Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
File: 3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier: VjmNjegSkGbBlXzX29wFGVIzRJTvoGndqfj6p+CwQEI=
Subject key identifier: 9C:64:4B:2F:E7:FC:69:B2:B1:0F:C3:7B:B9:16:BB:F0:E6:2A:FD:A0
Certificate issuer: /CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Certificate serial: 50A11E5C56B5FF679765C1CD8C992FCC87AF2632
Authority key identifier: 31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
Signing time: Fri 24 Jul 2026 20:17:24 +0000
ROA not before: Fri 24 Jul 2026 20:12:24 +0000
ROA not after: Fri 23 Jul 2027 20:17:24 +0000
asID: 263897
IP address blocks: 138.204.115.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a1:1e:5c:56:b5:ff:67:97:65:c1:cd:8c:99:2f:cc:87:af:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31654F04E865C41643C8869FAE7BE65BEADE7C62
Validity
Not Before: Jul 24 20:12:24 2026 GMT
Not After : Jul 23 20:17:24 2027 GMT
Subject: CN=9C644B2FE7FC69B2B10FC37BB916BBF0E62AFDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:f7:e5:c4:d9:75:05:6d:4d:cb:93:b4:56:
58:0a:f5:7b:27:9d:4f:0e:71:2f:9b:81:d0:67:59:
96:90:ec:6d:b1:73:c7:39:64:da:3c:aa:36:19:b5:
b3:05:ef:35:3c:db:ef:6b:1c:e2:f5:f1:0e:65:33:
67:8b:ad:fd:c5:52:42:83:3d:be:c9:1d:af:ad:76:
ca:24:1e:ef:ba:76:07:f4:09:64:ca:a2:3c:dd:3e:
bf:27:24:49:1e:66:11:9c:37:0e:cc:88:20:18:54:
cf:ee:61:6b:4e:33:ac:5d:ec:50:17:86:9c:6a:ad:
d2:8c:98:87:8d:96:26:c3:1f:1d:5a:c4:8a:f2:8e:
ae:4b:97:22:c9:d9:de:7d:9d:1b:46:9b:3f:e6:ed:
fe:af:e4:95:10:8c:ad:2e:63:bf:c9:e9:58:19:7f:
90:30:d7:51:ae:7b:d3:ef:c5:90:67:36:b3:2e:4d:
1b:f9:54:a4:74:39:bc:17:65:10:a1:9e:73:2f:3a:
14:a2:0e:b1:e1:f2:a9:be:9d:4c:c4:36:f5:f3:44:
2b:5f:80:54:e5:68:74:6f:91:31:21:68:7b:36:c8:
f4:5e:85:99:90:89:7f:83:a8:1f:61:90:c6:27:c3:
44:69:37:9c:d5:73:8b:0e:03:7d:8f:9d:5c:42:05:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:4B:2F:E7:FC:69:B2:B1:0F:C3:7B:B9:16:BB:F0:E6:2A:FD:A0
X509v3 Authority Key Identifier:
keyid:31:65:4F:04:E8:65:C4:16:43:C8:86:9F:AE:7B:E6:5B:EA:DE:7C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/31654F04E865C41643C8869FAE7BE65BEADE7C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31654F04E865C41643C8869FAE7BE65BEADE7C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.115.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3b:c1:07:44:07:a0:8a:11:98:bc:f0:f1:06:8a:0b:fe:be:
72:cb:3f:1e:4e:5d:c7:b5:87:86:e4:4e:14:cd:93:19:bb:03:
38:be:53:3c:29:12:41:b7:a1:dd:86:3a:4e:8b:50:56:11:9f:
52:70:19:e1:f5:b9:bb:cd:7f:da:20:9b:d4:af:46:59:02:83:
34:29:c5:95:81:cc:57:be:3b:a2:f6:84:9d:9b:7c:f7:e6:69:
b0:6c:d1:92:27:c8:ae:67:b8:12:2e:e3:16:90:db:ae:c4:34:
04:08:d7:e7:1d:8a:f2:c9:c2:34:fc:7c:05:3d:ce:d3:ba:63:
b8:5e:52:c7:1a:05:30:5e:93:70:fc:e0:89:31:d3:22:89:ca:
d0:05:ca:c2:7d:46:d3:4c:47:47:9f:97:fc:38:73:77:90:b4:
40:fc:0c:18:8a:fc:70:06:76:98:d1:dc:50:16:3b:e8:87:03:
94:c3:48:92:54:5f:14:c9:1d:aa:86:af:74:90:87:de:b0:9a:
b3:1d:af:bc:a2:00:d5:c8:03:5f:a3:41:41:ce:f1:98:fc:49:
f4:8c:04:4b:11:e4:21:1d:e1:c1:31:f3:33:74:6e:69:26:cf:
0c:56:b1:cb:4c:2f:7c:18:fa:7c:c0:ed:d0:1a:53:21:ca:bf:
74:bb:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:33:38 2026 by rpki-client