Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
File: 3138362e3230392e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: zM9/Zx7fIJP3l4BumnR8sOKDVPoROophJg5KgcvkJ6s=
Subject key identifier: C3:B6:0F:2B:2C:3E:39:04:E5:20:FD:FC:9A:FC:E4:51:55:FE:11:11
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 55D83ED2C1469ECBFF002774F88BDB37CCAF0808
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:26 +0000
ROA not before: Wed 28 Jan 2026 11:29:26 +0000
ROA not after: Wed 27 Jan 2027 11:34:26 +0000
asID: 53153
IP address blocks: 186.209.98.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d8:3e:d2:c1:46:9e:cb:ff:00:27:74:f8:8b:db:37:cc:af:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:26 2026 GMT
Not After : Jan 27 11:34:26 2027 GMT
Subject: CN=C3B60F2B2C3E3904E520FDFC9AFCE45155FE1111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:c5:4e:d2:e0:c7:33:41:eb:a5:da:a3:ce:
7a:56:ce:86:8b:56:a7:28:c9:e4:aa:d3:94:cc:49:
34:81:87:06:28:dc:8e:c5:c8:22:8c:3a:1a:04:88:
c1:3a:13:fa:13:bb:6f:77:07:f5:7e:0b:64:b6:81:
02:9e:6f:5d:aa:54:f3:a6:c8:dd:eb:90:c0:f2:39:
4d:a1:74:cf:f7:e9:ce:6c:e6:cc:77:e8:21:ca:26:
ac:d3:d3:40:ce:58:b9:ef:43:27:f9:9f:8e:99:25:
9f:fe:07:11:a6:31:cc:27:e1:39:ec:88:f4:af:a3:
84:b9:b2:a3:66:11:7a:d5:6f:15:f0:13:91:42:85:
96:63:eb:11:83:21:3b:41:50:1c:ad:a6:ca:d6:00:
98:69:bd:53:84:b1:d3:c7:44:8b:eb:7a:78:3e:1c:
0d:54:d5:55:26:14:8f:a2:a4:d2:03:8c:a6:4e:6f:
c5:1c:a4:b2:aa:91:24:a7:3e:b4:47:c2:8f:b9:a0:
74:05:68:21:d5:a3:4c:56:5d:6b:d8:e4:60:99:ab:
e7:e9:51:8d:b8:cd:2d:6d:cc:dd:5e:19:20:30:b9:
28:1b:32:06:b3:4c:3f:b6:1e:76:a3:c1:5b:8e:99:
7b:97:7c:b6:5f:63:9b:ec:25:22:bd:a1:99:2b:4f:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:0F:2B:2C:3E:39:04:E5:20:FD:FC:9A:FC:E4:51:55:FE:11:11
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.209.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:33:b9:77:ea:c5:46:29:f5:37:c3:0c:c9:38:30:69:8d:20:
0d:52:0b:4d:8b:00:9a:84:17:96:1d:87:e8:5d:ce:5f:6f:63:
3f:a0:48:ac:f6:e4:e9:5d:40:1b:1b:d2:8a:d9:e3:5e:ff:ca:
60:19:40:a0:5a:c3:9d:d8:49:3f:3e:7c:f7:07:61:02:ed:ee:
3f:b0:cb:f0:f7:18:77:84:b3:52:7c:cd:04:1e:90:9c:6b:1c:
72:7b:74:e8:16:a3:7c:8a:d2:08:a7:a3:29:3c:8f:1a:57:8c:
66:d8:50:99:68:38:b1:e9:9b:1b:ae:8f:14:df:bd:38:55:98:
be:e0:0b:98:9c:73:87:49:23:d7:0d:e3:15:79:be:b0:ed:32:
cc:74:e1:58:1d:13:39:9d:25:d3:3c:04:18:91:b8:86:48:04:
7f:30:52:6d:b6:ff:b4:01:5e:5e:3b:2c:f9:62:fe:e1:80:e2:
6e:79:36:f1:37:ec:ee:8a:8d:46:c2:41:43:da:f5:36:6a:01:
07:22:81:39:65:46:d7:9e:1f:50:fe:0d:66:12:29:62:c0:46:
1a:a4:33:4a:41:82:9f:c0:d4:bc:95:4b:52:ff:0f:60:34:ca:
22:3c:d1:42:dc:87:a4:6c:a0:ff:8b:76:57:f2:2a:cb:25:7d:
29:c8:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:01:29 2026 by rpki-client