Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3130372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: n1B+FQ5FZAer9BOIiYyNszYVVJFvDYyG6GqrCob1Pbc=
Subject key identifier: E2:98:60:57:B3:52:3F:AC:33:2B:98:28:FD:0E:90:37:D8:76:63:DF
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 2B3F066F13234186ACDA801F722255F7937AF1F5
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:28 +0000
ROA not before: Wed 28 Jan 2026 11:29:28 +0000
ROA not after: Wed 27 Jan 2027 11:34:28 +0000
asID: 53153
IP address blocks: 187.61.107.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:3f:06:6f:13:23:41:86:ac:da:80:1f:72:22:55:f7:93:7a:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:28 2026 GMT
Not After : Jan 27 11:34:28 2027 GMT
Subject: CN=E2986057B3523FAC332B9828FD0E9037D87663DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:cc:36:9b:f9:e4:86:9d:41:37:82:46:04:
56:0c:8e:83:15:3a:aa:d4:77:68:69:6c:77:d2:51:
6b:d4:9a:dc:9d:3a:25:62:f0:c4:08:67:36:43:59:
01:a5:e1:6e:43:40:31:2a:e6:7a:a9:fe:b8:6a:5d:
3e:c5:5a:be:66:fc:3a:79:c0:77:29:a5:21:8c:66:
e9:4b:e1:a1:7c:b5:fd:56:66:02:b5:9c:9f:95:55:
41:01:ea:91:92:95:72:42:5a:a0:a2:a1:fc:38:40:
0f:de:2a:20:cb:19:fd:f8:07:64:40:c0:a6:a5:d3:
ca:67:9a:26:dd:42:00:a9:2d:5e:b9:d8:74:36:d5:
e7:92:ed:0d:e5:26:36:a3:5a:38:1d:ad:99:65:1c:
01:35:72:c9:46:e8:0b:c6:f0:74:af:a4:21:10:4d:
d7:f3:f7:10:9f:68:90:39:39:d2:26:f1:10:3f:4e:
8f:37:22:d6:bc:34:02:46:75:5b:9b:4b:f7:9f:2a:
e1:c4:3e:d8:c7:ba:20:3e:49:16:a0:51:67:f5:3c:
60:fb:af:d2:a3:ab:69:85:93:ec:de:c2:8d:fc:8b:
49:0e:2f:8f:cf:7c:68:9e:33:93:95:22:19:3d:60:
9f:41:32:8a:30:b4:b1:f9:1f:21:cb:b6:79:85:01:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:60:57:B3:52:3F:AC:33:2B:98:28:FD:0E:90:37:D8:76:63:DF
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.107.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:b1:66:8b:57:c3:fc:50:4f:a6:a0:7b:3f:c2:af:96:51:5e:
b1:7f:24:c8:11:76:69:79:73:f2:a1:7f:2a:25:95:d4:60:65:
b6:49:3f:33:6a:ac:f9:5c:05:98:33:3c:5b:c3:3e:bf:9a:90:
b0:f2:8f:12:bd:bc:71:b0:03:7d:17:47:38:14:e2:15:07:16:
3c:20:a3:3d:02:e5:d0:6c:dd:16:f6:96:75:51:66:34:30:a6:
fd:db:ef:e2:17:c1:93:ce:1d:99:b9:e3:fa:e3:4b:bf:c2:88:
ed:1f:fe:d5:7f:9b:95:a4:08:6a:ec:5f:ba:43:6e:45:e2:31:
5e:ea:f5:0f:e6:67:2c:80:ab:2a:2a:7e:a2:48:1f:fc:f1:75:
61:b3:5a:df:23:6f:64:c1:ae:b8:82:e9:df:eb:1f:50:e0:80:
09:3d:54:f3:df:cd:ad:ce:7a:b2:67:c5:62:70:46:a3:be:1e:
e9:21:a1:fc:07:bf:08:91:0c:90:18:79:7a:5b:9d:3a:4b:fe:
76:76:5f:39:50:26:f1:77:81:68:70:5c:20:61:6b:80:28:ea:
e5:56:05:1d:00:a1:a9:f5:4b:1f:cd:e2:23:92:96:4d:53:16:
b8:fb:86:95:d6:81:3b:f2:c0:44:02:75:0b:01:d9:59:af:55:
fe:5a:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:25 2026 by rpki-client