Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131332e302f32342d3234203d3e20323633383636.roa
File: 3133382e3138362e3131332e302f32342d3234203d3e20323633383636.roa (raw, json)
Hash identifier: 0e+0kzrUpaXImULvAFncUr3mNnJ2hZ9TNXsmk+bvn4I=
Subject key identifier: 26:69:4F:F8:C9:83:D9:0C:54:F4:24:FB:AB:2D:EF:F7:D3:55:C8:01
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 4A7B1A1DD1779928756CC0AE05139E42BFF47F86
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131332e302f32342d3234203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:56 +0000
ROA not before: Wed 18 Mar 2026 16:40:56 +0000
ROA not after: Wed 17 Mar 2027 16:45:56 +0000
asID: 263866
IP address blocks: 138.186.113.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7b:1a:1d:d1:77:99:28:75:6c:c0:ae:05:13:9e:42:bf:f4:7f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:56 2026 GMT
Not After : Mar 17 16:45:56 2027 GMT
Subject: CN=26694FF8C983D90C54F424FBAB2DEFF7D355C801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:fc:cc:ee:5d:32:79:91:16:3b:d3:73:b5:
4f:02:17:c4:03:52:d4:bf:f0:fb:f8:a9:58:6a:ef:
22:ad:a3:70:fd:30:d1:05:f8:61:ea:67:bf:d4:3a:
2c:0a:fc:bb:01:2a:da:44:42:be:b7:3c:ee:89:7b:
ea:f1:d0:84:9f:cf:d1:5b:5e:54:7a:fc:5a:f1:ec:
81:00:dc:94:11:4f:58:49:fd:ee:22:b4:76:67:29:
8b:44:34:cd:12:b4:a6:f7:44:77:ad:b7:24:81:f5:
66:28:7b:8b:39:01:54:b0:8d:27:84:0c:5f:35:39:
ec:25:d6:c0:42:07:ae:ae:dd:93:61:12:d4:c0:7a:
b4:83:0c:19:e5:96:9c:20:21:d0:b7:ba:b0:07:01:
b7:2e:61:7b:80:cd:b6:77:71:93:3f:16:19:a5:2b:
a8:b6:5e:2b:e8:ef:74:aa:89:69:54:1c:9f:b4:72:
51:ca:90:7b:aa:72:cc:fa:30:95:ad:2e:11:c7:ae:
c5:8e:6b:4e:c2:23:43:00:86:0b:f3:66:e1:87:99:
77:b5:ef:74:7d:3b:49:1b:cc:a6:b3:1e:83:e1:ca:
99:6b:37:f9:8f:35:9c:17:8c:d0:1f:c0:92:fe:12:
f9:c7:51:f8:f8:5e:2e:60:ee:53:22:ab:6f:ae:be:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:69:4F:F8:C9:83:D9:0C:54:F4:24:FB:AB:2D:EF:F7:D3:55:C8:01
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131332e302f32342d3234203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:de:c1:ff:fd:18:42:b2:e7:a6:dc:e2:6c:a4:d9:d1:c5:53:
21:9e:f9:3c:8a:b8:8a:e7:2c:50:16:73:bc:ea:30:8c:2e:f1:
f5:a9:2e:d6:e2:fd:91:a7:1d:40:03:91:cd:d5:cc:63:ed:91:
bc:e7:14:2d:7e:a9:2f:95:f3:8f:3e:5a:4a:8b:27:27:34:f6:
94:c0:03:44:8a:fb:4b:bc:49:bb:6a:6c:b2:89:4b:8f:99:aa:
20:ce:f5:4d:e4:24:78:0e:4a:c1:1b:52:ed:4b:4b:c1:90:f1:
46:10:92:31:6d:22:dc:4d:57:8a:4d:58:dd:9a:ce:4c:57:24:
ce:87:e6:b8:7a:a4:90:69:ea:4d:07:d0:b5:c0:c1:a4:7c:be:
71:4a:1d:6a:e6:04:21:ae:81:01:1f:36:e7:cb:a6:b8:25:70:
6d:96:50:73:8d:91:44:ff:fe:76:46:f9:4f:3c:84:c8:aa:31:
52:a6:8e:02:01:fb:ed:1e:65:10:32:bd:9f:7a:1f:3e:6a:f5:
7e:71:bd:df:89:03:aa:89:9a:71:f1:9e:f2:37:ad:ca:9e:45:
0d:9e:b2:93:1d:31:88:90:e5:a8:9d:7e:be:ae:9b:62:1a:2d:
ee:f7:a1:79:a1:5d:bc:45:7d:96:2e:ea:a5:98:0b:8f:de:a9:
1c:74:36:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSnsaHdF3mSh1bMCuBROeQr/0f4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdE
NEQyMDVBNzAeFw0yNjAzMTgxNjQwNTZaFw0yNzAzMTcxNjQ1NTZaMDMxMTAvBgNV
BAMTKDI2Njk0RkY4Qzk4M0Q5MEM1NEY0MjRGQkFCMkRFRkY3RDM1NUM4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3PzM7l0yeZEWO9NztU8CF8QD
UtS/8Pv4qVhq7yKto3D9MNEF+GHqZ7/UOiwK/LsBKtpEQr63PO6Je+rx0ISfz9Fb
XlR6/Frx7IEA3JQRT1hJ/e4itHZnKYtENM0StKb3RHettySB9WYoe4s5AVSwjSeE
DF81Oewl1sBCB66u3ZNhEtTAerSDDBnllpwgIdC3urAHAbcuYXuAzbZ3cZM/Fhml
K6i2Xivo73SqiWlUHJ+0clHKkHuqcsz6MJWtLhHHrsWOa07CI0MAhgvzZuGHmXe1
73R9O0kbzKazHoPhyplrN/mPNZwXjNAfwJL+EvnHUfj4Xi5g7lMiq2+uviiXAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUJmlP+MmD2QxU9CT7qy3v99NVyAEwHwYDVR0j
BBgwFoAUpZWevU31Hf6P2WKZzs0oR9TSBacwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45
LzAvQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdENEQyMDVBNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTk1OUVCRDRERjUxREZFOEZE
OTYyOTlDRUNEMjg0N0Q0RDIwNUE3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9R
SlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45LzAvMzEz
MzM4MmUzMTM4MzYyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM4MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq6cTANBgkqhkiG9w0BAQsFAAOCAQEAP97B//0Y
QrLnptzibKTZ0cVTIZ75PIq4iucsUBZzvOowjC7x9aku1uL9kacdQAORzdXMY+2R
vOcULX6pL5Xzjz5aSosnJzT2lMADRIr7S7xJu2pssolLj5mqIM71TeQkeA5KwRtS
7UtLwZDxRhCSMW0i3E1Xik1Y3ZrOTFckzofmuHqkkGnqTQfQtcDBpHy+cUodauYE
Ia6BAR8258umuCVwbZZQc42RRP/+dkb5TzyEyKoxUqaOAgH77R5lEDK9n3ofPmr1
fnG934kDqomacfGe8jetyp5FDZ6ykx0xiJDlqJ1+vq6bYhot7veheaFdvEV9li7q
pZgLj96pHHQ2Gw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:03 2026 by rpki-client