Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
File: 3138372e36312e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier: P5fgPNYNNHP+zDqcHFunero0Dcnu0b1XWJZXIU3t2aA=
Subject key identifier: 28:2E:F7:A4:BA:E1:09:11:1B:E2:CA:88:4A:16:7D:1A:7D:AF:D5:D7
Certificate issuer: /CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Certificate serial: 54B3A86C2F8037A0AF85FD79275E79A6CC91E3C3
Authority key identifier: 08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
Signing time: Wed 28 Jan 2026 11:34:29 +0000
ROA not before: Wed 28 Jan 2026 11:29:29 +0000
ROA not after: Wed 27 Jan 2027 11:34:29 +0000
asID: 53153
IP address blocks: 187.61.99.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b3:a8:6c:2f:80:37:a0:af:85:fd:79:27:5e:79:a6:cc:91:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088529FD326477A5FEB0A67AFC1C93F8F83A8707
Validity
Not Before: Jan 28 11:29:29 2026 GMT
Not After : Jan 27 11:34:29 2027 GMT
Subject: CN=282EF7A4BAE109111BE2CA884A167D1A7DAFD5D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:f6:e3:79:ba:4f:d1:37:b4:a5:87:52:c8:
b2:34:5d:6e:60:40:35:eb:f1:b9:82:86:45:36:21:
a4:de:84:e7:cf:8d:bf:3a:e7:9e:00:73:ec:bd:60:
40:43:c4:2c:0c:9b:06:1a:19:dd:3d:8a:4e:6f:0b:
3b:8b:75:37:83:69:49:c9:ed:4b:92:f1:a9:d5:a4:
f0:9e:fe:76:ae:67:37:ba:c5:24:96:e8:9c:d8:64:
0c:b2:b2:eb:55:3a:31:02:57:9c:da:5e:12:2b:18:
45:ca:f1:7b:9b:16:ef:3d:68:35:79:d9:7f:00:36:
dc:71:78:85:d0:f0:7e:a5:f2:21:48:fe:1d:d8:2c:
d1:9e:ff:46:3a:61:4e:4e:ed:dd:8a:5a:9a:74:76:
39:13:62:1a:49:a8:c4:0d:ab:82:7b:45:d4:c7:49:
7e:01:52:34:ed:d5:34:70:8f:b4:b1:54:a6:8e:3f:
cd:ab:8b:4f:d3:dd:08:11:45:18:04:8a:ea:76:41:
2f:b5:cc:b2:32:d3:60:d3:0c:33:dd:0c:b3:53:4e:
e4:0e:cb:61:c6:8f:57:c4:e5:90:b9:de:ee:42:ef:
c8:34:a3:bb:be:9e:21:57:a7:40:a9:d4:41:99:9f:
05:80:3b:95:6a:3d:92:53:13:cc:f6:a1:ed:ee:3b:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:F7:A4:BA:E1:09:11:1B:E2:CA:88:4A:16:7D:1A:7D:AF:D5:D7
X509v3 Authority Key Identifier:
keyid:08:85:29:FD:32:64:77:A5:FE:B0:A6:7A:FC:1C:93:F8:F8:3A:87:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/088529FD326477A5FEB0A67AFC1C93F8F83A8707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088529FD326477A5FEB0A67AFC1C93F8F83A8707.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1a:9c:87:fc:23:18:7b:0b:fe:79:6f:c6:a3:78:68:ad:53:
5c:ef:8d:59:b1:32:73:f6:a8:4b:d6:1a:6b:59:1f:70:dd:c9:
88:7d:99:2f:14:d8:24:63:65:a0:33:85:11:3c:1e:6f:52:15:
5f:b1:6f:3c:57:52:ef:96:54:f9:4a:1c:66:45:84:65:3b:6e:
3b:1e:c0:9c:dc:b2:0f:5b:9f:34:57:d0:f8:9c:13:85:38:96:
da:0c:69:2b:66:53:f5:6d:e4:dd:57:b0:28:ca:92:91:16:a4:
c7:2d:14:c6:d0:09:1f:7d:2f:6c:ad:fd:c8:08:fe:62:16:bf:
a1:b2:a0:b6:14:b1:4f:39:84:28:76:75:1e:32:e1:41:ff:58:
cb:f3:ca:d3:c7:a7:2c:1b:9e:1d:cf:59:7c:4d:05:4c:5b:24:
8a:fc:ab:37:40:c0:24:b8:d8:91:5d:76:9e:ae:94:70:26:d2:
17:ab:21:d6:25:be:e1:9c:7b:55:f2:05:aa:f3:05:d2:a6:96:
15:10:3f:f1:60:02:1b:46:66:40:c8:b0:d0:75:d9:48:50:17:
33:cc:46:a8:74:4b:dd:31:9c:de:e8:13:77:f5:f5:69:78:4a:
cd:12:27:9b:65:d3:fe:1b:c7:5b:63:d7:ca:d8:cc:af:04:80:
56:96:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:57:19 2026 by rpki-client