Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa
File: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (raw, json)
Hash identifier: Iy9AMuxT+MTtbXpdxK+pc7gPpIhBIvqqPm+jsOtCG98=
Subject key identifier: AF:FE:D2:73:7F:53:54:A4:27:96:4F:09:29:B0:45:E3:86:26:81:F0
Certificate issuer: /CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
Certificate serial: 5763428FBBF129D72C6A9BC559E4E88E5BAA7CAD
Authority key identifier: BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa
Signing time: Thu 02 Jul 2026 02:26:29 +0000
ROA not before: Thu 02 Jul 2026 02:21:29 +0000
ROA not after: Thu 01 Jul 2027 02:26:29 +0000
asID: 270860
IP address blocks: 190.124.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jul 2026 14:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:63:42:8f:bb:f1:29:d7:2c:6a:9b:c5:59:e4:e8:8e:5b:aa:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCF874818DF4897B2FA5BE7E0A809EAD38531C35
Validity
Not Before: Jul 2 02:21:29 2026 GMT
Not After : Jul 1 02:26:29 2027 GMT
Subject: CN=AFFED2737F5354A427964F0929B045E3862681F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:23:69:bd:f7:24:37:8e:be:63:69:fb:01:
f6:90:0b:53:d2:82:85:ab:2b:a0:e5:d0:e1:a6:8b:
c3:2d:57:59:94:6a:5f:d5:62:f3:bd:0a:3d:a4:27:
12:f8:16:75:eb:f7:11:b8:26:a8:aa:ec:48:3c:ca:
22:83:b3:77:c6:c8:43:aa:3d:83:21:2c:ad:d1:55:
d1:80:c5:2f:88:6e:f1:eb:36:7e:1c:5c:4c:0e:2d:
e2:05:f0:6a:4a:4e:fd:95:e9:f5:17:84:1d:34:7e:
13:ab:4d:b5:77:5e:ea:72:65:97:4e:9b:02:3f:f9:
6b:e5:e7:99:93:7f:a0:61:27:fe:2e:70:25:d2:5b:
8e:6c:68:df:77:5d:16:0e:1f:db:ea:2c:f1:38:f0:
28:0d:fe:5b:10:dd:5d:ce:57:60:57:b0:2b:fc:3c:
e6:a1:e2:f2:f0:84:7a:f3:5c:65:bf:7f:35:ca:01:
5e:65:67:aa:cd:06:32:48:48:ff:26:85:a3:96:1a:
db:7a:87:a6:44:3e:b2:9f:04:a7:4f:e2:62:b8:66:
d4:d2:81:3e:11:e5:68:25:15:21:b4:2c:88:fc:61:
66:e5:9c:63:88:d9:7e:4c:52:9e:88:0a:c5:17:87:
3b:12:ba:c3:83:eb:26:2f:24:8e:f2:0b:36:98:b6:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:D2:73:7F:53:54:A4:27:96:4F:09:29:B0:45:E3:86:26:81:F0
X509v3 Authority Key Identifier:
keyid:BC:F8:74:81:8D:F4:89:7B:2F:A5:BE:7E:0A:80:9E:AD:38:53:1C:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF874818DF4897B2FA5BE7E0A809EAD38531C35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.246.0/24
Signature Algorithm: sha256WithRSAEncryption
38:3a:b3:e7:16:8a:59:f8:07:85:31:c2:b6:89:39:6c:57:e1:
99:5a:f0:8c:a1:2d:b3:26:29:b1:44:28:c7:ce:3c:25:f5:a4:
28:84:ba:e1:85:1e:07:e2:52:f7:d4:0d:d7:84:e3:0c:2c:e6:
b5:0c:80:aa:85:7b:a9:db:eb:90:36:b4:3a:84:ee:58:34:09:
fe:96:cd:13:55:79:f5:26:9e:94:c0:90:9a:1d:c1:62:3a:e9:
1d:d6:95:d7:d3:89:bb:83:e8:5e:7d:fe:03:23:88:5a:d4:55:
88:5d:8a:04:24:53:7a:82:ce:78:78:9a:1d:a5:9c:c9:bf:8c:
cd:c9:0c:e5:30:87:cc:cb:bb:3c:b8:60:67:92:78:ee:cd:b3:
e6:b6:a3:ad:1e:e6:6f:40:75:aa:b8:5e:4e:c9:92:c3:1b:4c:
dc:b3:1c:a6:fa:3a:68:ed:09:93:27:86:d0:22:03:15:12:0f:
4e:10:17:65:d8:13:24:39:f5:de:1a:90:1e:a2:8d:63:ce:42:
9e:fc:db:f3:01:64:44:a2:ed:bb:f1:25:e7:81:0e:d0:b2:81:
8c:79:89:98:ed:c4:31:26:16:d1:b5:e8:3e:48:ea:94:d5:9d:
54:40:74:d3:90:43:6d:6a:cc:b4:8f:de:d0:b9:0e:0c:ce:08:
0b:83:1d:e0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUV2NCj7vxKdcsapvFWeTojluqfK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNGODc0ODE4REY0ODk3QjJGQTVCRTdFMEE4MDlFQUQz
ODUzMUMzNTAeFw0yNjA3MDIwMjIxMjlaFw0yNzA3MDEwMjI2MjlaMDMxMTAvBgNV
BAMTKEFGRkVEMjczN0Y1MzU0QTQyNzk2NEYwOTI5QjA0NUUzODYyNjgxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6yNpvfckN46+Y2n7AfaQC1PS
goWrK6Dl0OGmi8MtV1mUal/VYvO9Cj2kJxL4FnXr9xG4Jqiq7Eg8yiKDs3fGyEOq
PYMhLK3RVdGAxS+IbvHrNn4cXEwOLeIF8GpKTv2V6fUXhB00fhOrTbV3XupyZZdO
mwI/+Wvl55mTf6BhJ/4ucCXSW45saN93XRYOH9vqLPE48CgN/lsQ3V3OV2BXsCv8
POah4vLwhHrzXGW/fzXKAV5lZ6rNBjJISP8mhaOWGtt6h6ZEPrKfBKdP4mK4ZtTS
gT4R5WglFSG0LIj8YWblnGOI2X5MUp6ICsUXhzsSusOD6yYvJI7yCzaYtsH1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr/7Sc39TVKQnlk8JKbBF44YmgfAwHwYDVR0j
BBgwFoAUvPh0gY30iXsvpb5+CoCerThTHDUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO
QkwvMC9CQ0Y4NzQ4MThERjQ4OTdCMkZBNUJFN0UwQTgwOUVBRDM4NTMxQzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRjg3NDgxOERGNDg5N0Iy
RkE1QkU3RTBBODA5RUFEMzg1MzFDMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiTkoyS2pyUGlqZWF0YlB3RnJRMXlpUGVxMlJDdzZ2OVRFaW50V2dITkJMLzAv
MzEzOTMwMmUzMTMyMzQyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL589jANBgkqhkiG9w0BAQsFAAOCAQEAODqz
5xaKWfgHhTHCtok5bFfhmVrwjKEtsyYpsUQox848JfWkKIS64YUeB+JS99QN14Tj
DCzmtQyAqoV7qdvrkDa0OoTuWDQJ/pbNE1V59SaelMCQmh3BYjrpHdaV19OJu4Po
Xn3+AyOIWtRViF2KBCRTeoLOeHiaHaWcyb+MzckM5TCHzMu7PLhgZ5J47s2z5raj
rR7mb0B1qrheTsmSwxtM3LMcpvo6aO0JkyeG0CIDFRIPThAXZdgTJDn13hqQHqKN
Y85Cnvzb8wFkRKLtu/El54EO0LKBjHmJmO3EMSYW0bXoPkjqlNWdVEB005BDbWrM
tI/e0LkODM4IC4Md4A==
-----END CERTIFICATE-----
Generated at Thu Sep 3 13:13:39 2026 by rpki-client