Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32342d3234203d3e20323633383636.roa
File: 3133382e3138362e3131322e302f32342d3234203d3e20323633383636.roa (raw, json)
Hash identifier: UGYvE1ijYij+trXF4V61AaTJ2eTUgZjzl6ngEBpcXp8=
Subject key identifier: 3B:EC:13:9D:24:CB:FD:B6:57:94:3D:11:DE:49:DC:7C:B0:1B:48:B5
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 34DDAADA18D832AFBE1C1366A5B0A2FCA6082DE4
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32342d3234203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:51 +0000
ROA not before: Wed 18 Mar 2026 16:40:51 +0000
ROA not after: Wed 17 Mar 2027 16:45:51 +0000
asID: 263866
IP address blocks: 138.186.112.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:dd:aa:da:18:d8:32:af:be:1c:13:66:a5:b0:a2:fc:a6:08:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:51 2026 GMT
Not After : Mar 17 16:45:51 2027 GMT
Subject: CN=3BEC139D24CBFDB657943D11DE49DC7CB01B48B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:53:0b:98:48:79:d1:c3:df:51:3a:86:65:
5f:bf:9f:19:15:af:70:fd:7b:5a:83:da:aa:ff:03:
ed:a5:1e:5e:bf:fd:0b:9d:8e:56:35:cd:54:d9:63:
87:84:2f:25:95:c9:1a:bb:e6:1e:98:e3:34:20:44:
7e:4d:a5:de:91:f1:44:ee:e3:0e:ff:b6:d1:61:54:
c9:90:9f:5c:10:7e:ea:96:dc:05:71:49:ce:23:d0:
78:d0:4c:61:c4:17:e8:3a:97:86:a2:20:5b:87:82:
f9:20:ee:eb:11:0e:a6:7b:e1:2c:b6:58:47:dc:18:
cd:e3:19:c6:4b:ce:35:de:b9:3f:02:55:75:bf:ab:
f9:7e:89:65:13:00:2a:f1:57:3d:5a:08:8f:90:df:
e4:51:21:6a:b6:87:bb:d7:ed:a7:a9:30:17:96:2a:
ef:e9:25:42:d3:1b:69:65:ec:0a:28:70:36:1c:fb:
a9:44:ac:e7:71:f1:e2:ad:19:27:31:3a:db:cd:20:
38:5f:d4:09:54:84:2e:09:83:d1:32:b8:d2:96:96:
2a:ff:62:b2:9d:66:b3:3c:b2:bb:d3:71:d5:2f:b4:
ad:64:8b:9c:97:50:9c:43:d1:50:1c:a8:4e:ad:f5:
a9:fe:f6:fc:df:67:a0:4e:d5:3e:02:c4:3b:b5:71:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:13:9D:24:CB:FD:B6:57:94:3D:11:DE:49:DC:7C:B0:1B:48:B5
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131322e302f32342d3234203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.112.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4e:1d:f4:f3:e6:26:2f:42:9b:34:d4:22:96:cd:9b:b3:de:
5a:6e:42:89:49:6c:f3:90:f8:f5:44:d5:92:8b:cf:61:5e:1c:
df:4c:44:79:e0:7d:4e:37:23:c5:f5:8f:4f:12:1f:c3:c1:cd:
8c:bf:f8:ac:53:e9:13:2a:8d:a6:39:b7:d1:50:ec:fe:a2:7d:
27:28:a4:22:db:7c:e0:e9:57:26:cb:12:7e:a7:94:81:3a:28:
c0:5f:f1:43:b1:46:b1:05:7e:82:02:c8:2a:6d:ee:4f:ff:c4:
35:70:41:94:93:03:e1:9f:b4:3a:11:9b:ba:79:d0:04:f6:37:
b3:e1:35:00:29:00:b6:7d:b9:1b:8e:42:dd:46:b1:7b:85:aa:
59:92:7e:52:ee:a7:eb:0b:9d:63:e3:a5:92:13:4b:2e:3a:cd:
40:3b:6f:da:1e:10:38:c5:73:f9:c9:e3:ca:10:ef:a1:fc:7a:
e1:41:9e:3a:46:ab:2b:18:3d:20:fa:b7:d2:3a:da:0d:16:08:
b5:f1:02:81:c1:18:b5:a8:77:77:fc:a8:96:95:a2:ad:13:80:
f9:06:75:f5:54:a9:93:6d:4b:90:18:f5:50:3c:64:6c:46:97:
0d:a4:37:f8:37:d6:aa:bc:fe:e3:9f:c3:56:09:59:0f:cd:cb:
90:35:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:03 2026 by rpki-client