Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa
File: 3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier: ov3z742kq8zpo5Sc6LlgTcZBk7etOexTDpAgw+4iVgw=
Subject key identifier: 18:DA:DD:A2:28:C8:6A:40:A4:D4:E5:BC:09:0A:92:AC:4C:9D:42:AE
Certificate issuer: /CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Certificate serial: 4158828F58BBB2DE14EC958E88CB96C3BE5708B4
Authority key identifier: 31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa
Signing time: Fri 24 Jul 2026 20:17:25 +0000
ROA not before: Fri 24 Jul 2026 20:12:25 +0000
ROA not after: Fri 23 Jul 2027 20:17:25 +0000
asID: 263897
IP address blocks: 138.204.112.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:58:82:8f:58:bb:b2:de:14:ec:95:8e:88:cb:96:c3:be:57:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Validity
Not Before: Jul 24 20:12:25 2026 GMT
Not After : Jul 23 20:17:25 2027 GMT
Subject: CN=18DADDA228C86A40A4D4E5BC090A92AC4C9D42AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:46:4e:b4:ef:76:a8:3e:86:44:a5:1f:a8:
94:03:55:fe:32:20:17:da:16:93:93:8d:da:e2:69:
9b:83:12:a8:b1:13:39:cf:fd:7a:08:dd:e4:f8:ac:
b1:f4:03:cf:7f:7c:70:17:52:4c:01:6e:26:61:01:
9e:69:af:b0:05:f3:4f:45:a6:41:7e:d5:53:e2:c2:
06:b2:99:81:11:e3:df:34:a9:92:d5:f8:8e:cf:c1:
f3:f2:68:f7:f1:d6:b7:24:56:07:df:53:39:dd:23:
a3:5d:34:a9:06:e4:08:cf:5d:cc:06:19:b0:1a:57:
a5:8b:39:80:0b:de:8d:7f:fa:85:5e:7f:2f:29:51:
ca:1c:74:8b:47:1e:30:79:b0:c8:26:ef:cd:94:7a:
f9:91:b4:fb:9b:46:72:7d:7d:82:e5:6b:df:c8:05:
76:9c:e9:72:be:36:30:76:2b:f3:96:b8:30:35:20:
b1:5e:37:1f:3f:df:ee:bc:16:79:5c:8c:ec:28:90:
76:c6:b1:6d:66:0c:ef:04:4f:06:14:f4:e2:15:98:
75:0f:ca:ad:11:05:d4:12:d2:b7:74:9e:cb:5a:e8:
c3:11:60:72:fe:85:49:2e:b5:51:da:49:fd:ea:ef:
0e:15:0f:00:29:19:6d:f0:36:f6:f9:64:d9:a0:ad:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DA:DD:A2:28:C8:6A:40:A4:D4:E5:BC:09:0A:92:AC:4C:9D:42:AE
X509v3 Authority Key Identifier:
keyid:31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/31654F04E865C41643C8869FAE7BE65BEADE7C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.112.0/24
Signature Algorithm: sha256WithRSAEncryption
91:0a:d3:6a:79:08:aa:1d:ab:0c:37:e9:5a:5c:ee:b9:9c:38:
71:ac:6f:6e:a9:c2:4f:95:de:89:18:5d:3f:bc:a3:8b:a5:e6:
57:0f:74:b0:2f:f3:88:d0:d0:be:5e:44:87:aa:b2:07:2b:ba:
e8:cf:04:26:ee:02:68:e1:24:67:a6:95:e2:8b:17:97:df:d9:
05:ad:6e:0e:61:f1:5d:5a:cb:17:2e:71:9b:d4:eb:d2:a6:29:
97:58:86:5a:95:8a:25:36:06:95:0c:e2:11:b9:d0:77:8c:2b:
ea:71:cb:19:8f:f9:bc:f5:7f:4f:b2:cf:8b:8c:92:c8:99:9c:
4f:57:aa:c6:1b:99:fa:69:11:9b:18:6f:0b:e7:9a:dd:2d:7a:
92:45:07:5f:30:fa:86:1a:bc:ac:33:77:9d:d6:30:98:d0:dd:
75:ec:9e:dd:87:74:be:fb:8d:a5:aa:3c:bd:24:1f:0f:ea:53:
3b:70:ec:0c:43:0e:bb:6f:f6:fe:47:e3:12:88:24:9f:72:ed:
18:6e:d1:84:d9:c4:95:8b:cb:89:5c:8a:5a:f0:fe:08:44:70:
de:26:f1:79:19:a5:54:23:94:35:c2:2d:83:3b:26:30:0c:33:
9e:f6:ed:ac:a8:61:f7:3f:8c:9b:52:b8:19:36:6d:46:c2:86:
e9:4f:e4:4f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQViCj1i7st4U7JWOiMuWw75XCLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE2NTRGMDRFODY1QzQxNjQzQzg4NjlGQUU3QkU2NUJF
QURFN0M2MjAeFw0yNjA3MjQyMDEyMjVaFw0yNzA3MjMyMDE3MjVaMDMxMTAvBgNV
BAMTKDE4REFEREEyMjhDODZBNDBBNEQ0RTVCQzA5MEE5MkFDNEM5RDQyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpz0ZOtO92qD6GRKUfqJQDVf4y
IBfaFpOTjdriaZuDEqixEznP/XoI3eT4rLH0A89/fHAXUkwBbiZhAZ5pr7AF809F
pkF+1VPiwgaymYER4980qZLV+I7PwfPyaPfx1rckVgffUzndI6NdNKkG5AjPXcwG
GbAaV6WLOYAL3o1/+oVefy8pUcocdItHHjB5sMgm782UevmRtPubRnJ9fYLla9/I
BXac6XK+NjB2K/OWuDA1ILFeNx8/3+68FnlcjOwokHbGsW1mDO8ETwYU9OIVmHUP
yq0RBdQS0rd0nsta6MMRYHL+hUkutVHaSf3q7w4VDwApGW3wNvb5ZNmgrVYvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGNrdoijIakCk1OW8CQqSrEydQq4wHwYDVR0j
BBgwFoAUMWVPBOhlxBZDyIafrnvmW+refGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVTNFJwZFB1Vkg4c0FQemlmZ2FINzFWYkdWRlRVZnN2cktucURMbmt2
bTcvMC8zMTY1NEYwNEU4NjVDNDE2NDNDODg2OUZBRTdCRTY1QkVBREU3QzYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNjU0RjA0RTg2NUM0MTY0
M0M4ODY5RkFFN0JFNjVCRUFERTdDNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JlUzRScGRQdVZIOHNBUHppZmdhSDcxVmJHVkZUVWZzdnJLbnFETG5rdm03LzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMcDANBgkqhkiG9w0BAQsFAAOCAQEAkQrT
ankIqh2rDDfpWlzuuZw4caxvbqnCT5XeiRhdP7yji6XmVw90sC/ziNDQvl5Eh6qy
Byu66M8EJu4CaOEkZ6aV4osXl9/ZBa1uDmHxXVrLFy5xm9Tr0qYpl1iGWpWKJTYG
lQziEbnQd4wr6nHLGY/5vPV/T7LPi4ySyJmcT1eqxhuZ+mkRmxhvC+ea3S16kkUH
XzD6hhq8rDN3ndYwmNDddeye3Yd0vvuNpao8vSQfD+pTO3DsDEMOu2/2/kfjEogk
n3LtGG7RhNnElYvLiVyKWvD+CERw3ibxeRmlVCOUNcItgzsmMAwznvbtrKhh9z+M
m1K4GTZtRsKG6U/kTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:33:35 2026 by rpki-client