Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
File: 3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa (raw, json)
Hash identifier: BgpFEUNwuJKv//ok42jl7uZvtK4xFKgmhd677+cVbiU=
Subject key identifier: 81:73:3C:AF:FB:34:98:52:BD:88:35:23:A3:C2:B9:52:FF:03:25:51
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 7478DAC9CC0B36A0BE06FB8C1D4E0D0A9B84753A
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:59 +0000
ROA not before: Wed 18 Mar 2026 16:40:59 +0000
ROA not after: Wed 17 Mar 2027 16:45:59 +0000
asID: 263866
IP address blocks: 138.186.114.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:78:da:c9:cc:0b:36:a0:be:06:fb:8c:1d:4e:0d:0a:9b:84:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:59 2026 GMT
Not After : Mar 17 16:45:59 2027 GMT
Subject: CN=81733CAFFB349852BD883523A3C2B952FF032551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:c7:70:93:ca:67:0e:79:ff:e7:b7:78:07:
cb:00:b0:42:bf:c2:b3:84:3e:d3:af:2c:72:5d:74:
2c:af:3e:e6:b3:8b:49:8f:b5:5e:b9:cb:2b:70:bb:
95:76:1d:75:58:a5:88:62:56:04:76:32:f3:5d:d7:
fd:dc:f6:e3:36:ec:34:3a:af:4d:c5:17:ff:b6:c7:
90:04:7d:cb:db:e0:c9:01:0f:47:23:0f:5d:1d:bd:
fb:be:db:00:96:0b:33:66:d4:ce:e3:fd:51:a5:61:
f7:5a:5b:3c:73:9f:a5:66:f6:a0:e0:15:81:87:8f:
f9:8a:f4:b3:0b:d7:83:3f:19:60:f8:3d:54:cd:8c:
3f:f1:f7:b2:ed:3b:d3:e0:f0:81:7e:6f:66:eb:cd:
34:6b:9c:ab:d7:26:0b:60:2c:38:02:3a:0c:47:43:
29:87:b8:7d:ee:89:42:08:e1:13:5a:77:9f:4d:e9:
5c:7e:c0:e7:ed:2f:a6:f1:d6:a1:73:42:c6:ba:1f:
68:b9:ee:60:32:75:d7:96:dd:ac:b1:2d:c8:8f:6d:
8f:39:c8:b4:2c:d5:07:11:c3:86:e8:00:5f:24:4a:
5b:3b:84:f5:16:ed:39:c2:09:dd:29:a4:ba:3b:8c:
66:ca:4f:12:61:be:cd:74:48:6e:e9:d7:bd:06:98:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:73:3C:AF:FB:34:98:52:BD:88:35:23:A3:C2:B9:52:FF:03:25:51
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32332d3233203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.114.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7b:13:a9:73:78:d1:cb:9c:f5:c3:4d:51:3a:be:f3:b1:ae:
99:cd:5e:9e:a4:26:31:06:22:46:4f:a8:0a:33:e1:92:fc:3c:
21:c9:77:28:27:e6:85:3f:80:d3:3f:4a:0d:b5:f4:f5:b2:2e:
1c:5b:e0:80:39:3e:36:3f:63:c8:21:14:f5:30:97:33:21:b2:
bb:9f:8a:ba:c7:68:72:03:34:7d:88:13:f2:f5:f6:b5:d2:a5:
18:08:d9:9a:03:6b:f1:92:3f:52:f9:b9:ec:b0:e1:d2:5c:e2:
65:67:32:0f:85:10:4b:ae:d6:19:78:1a:62:40:11:4a:97:ea:
cf:72:b8:51:cf:07:7b:98:88:e9:e5:ca:82:16:d7:41:c4:8b:
33:9e:46:a7:db:f4:d2:ea:31:29:eb:b8:fd:48:67:50:e6:b4:
c7:89:20:f0:bc:19:8a:ad:9d:cc:3d:07:eb:2a:d0:fa:87:51:
bc:72:88:ee:77:91:71:70:98:95:19:2d:67:f3:f6:70:0e:1d:
73:5a:e9:62:c5:67:5d:a8:13:94:da:2f:4f:c0:09:09:fa:fe:
b1:b8:94:4d:ff:b7:e4:e4:38:eb:0c:5a:52:17:f0:19:b2:0b:
c8:c2:0a:ee:3c:ad:68:f7:82:3f:48:58:48:d6:9f:ba:0c:3e:
42:af:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:22:36 2026 by rpki-client