:7f:
38:10:01:e8:4e:e7:3c:92:1a:21:62:49:94:f1:96:
77:2e:b6:85:b1:bc:26:21:fc:aa:53:6e:61:0c:3e:
ed:cc:7d:ca:ce:fb:c9:70:65:2d:f8:56:0f:cd:34:
aa:61:b6:6d:b8:09:ab:fa:84:8f:3b:96:57:7e:8d:
5b:e6:0f:4e:1f:2f:7b:9a:df:6f:2e:c2:62:a3:70:
bb:b3:7a:4f:c0:c0:ad:5e:ee:a1:c4:21:7a:35:24:
41:ec:c3:bb:e3:b2:3d:20:a0:50:dc:a0:15:ea:8f:
9f:55:f6:d0:7c:45:46:4a:40:52:69:25:ff:72:a6:
06:03:57:b5:9a:d4:4f:41:a8:f0:d3:52:d5:dc:cb:
a3:6c:3e:93:cd:f5:6e:00:ca:28:d2:d2:9d:58:b7:
21:dc:fb:b6:42:31:5c:86:4f:be:87:73:fd:c5:1c:
f6:97:17:7a:39:22:86:cf:69:39:65:27:c3:96:28:
28:0c:5b:aa:b4:b9:a2:81:0c:e4:cb:5e:81:14:23:
63:e7:09:86:08:34:0e:bd:aa:7d:a1:a7:15:c8:3d:
98:96:39:af:6c:26:75:13:31:b1:0e:9a:1e:29:bd:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:A0:62:37:E9:06:62:57:14:31:1F:8F:CB:64:5E:5B:5A:98:5E
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32332d3233203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.112.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:14:9a:9c:a4:23:69:1e:4a:52:85:d9:dd:ff:d8:ed:be:0a:
8c:fb:35:a8:9f:1a:bf:50:c8:6d:ee:01:80:59:59:a0:83:97:
f9:c1:0b:19:fd:a1:1c:04:63:cb:ef:fb:e7:c0:90:74:97:69:
61:9d:bd:1e:8a:c8:2d:20:ef:0a:fa:7e:3c:86:fc:61:7b:1a:
ad:7d:0c:d7:3e:9c:03:5c:fd:c3:81:59:61:8e:e1:3c:80:a0:
70:a8:29:b5:22:cc:30:70:6c:75:e4:b4:96:66:46:89:93:dc:
e7:ad:23:5f:59:62:43:e8:d1:dc:14:32:d0:23:2a:ee:8d:02:
b3:bb:da:68:69:96:18:1d:92:a7:92:84:a4:ea:42:91:1c:98:
7f:b6:21:49:da:7f:c8:82:f0:7b:8b:9e:31:62:95:a5:4a:dd:
cf:76:68:ee:6a:90:7e:b5:f1:4a:82:c6:4d:13:e8:98:9d:18:
10:74:b5:2f:99:20:bd:05:7e:12:f4:bb:50:57:97:59:98:02:
d9:2e:d9:8f:b2:7c:2e:43:76:a8:98:c4:4f:e4:68:b5:b5:2a:
8f:d8:a8:e5:e7:d4:d4:28:29:7b:e5:6b:12:38:a3:99:78:d8:
4a:72:7b:9d:d6:5b:6b:84:1d:73:fe:7e:16:52:a3:9e:1e:80:
5c:2e:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:18:13 2026 by rpki-client