Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231342e302f32342d3234203d3e203631363937.roa
File: 3230312e372e3231342e302f32342d3234203d3e203631363937.roa (raw, json)
Hash identifier: NTX9ywU2ILu96d5pt2SWyiT9k8lmEZL76ADNtgd8+fI=
Subject key identifier: AA:CF:AD:DC:6C:B7:33:A6:4C:7C:7D:3C:C2:A3:B9:59:BC:5D:20:2A
Certificate issuer: /CN=8528771E1676E945AC313E0774A23D878A92C3DD
Certificate serial: 1E3A1179296C042574ABF61D9F5EC85F95873241
Authority key identifier: 85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231342e302f32342d3234203d3e203631363937.roa
Signing time: Sat 17 Oct 2026 15:26:11 +0000
ROA not before: Sat 17 Oct 2026 15:21:11 +0000
ROA not after: Sat 16 Oct 2027 15:26:11 +0000
asID: 61697
IP address blocks: 201.7.214.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3a:11:79:29:6c:04:25:74:ab:f6:1d:9f:5e:c8:5f:95:87:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8528771E1676E945AC313E0774A23D878A92C3DD
Validity
Not Before: Oct 17 15:21:11 2026 GMT
Not After : Oct 16 15:26:11 2027 GMT
Subject: CN=AACFADDC6CB733A64C7C7D3CC2A3B959BC5D202A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:0f:d9:27:81:03:1e:5f:e5:2c:3f:b8:5f:
96:d1:84:c3:33:44:b7:df:b8:e1:b5:b7:de:0c:3b:
0a:2e:f7:c9:03:5d:a5:24:8e:9d:c1:4d:46:65:00:
88:82:0f:65:b2:6a:1f:2b:b6:da:08:72:7e:24:a6:
ea:de:a2:83:e9:ee:20:63:6d:18:e0:64:2e:38:59:
e6:1d:30:98:d1:bb:dd:71:1f:91:c7:f2:f5:74:ac:
33:4d:93:17:9a:5a:41:38:7d:40:a4:50:9e:ef:a4:
bb:e7:48:d2:24:dc:f8:c9:a6:08:16:99:e7:86:72:
51:91:bb:b0:18:44:d2:d4:12:da:4d:ff:f2:55:4f:
b4:2a:ea:f2:f8:f4:02:de:3f:52:5e:51:e5:eb:ed:
be:19:4d:c2:d5:cd:19:78:fc:92:86:b9:66:cf:2d:
c2:e9:6a:a4:8a:62:ff:67:e0:8a:c9:21:37:15:7b:
21:40:bb:6c:83:30:c2:23:1f:2d:02:6c:0f:4b:b5:
ad:09:05:d2:d0:c0:d5:67:c4:70:df:27:3c:31:d4:
94:0d:c4:92:37:c8:b4:9f:08:90:44:b5:27:17:f7:
8d:4a:ae:e6:0e:6d:3a:d3:09:68:a5:cd:b7:e0:57:
9e:5b:ce:03:a3:c3:28:29:ec:9e:66:9e:0c:fe:1e:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:AD:DC:6C:B7:33:A6:4C:7C:7D:3C:C2:A3:B9:59:BC:5D:20:2A
X509v3 Authority Key Identifier:
keyid:85:28:77:1E:16:76:E9:45:AC:31:3E:07:74:A2:3D:87:8A:92:C3:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/8528771E1676E945AC313E0774A23D878A92C3DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8528771E1676E945AC313E0774A23D878A92C3DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/3230312e372e3231342e302f32342d3234203d3e203631363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.7.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:b2:a3:b9:c5:fe:d6:fc:76:e0:a4:00:fe:7b:4b:ec:e2:
4f:22:e0:da:a8:bf:b4:87:63:9a:2d:28:8f:99:83:dd:3d:ca:
b6:07:a5:3e:f8:f3:0d:f3:20:7a:44:b3:65:91:4a:29:6a:a4:
81:d9:d3:2e:7a:f3:0e:34:63:18:35:2f:5c:61:98:e5:d5:51:
a6:5c:18:67:e3:03:9e:c5:84:3a:c1:81:98:9a:3e:98:9b:8e:
36:1c:8f:b1:3e:6d:6c:aa:e0:df:3a:0f:93:be:23:9c:eb:87:
3d:d2:02:06:2d:e0:85:26:0d:85:fa:33:c8:a0:71:71:79:b9:
84:0e:9c:53:4f:44:1c:c0:cc:dc:31:0f:d2:16:f3:d7:38:20:
9a:58:f6:0e:39:cd:84:db:13:4d:18:80:0b:b1:35:3b:55:95:
47:32:51:15:14:b1:9f:c5:40:90:bf:7e:73:f8:e0:8a:29:d5:
6e:7a:ca:2d:5e:e8:79:be:2f:53:73:c8:0e:65:f5:16:d3:29:
a6:b4:eb:c7:0f:a1:31:9d:11:dd:9d:3d:d2:4c:0d:37:c7:a6:
25:1e:43:bf:eb:5c:ee:a3:6c:95:c7:22:e5:2f:b1:86:74:59:
d9:5b:bf:60:48:f1:0d:58:de:0c:85:df:91:8f:a9:eb:72:ed:
69:74:af:fa
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHjoReSlsBCV0q/Ydn17IX5WHMkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyODc3MUUxNjc2RTk0NUFDMzEzRTA3NzRBMjNEODc4
QTkyQzNERDAeFw0yNjEwMTcxNTIxMTFaFw0yNzEwMTYxNTI2MTFaMDMxMTAvBgNV
BAMTKEFBQ0ZBRERDNkNCNzMzQTY0QzdDN0QzQ0MyQTNCOTU5QkM1RDIwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCItA/ZJ4EDHl/lLD+4X5bRhMMz
RLffuOG1t94MOwou98kDXaUkjp3BTUZlAIiCD2Wyah8rttoIcn4kpureooPp7iBj
bRjgZC44WeYdMJjRu91xH5HH8vV0rDNNkxeaWkE4fUCkUJ7vpLvnSNIk3PjJpggW
meeGclGRu7AYRNLUEtpN//JVT7Qq6vL49ALeP1JeUeXr7b4ZTcLVzRl4/JKGuWbP
LcLpaqSKYv9n4IrJITcVeyFAu2yDMMIjHy0CbA9Lta0JBdLQwNVnxHDfJzwx1JQN
xJI3yLSfCJBEtScX941KruYObTrTCWilzbfgV55bzgOjwygp7J5mngz+HsLpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqs+t3Gy3M6ZMfH08wqO5WbxdICowHwYDVR0j
BBgwFoAUhSh3HhZ26UWsMT4HdKI9h4qSw90wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1NQTWZVUUFiTEVrczlBd0trajdURmZqZlIzUlVLTDQ1eWdtRnk5QUxk
RWgvMC84NTI4NzcxRTE2NzZFOTQ1QUMzMTNFMDc3NEEyM0Q4NzhBOTJDM0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1Mjg3NzFFMTY3NkU5NDVB
QzMxM0UwNzc0QTIzRDg3OEE5MkMzREQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dTUE1mVVFBYkxFa3M5QXdLa2o3VEZmamZSM1JVS0w0NXlnbUZ5OUFMZEVoLzAv
MzIzMDMxMmUzNzJlMzIzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM2
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkH1jANBgkqhkiG9w0BAQsFAAOCAQEALtuyo7nF/tb8
duCkAP57S+ziTyLg2qi/tIdjmi0oj5mD3T3KtgelPvjzDfMgekSzZZFKKWqkgdnT
LnrzDjRjGDUvXGGY5dVRplwYZ+MDnsWEOsGBmJo+mJuONhyPsT5tbKrg3zoPk74j
nOuHPdICBi3ghSYNhfozyKBxcXm5hA6cU09EHMDM3DEP0hbz1zggmlj2DjnNhNsT
TRiAC7E1O1WVRzJRFRSxn8VAkL9+c/jgiinVbnrKLV7oeb4vU3PIDmX1FtMpprTr
xw+hMZ0R3Z090kwNN8emJR5Dv+tc7qNslcci5S+xhnRZ2Vu/YEjxDVjeDIXfkY+p
63LtaXSv+g==
-----END CERTIFICATE-----
Generated at Wed Oct 21 18:15:49 2026 by rpki-client