Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa
File: 3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 5wLCg8gMXJskZG0jzFOV3/Pc360p8FNhcRCT5ZLX50Q=
Subject key identifier: 7D:A3:C0:6F:E8:F5:0B:5D:9D:D3:85:F1:0A:10:4D:D2:EB:0B:78:EC
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 157B63373EE513598A161DB0D23F1046E5D39BA9
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:29 +0000
ROA not before: Wed 28 Jan 2026 11:29:29 +0000
ROA not after: Wed 27 Jan 2027 11:34:29 +0000
asID: 53153
IP address blocks: 138.204.223.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:7b:63:37:3e:e5:13:59:8a:16:1d:b0:d2:3f:10:46:e5:d3:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:29 2026 GMT
Not After : Jan 27 11:34:29 2027 GMT
Subject: CN=7DA3C06FE8F50B5D9DD385F10A104DD2EB0B78EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9f:5a:ac:24:10:56:21:8c:20:fd:8f:89:26:
c5:14:85:3d:c1:ee:f6:cb:dd:7a:5a:78:39:87:1b:
95:5b:80:c2:66:69:d1:e0:e5:13:4d:d4:24:a3:95:
c5:c5:08:79:0e:41:e2:7f:3b:16:a8:40:1f:5f:90:
9a:bc:97:7e:5f:15:5a:d6:57:4e:8a:ce:ff:4f:de:
e7:aa:4a:71:4e:90:79:0d:d6:91:b2:95:cd:d1:70:
2b:ff:d7:92:ae:1f:4f:ab:2d:59:51:17:d4:e1:0f:
eb:9c:aa:75:d9:37:df:7f:fe:4f:15:09:e3:d4:22:
52:cf:63:39:a4:7c:2e:9c:94:3a:16:3b:58:3e:70:
24:46:8c:95:26:98:99:11:fe:14:fb:33:db:52:ca:
8b:35:29:5e:e2:88:26:14:ce:5b:74:cd:f6:ff:0f:
6a:51:71:c1:36:0d:32:98:39:38:53:ce:6f:29:bf:
c5:f3:fe:da:f2:f8:d1:6e:f7:5a:53:64:f5:9a:d5:
1e:8a:67:4e:7e:aa:6c:12:16:e1:2a:04:3b:ae:26:
ee:a1:10:29:7e:e9:9e:9d:fd:37:ed:e8:3c:dc:f1:
5c:84:ab:39:06:b0:00:bc:76:0e:bb:e1:5e:75:a8:
cf:6b:a7:a3:7f:2b:80:03:f9:c9:8f:00:73:6d:0a:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:C0:6F:E8:F5:0B:5D:9D:D3:85:F1:0A:10:4D:D2:EB:0B:78:EC
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232332e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:24:9b:b6:c0:b3:69:21:36:77:25:65:33:46:00:7a:8b:5b:
a3:3a:3c:72:04:33:88:3b:e8:44:0c:e7:b6:6d:ff:4d:13:ad:
ba:0a:23:5c:8b:41:15:f7:20:d0:be:fb:6a:72:65:19:7b:d9:
96:14:19:de:3c:6e:e7:78:0f:cd:82:39:91:4e:2d:20:c0:bd:
f5:53:e8:c0:c4:3f:5c:e8:0d:3a:55:1a:e1:6c:c5:8f:c0:e6:
46:a5:8c:3e:a0:94:ba:e2:b8:d2:19:ce:a2:d9:49:ff:ce:c1:
de:96:17:e9:60:b3:72:36:9f:8f:79:d6:4b:30:61:89:c4:07:
52:ab:27:05:4f:21:03:e4:41:80:13:de:89:75:ce:fb:a2:25:
a9:e1:1a:bd:71:e8:01:43:dc:81:8c:c3:e0:1c:77:3c:e4:b1:
06:47:65:b7:a4:a9:54:d3:ea:17:9e:47:ac:b5:60:68:38:64:
ee:bb:0b:76:3a:67:c6:9f:b2:27:71:10:e6:6f:81:e4:4a:64:
81:c2:cd:21:2d:8a:04:a8:48:28:dc:bf:8d:80:75:24:10:ac:
f7:e0:bb:99:f5:2a:47:ca:6c:13:33:b1:1c:f4:89:83:68:9c:
d1:a2:e3:5c:90:72:2a:39:c2:63:c8:61:92:78:b9:4f:5e:41:
d6:de:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:18 2026 by rpki-client