Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
File: 3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier: u1DSATKzzG+aLGsOYuNUHdJboUYzbOsv2DTEIHVQ4hs=
Subject key identifier: DA:12:2B:CC:50:12:E4:BE:CF:57:DF:C2:52:7F:15:B5:7F:D2:FE:D3
Certificate issuer: /CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Certificate serial: 15AD8F82F9ECC1BBFA439B0A5A215823B7BE818B
Authority key identifier: 31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
Signing time: Fri 24 Jul 2026 20:17:26 +0000
ROA not before: Fri 24 Jul 2026 20:12:26 +0000
ROA not after: Fri 23 Jul 2027 20:17:26 +0000
asID: 263897
IP address blocks: 138.204.113.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ad:8f:82:f9:ec:c1:bb:fa:43:9b:0a:5a:21:58:23:b7:be:81:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Validity
Not Before: Jul 24 20:12:26 2026 GMT
Not After : Jul 23 20:17:26 2027 GMT
Subject: CN=DA122BCC5012E4BECF57DFC2527F15B57FD2FED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:3d:05:cd:e2:5a:87:f2:33:f4:fc:a9:de:
bc:8d:64:e6:e3:46:d2:fe:ed:49:0c:98:e4:4e:f1:
bd:c5:63:7e:e4:a6:14:b7:1b:76:41:41:5d:93:9a:
d2:52:d7:04:f4:4e:e1:c1:8e:c5:86:3e:15:fc:b9:
fe:84:58:96:fb:0d:d7:c0:68:62:f0:ac:eb:39:a4:
47:62:35:0e:39:85:cd:74:5e:de:a9:82:7f:b1:bf:
77:94:f1:f4:ab:ea:69:61:e8:0b:2e:bd:f2:71:33:
d7:bf:d7:c0:5c:21:c4:61:b8:9c:81:b0:35:35:7c:
68:6b:62:a3:dc:af:3a:19:b3:65:f8:b0:e8:4d:32:
d0:b2:0c:72:ee:6a:09:b1:4a:47:14:a3:14:24:ef:
60:05:99:a7:88:20:d0:d2:06:a4:79:11:39:6b:6a:
8d:cb:a9:64:3f:a3:bb:8d:96:9b:af:35:9d:04:03:
d2:17:09:55:eb:10:39:d2:97:c4:61:4b:60:e0:55:
1c:b5:91:d2:4f:8d:c2:54:e9:f9:d3:0f:cd:2a:42:
be:3b:a6:46:ee:42:5c:9e:17:61:87:67:1f:d0:19:
de:cb:90:77:41:9e:bf:2f:a1:cf:11:a5:94:e4:cb:
8d:e0:92:c6:23:30:0d:e5:d7:07:34:10:9d:50:b1:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:2B:CC:50:12:E4:BE:CF:57:DF:C2:52:7F:15:B5:7F:D2:FE:D3
X509v3 Authority Key Identifier:
keyid:31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/31654F04E865C41643C8869FAE7BE65BEADE7C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.113.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3c:32:c2:d2:65:b4:0c:c5:6b:bf:2a:44:60:cc:ac:0e:01:
4d:ac:6d:a7:81:5c:18:58:55:aa:a5:ed:c2:d3:18:32:2c:d4:
a9:a4:08:02:dc:4a:e9:88:74:14:b3:cc:b9:e5:a5:94:d6:b2:
8b:ed:ea:59:09:d8:69:3a:85:e6:42:82:6e:ec:6d:ed:71:fb:
d8:2f:0d:9a:0c:28:4f:81:34:77:8a:bb:eb:d4:97:18:eb:5d:
43:e8:4b:e7:e0:14:8b:7b:6d:e7:bf:18:05:80:f6:52:49:1f:
a0:80:94:db:5c:13:aa:12:a3:18:ae:5e:16:3c:44:15:9a:d0:
c0:f8:7c:77:a2:c5:95:0b:d5:c6:d7:e0:bf:18:49:70:c3:a3:
fa:5a:7a:08:9f:c6:e8:6a:6d:7e:f4:3e:2b:aa:08:ee:08:20:
4c:d0:e4:6c:f8:73:00:62:3d:0c:55:19:9f:38:d9:aa:ad:29:
a3:7a:4e:1d:7b:34:6c:6c:ad:4a:bb:d2:9f:52:0d:47:cc:17:
15:14:f4:57:e5:92:12:e3:2b:90:12:4c:ee:1b:9e:f5:7f:42:
df:e0:8f:63:f3:90:d3:55:58:6e:a3:ad:ce:8d:ed:34:45:01:
33:e3:44:d2:6d:12:f9:8e:8e:8e:03:da:a2:28:ab:13:c0:be:
4b:bd:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:33:38 2026 by rpki-client