Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
File: 3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier: YUWeABqgU/SHVGenTOzrK22RpZgL0iI0JxUpswibVME=
Subject key identifier: 76:69:5C:C4:39:0D:09:4B:5B:1E:A2:6E:4F:8B:FA:C2:92:4A:82:FA
Certificate issuer: /CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Certificate serial: 61AADCAD1FAE8B88DD64717E5DDF4E295CB647E0
Authority key identifier: 31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
Signing time: Fri 24 Jul 2026 20:17:24 +0000
ROA not before: Fri 24 Jul 2026 20:12:24 +0000
ROA not after: Fri 23 Jul 2027 20:17:24 +0000
asID: 263897
IP address blocks: 138.204.114.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:aa:dc:ad:1f:ae:8b:88:dd:64:71:7e:5d:df:4e:29:5c:b6:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Validity
Not Before: Jul 24 20:12:24 2026 GMT
Not After : Jul 23 20:17:24 2027 GMT
Subject: CN=76695CC4390D094B5B1EA26E4F8BFAC2924A82FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:af:31:6b:d7:34:e5:75:b6:29:42:ef:7f:
28:84:2c:78:c5:ec:70:f1:6c:f5:7b:28:b4:cb:87:
a2:98:56:a8:b3:66:d5:b0:aa:08:6c:8d:15:3d:77:
5f:65:ea:40:e4:f1:37:c3:8e:e6:76:90:b7:8e:23:
02:32:82:d1:cf:a9:30:2e:cb:1a:81:6c:eb:a7:9b:
73:aa:38:ec:98:ae:10:e6:e5:c0:62:fe:47:92:2e:
b3:8d:e4:32:10:b7:54:21:f2:1f:24:3a:86:dc:66:
de:63:f9:b8:f4:31:3a:ce:c9:23:47:22:34:9c:a4:
03:64:9b:df:7c:d8:ed:81:d2:f8:81:41:f3:4d:fb:
74:78:47:cd:ba:94:f4:d7:7f:52:ee:98:fb:74:7d:
f5:cb:b5:05:66:b0:0c:fc:a0:cc:ac:61:f6:56:0e:
56:1d:24:39:f3:e7:9e:4a:34:0c:6b:a4:66:3d:3f:
7d:a5:f2:a9:07:85:ff:cc:5b:0c:60:dd:39:3c:61:
b3:69:8f:7d:bb:57:ac:12:71:05:fe:0f:80:02:c7:
57:f1:74:e5:8b:c0:9b:fe:a5:3a:06:bc:3f:5d:22:
d4:d8:2e:c4:fe:2c:a2:fb:41:b2:ed:1f:38:e0:f6:
f0:6c:db:bc:73:4e:04:12:4a:8a:5d:a8:4b:22:af:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:5C:C4:39:0D:09:4B:5B:1E:A2:6E:4F:8B:FA:C2:92:4A:82:FA
X509v3 Authority Key Identifier:
keyid:31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/31654F04E865C41643C8869FAE7BE65BEADE7C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7f:38:5c:88:08:3b:b5:54:03:63:42:3b:e3:cb:ad:eb:29:
49:bc:95:d9:7d:38:dc:35:9b:40:ea:be:a5:62:4d:f8:00:99:
49:ab:21:9a:d3:4c:a1:14:6d:83:28:ae:a0:47:d0:9e:d3:f2:
ba:af:71:db:bb:50:8c:e4:ef:bb:2b:db:a5:c1:03:e4:0c:86:
1d:54:cd:20:0f:c1:6c:9b:02:84:03:9b:c0:aa:ce:c3:9e:9a:
56:a8:27:b1:0c:f8:56:7c:64:1e:3c:a7:75:69:bb:00:6d:bb:
17:84:5d:a6:19:c6:a7:8e:2e:22:14:f5:ca:49:f0:75:24:bb:
c0:50:8c:c4:66:ee:a4:a8:af:76:53:9b:f2:f7:37:38:65:dd:
f9:d6:2a:2b:8f:92:1a:12:b4:ff:7c:e1:94:f5:4d:80:4d:a0:
71:b5:ad:5d:27:1a:54:a5:9a:54:c7:7f:c3:0b:19:c2:9a:02:
b0:c4:c2:9a:d5:98:5f:63:af:3a:3f:0f:77:4a:7f:5d:33:1c:
34:99:9a:6a:8a:23:e5:ba:44:4d:06:86:9e:77:df:ea:53:16:
89:f3:76:c9:26:cf:70:da:ca:a7:fa:26:04:c0:be:c8:f0:50:
99:43:95:75:74:76:82:7b:73:5c:cd:65:e3:9b:aa:60:e0:0a:
af:46:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:32:33 2026 by rpki-client