Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e3131302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: vy0ER3Q+3BApLc1pguX2Cabb87gwNHKjyqrmKbLu7Y4=
Subject key identifier: 46:66:98:CA:0C:4F:07:B0:58:11:97:EC:67:93:FE:04:19:AA:1B:C4
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 15E10909F5F88360A3AA686472ABE2AA307CBFA1
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:27 +0000
ROA not before: Wed 28 Jan 2026 11:29:27 +0000
ROA not after: Wed 27 Jan 2027 11:34:27 +0000
asID: 53153
IP address blocks: 187.61.110.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e1:09:09:f5:f8:83:60:a3:aa:68:64:72:ab:e2:aa:30:7c:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:27 2026 GMT
Not After : Jan 27 11:34:27 2027 GMT
Subject: CN=466698CA0C4F07B0581197EC6793FE0419AA1BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:a4:c4:5f:16:c5:e5:6a:34:3b:45:47:5c:
a6:6a:09:f0:06:19:f7:89:b8:87:f3:90:8e:fa:14:
e6:92:2a:9d:7a:9d:ea:74:2a:82:fd:9d:76:d5:82:
da:0b:d9:7e:e3:c0:e7:c6:4f:fd:2f:94:17:fe:39:
64:9c:e1:16:e9:ae:7b:09:6b:ad:4a:3f:79:a9:d9:
15:2e:d3:d3:0c:e4:aa:05:07:49:e3:70:a4:75:1f:
9d:8e:fb:5f:da:39:93:37:05:0d:bf:51:ef:f2:86:
b9:a3:50:67:6b:ee:a3:97:f1:8f:7b:5a:c9:1e:aa:
98:af:a0:d5:1b:19:4a:a3:0b:ee:be:7e:67:18:8a:
1e:44:b2:35:06:b6:ae:0b:16:fc:8e:bb:87:49:4c:
f5:b6:d6:c6:db:96:6a:57:b0:b1:4c:c3:db:d8:ce:
b7:42:e3:cf:e8:0a:3e:09:87:da:f4:02:4d:95:bd:
6e:ee:fd:a0:97:17:0f:d5:01:e9:b3:72:72:13:b4:
7a:d7:05:ab:b6:c8:67:d8:fa:30:6a:b6:26:65:b0:
ed:06:58:58:1a:b8:8f:5a:9d:3e:29:9d:c0:65:1d:
d0:e4:96:a9:81:df:b0:e0:8a:a6:95:b5:63:22:a2:
a8:ae:e7:1d:38:d6:a1:17:e7:62:35:3b:d8:de:03:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:66:98:CA:0C:4F:07:B0:58:11:97:EC:67:93:FE:04:19:AA:1B:C4
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131302e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.110.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:3e:d0:14:94:d6:08:ea:9e:f3:37:b4:94:eb:0f:e2:0b:
42:d9:01:ea:8e:70:b6:3c:f9:b1:65:70:9f:4e:fa:28:25:e2:
25:d0:b0:f2:4c:c9:09:08:29:5e:b5:5a:52:e3:6b:2c:6e:66:
28:9d:21:a5:00:2a:39:f1:55:74:5f:2b:00:ef:fb:c0:cb:23:
e1:1d:f4:71:7d:f1:0d:33:83:bf:83:ef:85:db:b5:be:ff:b8:
33:e1:91:b9:57:03:a7:a6:3f:2b:c9:62:9d:1e:83:11:8d:fe:
79:ea:99:b2:7b:33:60:29:15:22:da:a3:5a:b1:d9:f1:9c:cd:
14:f4:e1:46:1a:30:95:45:7b:ef:19:d8:47:61:bc:55:6e:19:
2c:03:ad:57:78:28:74:e1:ef:04:59:92:b0:3a:f7:90:df:d6:
21:f8:61:5b:52:59:8e:50:e0:99:99:3b:eb:ff:06:0a:08:3b:
c8:cc:fa:1e:3c:21:4a:a3:2f:37:d9:8a:c5:64:7e:46:5b:bf:
0c:59:c4:9f:2f:ec:c6:38:d4:f5:70:40:80:e5:3e:b9:c8:f0:
e8:98:12:32:72:f6:40:ac:4c:fd:79:ad:f5:ca:c4:3d:5c:4f:
d3:90:3f:e2:12:8c:11:60:20:6d:58:62:2e:57:d7:f5:33:66:
84:65:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:22 2026 by rpki-client