Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
File: 3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier: Zi57Na6UKUj6wm+KnGISzZhlknnf8Hj7DLxTimMURZ8=
Subject key identifier: F3:FF:68:9D:2C:77:53:9F:AD:EE:28:22:AC:2F:0F:98:9A:BE:A4:56
Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial: 48AE6EAF512C56EF8C6729DCB6B8C7DA7FDBDEC6
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
Signing time: Mon 13 Jul 2026 15:08:59 +0000
ROA not before: Mon 13 Jul 2026 15:03:59 +0000
ROA not after: Mon 12 Jul 2027 15:08:59 +0000
asID: 266303
IP address blocks: 170.79.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jul 2026 19:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ae:6e:af:51:2c:56:ef:8c:67:29:dc:b6:b8:c7:da:7f:db:de:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Validity
Not Before: Jul 13 15:03:59 2026 GMT
Not After : Jul 12 15:08:59 2027 GMT
Subject: CN=F3FF689D2C77539FADEE2822AC2F0F989ABEA456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:4e:23:71:30:ae:41:41:ed:03:fb:78:84:
95:fd:f1:27:a4:4e:23:bd:a4:d6:7b:fb:ab:a1:53:
fe:ed:3c:5c:6b:0b:41:b2:68:de:ef:d9:30:3a:08:
4f:77:81:c7:42:37:d9:3e:40:3b:cd:53:ad:b6:a0:
03:0e:e7:84:25:3e:e4:9c:8e:bb:77:53:d4:84:0f:
d7:59:c0:01:81:e8:0e:ff:92:61:01:28:55:05:72:
54:5b:2a:67:bb:0e:c2:61:d2:c9:aa:cc:43:9f:34:
5d:3a:7e:6c:a5:8e:7c:bf:5e:2d:f6:bd:70:81:41:
f1:65:b6:e5:e8:94:1a:d1:8b:85:e0:13:05:f4:b8:
fe:6f:7c:67:d1:be:46:d7:68:5e:58:2a:2b:5d:c8:
ad:9f:4c:c1:e2:f5:b8:46:49:e7:c6:da:3a:ce:36:
91:bb:15:0c:4c:14:80:42:35:95:14:39:e5:5f:ae:
5d:06:77:40:4e:40:3a:0d:8e:5a:d3:2c:85:60:49:
08:a9:68:3a:42:e0:d8:9d:45:60:90:50:be:6b:54:
7d:e2:24:f2:20:74:3c:18:5a:64:0e:b3:c9:d2:16:
76:56:8f:25:29:5c:5e:35:38:ed:57:14:53:33:83:
38:0c:c2:b1:31:8c:d3:59:72:9e:b8:7e:5f:86:98:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FF:68:9D:2C:77:53:9F:AD:EE:28:22:AC:2F:0F:98:9A:BE:A4:56
X509v3 Authority Key Identifier:
keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137322e302f32342d3234203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.172.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e6:ae:12:28:b8:b9:9d:8e:05:20:b9:66:62:8c:6d:28:87:
c3:12:62:33:5c:36:52:20:09:fa:ed:26:41:2b:7a:5a:0b:49:
d1:8f:fd:fa:04:b8:05:2a:f6:07:27:79:3b:e8:af:37:2f:61:
ce:02:09:e2:a6:47:c6:0b:0d:5e:49:99:2a:27:71:0a:3f:cd:
5e:64:aa:fe:30:87:38:92:03:82:f4:77:be:29:01:d8:64:4e:
f9:9c:ba:7f:c5:23:b2:d3:e0:5d:e8:ea:61:3d:cc:de:26:9e:
50:99:3f:9e:84:15:e2:ce:2d:7a:54:4c:7b:cb:68:79:c2:76:
fd:60:9a:c8:1b:c7:ba:fd:23:8e:88:0b:18:57:98:b2:2d:3f:
55:02:03:72:da:6d:57:22:a6:9f:e3:24:dd:6a:de:72:40:cd:
87:26:19:81:fb:6a:8a:d7:f0:64:0c:ab:7f:20:6f:cb:8e:d1:
43:71:98:d5:f6:f6:de:5a:0d:e9:40:84:c4:d3:07:b0:33:20:
3e:91:69:ac:20:44:09:0b:c5:fa:69:92:91:15:08:1c:59:a7:
d2:c5:29:f2:9e:7b:0b:05:90:aa:c2:e4:38:9e:7a:b6:f8:2f:
f7:67:c9:03:87:14:95:c8:28:45:5a:99:5b:18:c0:ea:47:a4:
bb:90:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:52:38 2026 by rpki-client