Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e39382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: 8neF4IFzBUZKA86xau69BVxnt9aV5mHLy5i/75insio=
Subject key identifier: 6F:AB:3D:D0:A8:62:B4:6B:C5:69:70:CD:F5:78:B9:12:8A:89:67:25
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 4BAA754F7FD3B2E67F4EBE4B8D49093AE4CE7E5B
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:26 +0000
ROA not before: Wed 28 Jan 2026 11:29:26 +0000
ROA not after: Wed 27 Jan 2027 11:34:26 +0000
asID: 53153
IP address blocks: 187.61.98.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:aa:75:4f:7f:d3:b2:e6:7f:4e:be:4b:8d:49:09:3a:e4:ce:7e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:26 2026 GMT
Not After : Jan 27 11:34:26 2027 GMT
Subject: CN=6FAB3DD0A862B46BC56970CDF578B9128A896725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:31:36:ea:68:97:7f:fa:c1:77:51:68:84:
73:ef:96:c2:7d:23:16:67:a8:89:c1:4a:e0:8e:9d:
23:b1:22:c1:e7:07:94:12:3f:54:f3:f2:3b:ec:ee:
80:e6:df:fc:b4:16:9f:7f:98:88:56:04:41:7a:d7:
c9:f8:e1:eb:e5:3c:30:98:db:bc:88:75:1b:4c:b7:
fa:b6:43:03:2c:86:57:4e:b8:d0:71:02:a1:98:fd:
53:23:3c:d9:a7:e3:e1:80:30:79:84:b6:24:db:d7:
a8:c3:65:6e:06:5b:cb:8c:84:4a:c1:27:73:d6:98:
42:70:a8:a9:00:34:32:d1:42:80:b6:f9:25:fe:7e:
58:1b:28:99:3c:9e:e2:00:16:8c:ae:70:56:25:f2:
b8:68:f9:da:a4:76:56:08:58:68:c8:97:52:94:87:
c7:8c:c8:bc:22:41:df:65:b7:7d:03:0a:d1:5a:43:
8c:7d:2c:57:e1:10:ab:6f:70:46:14:0b:50:3f:67:
3d:cb:56:0a:52:b7:e5:1b:38:b6:a7:49:5f:9b:d0:
48:4d:c3:09:c8:c2:d5:56:51:f7:99:02:b0:2c:e1:
37:fa:71:b3:89:04:e9:8b:93:25:b4:06:11:fe:e4:
c5:ec:ef:5b:fd:c1:dc:a1:ed:0c:0d:5a:f8:86:5a:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:3D:D0:A8:62:B4:6B:C5:69:70:CD:F5:78:B9:12:8A:89:67:25
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fd:a1:67:3e:0d:50:fa:35:97:83:59:ed:3b:cd:d8:a6:ac:
db:a6:ee:87:07:7a:cc:58:8c:98:29:3e:95:b4:ff:a5:cc:57:
fd:71:50:33:f0:36:a1:0f:65:eb:a0:bb:8b:c7:ce:4e:4c:85:
ee:1f:72:3c:f2:b1:d2:e6:77:0b:06:26:7b:72:51:0b:2d:1a:
fb:f0:14:82:7c:f8:41:a4:d5:cd:1f:d1:e3:9d:11:85:7c:b1:
11:08:63:84:75:38:7f:62:b9:12:cd:09:ba:93:57:7f:5a:ea:
45:3b:48:95:49:59:c9:ea:1f:74:b3:e0:86:ca:8e:3b:1c:18:
d6:da:4c:8d:52:e5:f3:7c:16:cb:c7:db:31:65:68:ad:5d:b8:
20:74:40:97:d3:a4:fa:ef:7b:9e:a8:cc:62:fc:eb:df:b1:87:
cd:99:2c:f7:b9:07:5b:37:dd:be:bd:c7:eb:2e:95:c1:e0:85:
41:c2:ac:3f:ec:2a:35:33:a4:7d:ef:98:45:05:dc:95:0c:47:
48:a1:60:60:35:ee:fd:3f:72:51:11:70:5e:4a:e1:7e:4e:f1:
3a:50:72:aa:f3:ea:63:f2:cd:33:5e:cb:0f:40:73:db:68:d9:
3f:2f:27:2b:4d:c0:62:43:39:bd:6b:2e:1b:91:e1:f3:78:df:
5e:7d:21:11
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUS6p1T3/TsuZ/Tr5LjUkJOuTOflswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NTI5RkQzMjY0NzdBNUZFQjBBNjdBRkMxQzkzRjhG
ODNBODcwNzAeFw0yNjAxMjgxMTI5MjZaFw0yNzAxMjcxMTM0MjZaMDMxMTAvBgNV
BAMTKDZGQUIzREQwQTg2MkI0NkJDNTY5NzBDREY1NzhCOTEyOEE4OTY3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypTE26miXf/rBd1FohHPvlsJ9
IxZnqInBSuCOnSOxIsHnB5QSP1Tz8jvs7oDm3/y0Fp9/mIhWBEF618n44evlPDCY
27yIdRtMt/q2QwMshldOuNBxAqGY/VMjPNmn4+GAMHmEtiTb16jDZW4GW8uMhErB
J3PWmEJwqKkANDLRQoC2+SX+flgbKJk8nuIAFoyucFYl8rho+dqkdlYIWGjIl1KU
h8eMyLwiQd9lt30DCtFaQ4x9LFfhEKtvcEYUC1A/Zz3LVgpSt+UbOLanSV+b0EhN
wwnIwtVWUfeZArAs4Tf6cbOJBOmLkyW0BhH+5MXs71v9wdyh7QwNWviGWka5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUb6s90KhitGvFaXDN9Xi5EoqJZyUwHwYDVR0j
BBgwFoAUCIUp/TJkd6X+sKZ6/ByT+Pg6hwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC8wODg1MjlGRDMyNjQ3N0E1RkVCMEE2N0FGQzFDOTNGOEY4M0E4NzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4ODUyOUZEMzI2NDc3QTVG
RUIwQTY3QUZDMUM5M0Y4RjgzQTg3MDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMx
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALs9YjANBgkqhkiG9w0BAQsFAAOCAQEArv2hZz4NUPo1
l4NZ7TvN2Kas26buhwd6zFiMmCk+lbT/pcxX/XFQM/A2oQ9l66C7i8fOTkyF7h9y
PPKx0uZ3CwYme3JRCy0a+/AUgnz4QaTVzR/R450RhXyxEQhjhHU4f2K5Es0JupNX
f1rqRTtIlUlZyeofdLPghsqOOxwY1tpMjVLl83wWy8fbMWVorV24IHRAl9Ok+u97
nqjMYvzr37GHzZks97kHWzfdvr3H6y6VweCFQcKsP+wqNTOkfe+YRQXclQxHSKFg
YDXu/T9yURFwXkrhfk7xOlByqvPqY/LNM17LD0Bz22jZPy8nK03AYkM5vWsuG5Hh
83jfXn0hEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:21 2026 by rpki-client