Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: EipzWMVZJ9R/2AQk2CQveXKJhpPF6xfL+o7Kp+qjBCg=
Subject key identifier: 2D:8C:86:6A:88:59:04:EA:2B:55:5A:E0:DD:AD:71:43:3A:3F:C1:88
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 6AE173786C45659D51CB13E5098577FE5B723BCA
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:27 +0000
ROA not before: Wed 28 Jan 2026 11:29:27 +0000
ROA not after: Wed 27 Jan 2027 11:34:27 +0000
asID: 53153
IP address blocks: 186.209.103.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e1:73:78:6c:45:65:9d:51:cb:13:e5:09:85:77:fe:5b:72:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:27 2026 GMT
Not After : Jan 27 11:34:27 2027 GMT
Subject: CN=2D8C866A885904EA2B555AE0DDAD71433A3FC188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:38:0e:ec:37:1b:5b:eb:24:0f:90:ce:ec:
30:eb:56:cf:7a:48:8e:6c:a4:64:64:54:9f:88:78:
ca:4b:e4:00:9b:fd:32:53:9b:e5:f2:b5:1a:65:bf:
17:d4:09:fa:95:43:24:bb:15:c1:a5:b6:d4:81:c8:
6c:78:0d:e0:7b:20:79:03:65:01:3d:c5:01:b7:28:
01:bc:b4:10:76:27:ae:1a:14:85:c8:7f:21:34:49:
79:08:d0:31:4c:f8:7c:1b:ee:4c:d5:a2:e6:5a:9b:
74:53:6e:69:d0:53:de:19:b1:3a:d3:84:4e:a0:b1:
f9:0e:5e:aa:1e:18:c3:99:55:16:f2:a3:2c:68:63:
ab:1d:07:7c:0f:c2:40:19:52:2b:3d:01:09:5c:34:
19:68:cc:27:34:03:02:32:7e:99:e7:94:fb:28:01:
2e:5e:4a:77:af:2a:50:82:65:19:5b:21:95:87:60:
b8:72:40:76:6c:48:82:58:29:5b:52:da:f3:3c:c9:
72:70:28:9e:b6:25:c0:3d:c1:5a:75:97:f8:99:86:
48:fc:78:b9:9e:6e:35:b1:a4:9e:f5:cc:0e:7d:5e:
83:b4:6e:c0:7c:20:21:28:bd:f1:59:2f:bf:6e:e3:
52:9f:c5:b3:c9:72:b4:94:f5:19:b7:d2:cc:ef:88:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:86:6A:88:59:04:EA:2B:55:5A:E0:DD:AD:71:43:3A:3F:C1:88
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.103.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ee:be:3c:1e:71:6e:7b:bb:ff:9e:a8:92:f6:6d:c4:e6:e0:
3a:e9:bd:39:69:dc:6d:21:79:42:12:ee:50:d5:fd:8b:eb:da:
cb:e2:2a:95:9a:20:9e:dd:51:49:47:41:e3:1d:32:04:95:6f:
8e:2e:5e:68:f3:86:46:b0:a5:c1:36:a1:fb:f0:25:87:d2:13:
6d:68:17:48:0f:57:58:ad:f5:29:83:cb:89:bd:4b:81:de:3d:
12:51:55:eb:3a:2b:13:15:fa:18:90:0b:d7:3c:7f:ee:59:83:
2e:b7:02:32:24:55:46:93:51:90:6d:ce:5c:de:a6:91:ae:e2:
ef:6f:59:71:1a:25:8b:9f:17:46:d1:28:89:80:a2:71:35:39:
f0:1d:60:80:1a:57:e6:77:8f:59:a0:67:c1:ed:45:96:33:70:
84:54:8e:43:03:ad:e8:e2:44:f9:3f:99:75:cf:e6:93:c2:dc:
0d:9e:60:ee:8f:b2:47:65:0e:db:da:25:f0:3d:0c:5f:f7:8f:
3a:51:3f:49:aa:aa:b9:1f:77:2d:85:c6:18:84:14:ed:8d:d6:
87:2b:67:80:aa:7f:b7:6a:74:44:e9:10:09:10:6d:d1:7e:75:
ef:16:31:68:dc:fb:cf:d0:30:e7:64:25:c4:2e:71:9a:9a:a0:
4d:f1:cb:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUauFzeGxFZZ1RyxPlCYV3/ltyO8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NTI5RkQzMjY0NzdBNUZFQjBBNjdBRkMxQzkzRjhG
ODNBODcwNzAeFw0yNjAxMjgxMTI5MjdaFw0yNzAxMjcxMTM0MjdaMDMxMTAvBgNV
BAMTKDJEOEM4NjZBODg1OTA0RUEyQjU1NUFFMEREQUQ3MTQzM0EzRkMxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8KjgO7DcbW+skD5DO7DDrVs96
SI5spGRkVJ+IeMpL5ACb/TJTm+XytRplvxfUCfqVQyS7FcGlttSByGx4DeB7IHkD
ZQE9xQG3KAG8tBB2J64aFIXIfyE0SXkI0DFM+Hwb7kzVouZam3RTbmnQU94ZsTrT
hE6gsfkOXqoeGMOZVRbyoyxoY6sdB3wPwkAZUis9AQlcNBlozCc0AwIyfpnnlPso
AS5eSnevKlCCZRlbIZWHYLhyQHZsSIJYKVtS2vM8yXJwKJ62JcA9wVp1l/iZhkj8
eLmebjWxpJ71zA59XoO0bsB8ICEovfFZL79u41KfxbPJcrSU9Rm30szviLlFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULYyGaohZBOorVVrg3a1xQzo/wYgwHwYDVR0j
BBgwFoAUCIUp/TJkd6X+sKZ6/ByT+Pg6hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC8wODg1MjlGRDMyNjQ3N0E1RkVCMEE2N0FGQzFDOTNGOEY4M0E4NzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4ODUyOUZEMzI2NDc3QTVG
RUIwQTY3QUZDMUM5M0Y4RjgzQTg3MDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60WcwDQYJKoZIhvcNAQELBQADggEBAEjuvjwe
cW57u/+eqJL2bcTm4DrpvTlp3G0heUIS7lDV/Yvr2sviKpWaIJ7dUUlHQeMdMgSV
b44uXmjzhkawpcE2ofvwJYfSE21oF0gPV1it9SmDy4m9S4HePRJRVes6KxMV+hiQ
C9c8f+5Zgy63AjIkVUaTUZBtzlzeppGu4u9vWXEaJYufF0bRKImAonE1OfAdYIAa
V+Z3j1mgZ8HtRZYzcIRUjkMDrejiRPk/mXXP5pPC3A2eYO6PskdlDtvaJfA9DF/3
jzpRP0mqqrkfdy2FxhiEFO2N1ocrZ4Cqf7dqdETpEAkQbdF+de8WMWjc+8/QMOdk
JcQucZqaoE3xy38=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:01:30 2026 by rpki-client