Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa
File: 3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa (raw, json)
Hash identifier: /gTyIr7uHzDz6ot0n+dkoTiFBDy/F9VrZTTFYkZeUho=
Subject key identifier: 43:AC:B9:F5:75:28:8F:07:9E:2B:2C:C1:4B:F8:93:BF:5E:C1:78:32
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 7F7864317442C20346978605E194723B6D6B668F
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:46:03 +0000
ROA not before: Wed 18 Mar 2026 16:41:03 +0000
ROA not after: Wed 17 Mar 2027 16:46:03 +0000
asID: 263866
IP address blocks: 138.186.114.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:78:64:31:74:42:c2:03:46:97:86:05:e1:94:72:3b:6d:6b:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:41:03 2026 GMT
Not After : Mar 17 16:46:03 2027 GMT
Subject: CN=43ACB9F575288F079E2B2CC14BF893BF5EC17832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:cc:7e:c9:a3:7d:36:1d:0f:b1:f1:fb:62:
f1:74:99:06:c3:3a:c8:b6:35:6c:64:f8:e7:2a:dc:
60:b5:d1:19:fd:22:5f:76:a6:9f:fe:0b:09:c0:0b:
0d:f1:93:14:3e:37:cf:fc:1c:33:87:7a:e5:88:12:
3e:1a:5b:cb:93:22:cf:43:5e:56:e6:d8:37:13:64:
90:63:cf:5e:86:3d:56:8b:da:c9:ce:63:8b:6a:77:
6e:51:fd:4e:72:b9:ae:76:98:55:99:2d:ab:a0:58:
89:54:45:b1:dc:94:2a:6d:b7:69:9a:5b:b0:06:ee:
f6:94:ad:8e:6c:84:12:39:7f:07:19:fd:97:d2:7e:
fd:dd:81:fd:61:b1:28:1d:b3:d9:47:54:5b:74:83:
49:d9:44:47:95:b6:e3:eb:f4:e4:54:f9:68:63:9b:
94:85:c3:e1:29:d7:2d:1c:45:8d:55:34:95:c6:b5:
6d:40:48:ca:4d:8f:16:be:80:91:37:27:5b:15:ec:
76:ca:0e:54:94:70:b9:fd:68:07:c3:9a:7c:e4:04:
60:4e:e2:b1:db:16:81:5f:2c:77:24:73:89:34:84:
20:27:24:ee:8e:d2:e4:34:05:98:a7:ae:b6:6f:27:
c6:85:c4:2c:c9:76:12:99:e8:5e:93:7b:14:59:4e:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AC:B9:F5:75:28:8F:07:9E:2B:2C:C1:4B:F8:93:BF:5E:C1:78:32
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131342e302f32342d3234203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b6:47:46:5a:b8:25:d4:b9:45:f1:c2:f1:26:c8:0b:dc:2c:
d0:ca:7d:fc:92:74:66:68:62:7c:f9:d6:ed:d4:a9:77:52:5b:
b0:02:d4:ba:4e:3c:30:8b:32:3f:fe:51:01:24:90:64:2e:25:
95:35:d4:32:65:2c:93:77:47:2b:86:46:75:79:16:df:cd:1f:
56:69:47:0f:1b:1c:28:f6:ab:2d:d8:43:8f:8b:d4:ed:54:07:
f9:61:d5:47:74:c2:42:9f:49:ad:df:67:ca:bd:29:c6:69:8a:
57:74:ed:43:78:c8:07:fa:89:b8:f6:e7:26:c2:4d:29:c1:97:
04:3a:22:1b:9d:5d:ef:7a:5f:39:a9:9d:d1:7f:cc:ef:71:bc:
9c:23:80:8b:26:33:0f:a7:ef:74:7f:11:0e:e8:9e:62:37:0d:
19:d0:d1:d2:c2:58:24:23:9d:d6:c3:da:10:87:8f:fb:ec:0a:
4c:75:56:f0:8b:33:c3:b7:5e:d8:77:9c:a1:cb:62:c1:26:c3:
fd:7d:4b:12:26:e7:31:75:a5:89:66:2b:19:f8:b7:9d:0c:1f:
52:d9:c5:96:12:48:8e:7a:19:31:5f:a4:01:79:34:f3:1d:bc:
e9:8f:a5:c6:31:ca:26:c0:f4:2d:4c:ed:f9:cc:74:69:50:fc:
a0:d4:82:79
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUf3hkMXRCwgNGl4YF4ZRyO21rZo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdE
NEQyMDVBNzAeFw0yNjAzMTgxNjQxMDNaFw0yNzAzMTcxNjQ2MDNaMDMxMTAvBgNV
BAMTKDQzQUNCOUY1NzUyODhGMDc5RTJCMkNDMTRCRjg5M0JGNUVDMTc4MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAj8x+yaN9Nh0PsfH7YvF0mQbD
Osi2NWxk+Ocq3GC10Rn9Il92pp/+CwnACw3xkxQ+N8/8HDOHeuWIEj4aW8uTIs9D
Xlbm2DcTZJBjz16GPVaL2snOY4tqd25R/U5yua52mFWZLaugWIlURbHclCptt2ma
W7AG7vaUrY5shBI5fwcZ/ZfSfv3dgf1hsSgds9lHVFt0g0nZREeVtuPr9ORU+Whj
m5SFw+Ep1y0cRY1VNJXGtW1ASMpNjxa+gJE3J1sV7HbKDlSUcLn9aAfDmnzkBGBO
4rHbFoFfLHckc4k0hCAnJO6O0uQ0BZinrrZvJ8aFxCzJdhKZ6F6TexRZTiPzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQ6y59XUojweeKyzBS/iTv17BeDIwHwYDVR0j
BBgwFoAUpZWevU31Hf6P2WKZzs0oR9TSBacwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45
LzAvQTU5NTlFQkQ0REY1MURGRThGRDk2Mjk5Q0VDRDI4NDdENEQyMDVBNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BNTk1OUVCRDRERjUxREZFOEZE
OTYyOTlDRUNEMjg0N0Q0RDIwNUE3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9R
SlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45LzAvMzEz
MzM4MmUzMTM4MzYyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM4MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq6cjANBgkqhkiG9w0BAQsFAAOCAQEADLZHRlq4
JdS5RfHC8SbIC9ws0Mp9/JJ0ZmhifPnW7dSpd1JbsALUuk48MIsyP/5RASSQZC4l
lTXUMmUsk3dHK4ZGdXkW380fVmlHDxscKParLdhDj4vU7VQH+WHVR3TCQp9Jrd9n
yr0pxmmKV3TtQ3jIB/qJuPbnJsJNKcGXBDoiG51d73pfOamd0X/M73G8nCOAiyYz
D6fvdH8RDuieYjcNGdDR0sJYJCOd1sPaEIeP++wKTHVW8Iszw7de2HecoctiwSbD
/X1LEibnMXWliWYrGfi3nQwfUtnFlhJIjnoZMV+kAXk08x286Y+lxjHKJsD0LUzt
+cx0aVD8oNSCeQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:23:54 2026 by rpki-client