Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: YYLiEwWrSdTiSHY8xfEtQzx9sEKZzlhzzpNsrHpE6KA=
Subject key identifier: 8D:B0:61:55:D0:15:E1:5E:AF:DD:94:F7:D0:E7:13:B1:5A:82:56:20
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 34C5240B6CE84CE3E225AE667FCFCED095B6AB0F
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:28 +0000
ROA not before: Wed 28 Jan 2026 11:29:28 +0000
ROA not after: Wed 27 Jan 2027 11:34:28 +0000
asID: 53153
IP address blocks: 186.209.108.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c5:24:0b:6c:e8:4c:e3:e2:25:ae:66:7f:cf:ce:d0:95:b6:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:28 2026 GMT
Not After : Jan 27 11:34:28 2027 GMT
Subject: CN=8DB06155D015E15EAFDD94F7D0E713B15A825620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:0c:82:1c:52:95:26:68:63:6d:79:4f:36:
16:5d:24:bc:87:2c:07:1a:b8:5e:af:21:ed:c4:b6:
72:29:4c:c9:0b:d3:c4:3f:4e:8f:4d:f8:32:da:3c:
8a:43:3c:a2:aa:70:ea:2a:7a:86:4e:7c:99:0a:e8:
17:d3:93:44:e8:06:1f:b5:1b:80:3e:bf:a2:d2:86:
7f:d2:1a:0f:9f:d1:51:cf:cb:3c:f4:36:b0:d9:a9:
28:f2:f5:eb:ce:53:11:22:d2:6d:27:e7:d6:59:a9:
b5:77:8c:09:1c:1c:c0:b0:20:ad:ac:50:fc:f3:4e:
14:43:35:67:05:c8:14:07:38:46:cc:94:13:45:9b:
42:e5:76:68:a4:a8:da:ce:33:bb:d8:8e:fd:a8:1d:
ec:0e:23:8b:c9:93:fb:ac:3f:e7:b7:ba:5a:30:6a:
15:dd:b4:6a:ee:c8:60:a5:9c:8a:37:2f:63:50:7a:
15:5c:83:aa:e3:37:e2:06:c0:49:ad:9f:34:3f:b0:
ec:a4:0d:5e:a8:9b:18:97:91:32:85:b9:67:85:5d:
85:a7:bb:b6:70:14:b8:84:ef:7d:90:9e:7a:a1:7f:
a9:6b:89:cb:e8:1d:57:5d:50:33:0e:0a:ba:76:59:
04:7e:da:77:2e:08:d7:2e:97:05:29:57:9f:4d:81:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:61:55:D0:15:E1:5E:AF:DD:94:F7:D0:E7:13:B1:5A:82:56:20
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.108.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ff:af:6d:b0:ad:14:36:73:7b:72:e1:12:f0:60:d4:a5:88:
d8:1f:a1:e6:52:7f:96:73:1f:e4:05:09:e6:84:dc:f5:85:c3:
da:ef:57:0d:87:58:d1:6d:ec:99:0a:9d:69:6c:54:f8:85:25:
dc:02:9f:14:b4:9c:4e:76:de:4b:60:fc:4e:d5:a9:57:64:65:
f7:14:45:61:4f:85:c7:bd:eb:9a:2a:a2:87:13:a9:82:4e:46:
6f:13:0f:5e:4e:bf:2b:49:80:67:be:7c:5f:11:03:7e:75:28:
70:5b:ab:ce:79:44:ec:af:df:fa:fa:cb:02:3d:6f:70:4b:d7:
40:f0:90:6e:dd:e1:17:99:0e:18:a3:38:dd:74:b1:aa:1a:55:
0b:66:97:da:84:4a:3d:f0:83:e3:85:3c:ee:49:5d:bc:03:d7:
37:16:a7:91:11:d9:31:53:be:0f:32:64:18:84:57:d7:88:35:
58:7d:ab:ee:58:97:d7:15:32:cc:96:20:88:73:cc:96:94:8c:
aa:7b:8f:ae:31:1f:45:8d:32:ed:2a:67:80:6f:ea:19:d0:aa:
77:fe:ef:bf:00:bd:24:ea:27:ee:26:50:ff:9f:0e:da:13:49:
27:02:47:dd:04:47:e3:e3:a0:1d:54:09:e7:70:9b:19:7b:4e:
86:ed:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:39:06 2026 by rpki-client