Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131352e302f32342d3234203d3e20323633383636.roa
File: 3133382e3138362e3131352e302f32342d3234203d3e20323633383636.roa (raw, json)
Hash identifier: xtQSf40p+zf1diiduZ5bo0wZ54IaezfqDuZKWWzpYk0=
Subject key identifier: BD:70:52:BA:77:3A:CF:D6:7F:0D:45:70:07:CC:D9:F2:10:A6:9F:41
Certificate issuer: /CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Certificate serial: 7DA434DDB617655D0F9253DFFBF6BFC8421081B9
Authority key identifier: A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131352e302f32342d3234203d3e20323633383636.roa
Signing time: Wed 18 Mar 2026 16:45:33 +0000
ROA not before: Wed 18 Mar 2026 16:40:33 +0000
ROA not after: Wed 17 Mar 2027 16:45:33 +0000
asID: 263866
IP address blocks: 138.186.115.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a4:34:dd:b6:17:65:5d:0f:92:53:df:fb:f6:bf:c8:42:10:81:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5959EBD4DF51DFE8FD96299CECD2847D4D205A7
Validity
Not Before: Mar 18 16:40:33 2026 GMT
Not After : Mar 17 16:45:33 2027 GMT
Subject: CN=BD7052BA773ACFD67F0D457007CCD9F210A69F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:3f:b1:5a:18:fc:00:8d:ef:08:40:be:c6:
e1:0e:59:0e:98:ff:73:25:01:69:68:4d:7e:e6:11:
ea:da:52:b6:27:c0:3d:9e:eb:91:09:fc:99:10:71:
39:b1:d7:b0:10:e4:54:97:9d:07:6d:96:b7:9e:84:
65:a4:0d:64:cf:56:6e:db:84:2c:e9:56:3a:66:2d:
0d:db:7c:1f:fe:b8:69:07:15:70:db:01:5c:2d:f2:
0e:be:c4:bc:5d:ad:cb:c7:7f:98:61:06:04:13:9e:
cf:3d:a0:e7:ad:98:e8:ff:8f:28:75:8e:c0:40:33:
1c:5b:4d:8e:0e:44:fe:26:46:8f:f9:4f:e7:91:c6:
c6:49:5d:c2:52:1d:26:52:d0:03:52:8d:6c:6d:7f:
2f:c4:c6:4d:33:10:de:ff:22:a0:0f:8b:9c:d3:de:
a4:7e:0f:95:55:58:33:d5:94:48:a1:aa:c3:c5:02:
0c:c4:e2:09:5f:f8:16:ec:88:ea:42:83:64:00:96:
81:e8:7b:2a:8a:5f:c0:12:8d:43:e0:94:25:cd:07:
cd:51:9b:1d:8a:2d:85:60:97:69:21:52:cd:3c:c9:
85:0e:66:4e:e6:43:c6:e5:0f:18:45:5a:e2:72:e7:
71:6d:50:4a:1e:f5:37:10:fb:5c:6b:da:2f:ed:60:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:52:BA:77:3A:CF:D6:7F:0D:45:70:07:CC:D9:F2:10:A6:9F:41
X509v3 Authority Key Identifier:
keyid:A5:95:9E:BD:4D:F5:1D:FE:8F:D9:62:99:CE:CD:28:47:D4:D2:05:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5959EBD4DF51DFE8FD96299CECD2847D4D205A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/3133382e3138362e3131352e302f32342d3234203d3e20323633383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.115.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1a:ea:ad:4e:71:7c:03:6f:bf:c3:4e:3a:2c:f7:ce:ab:15:
af:f4:fa:18:eb:14:ed:2a:ea:f5:b8:bf:66:bf:62:48:fc:36:
ee:c8:4b:91:92:b1:2c:0e:35:1c:fc:09:cd:6d:c4:a5:17:a2:
08:ee:46:47:f2:43:82:9a:9b:5f:48:ea:7d:8c:6b:08:a9:cd:
7a:a0:f1:7a:2f:e0:f7:4d:e0:00:f1:70:a3:79:a0:ac:d5:ed:
16:f4:2c:8b:71:27:a9:5e:72:ee:2b:70:4d:b4:f8:c1:c5:39:
02:8e:9b:c4:3e:55:68:d0:7b:84:c4:47:70:a7:d0:c7:63:9f:
90:40:08:fb:5b:1b:73:b3:1f:76:93:dd:cd:f2:37:8b:12:aa:
31:54:24:b4:24:e4:f1:23:64:65:6f:fc:9d:4e:5c:51:0c:be:
53:50:ef:a9:68:e8:37:27:5c:69:72:5b:83:a4:15:3a:db:aa:
39:04:f4:cc:bd:a4:f5:be:4e:e1:69:e1:58:8d:54:91:f2:35:
38:55:3a:4f:72:f9:1d:29:d4:fe:21:db:40:47:f7:63:f8:5c:
0d:d4:3b:79:7f:4f:d1:ee:d9:87:26:2f:37:61:f1:09:58:50:
b0:7a:cd:a5:de:d9:8e:7d:82:85:86:17:ef:b4:dd:98:38:c5:
4f:bb:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:16:04 2026 by rpki-client