Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
File: 3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa (raw, json)
Hash identifier: QGttQSVUiSRQ30WyJJFcuF0ZkFgGmT2ZNw6iEVhI0lk=
Subject key identifier: BF:1F:FD:EC:1C:81:DF:37:62:80:E8:2C:19:6F:49:5A:9F:98:8B:7C
Certificate issuer: /CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Certificate serial: 596CC33827D1373CCCCA65439F8368C2005E7FC6
Authority key identifier: 21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
Signing time: Mon 13 Jul 2026 15:09:11 +0000
ROA not before: Mon 13 Jul 2026 15:04:11 +0000
ROA not after: Mon 12 Jul 2027 15:09:11 +0000
asID: 266303
IP address blocks: 170.79.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jul 2026 19:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6c:c3:38:27:d1:37:3c:cc:ca:65:43:9f:83:68:c2:00:5e:7f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21CEE9B4AE716671BEBD32603DC5A61BCAD35898
Validity
Not Before: Jul 13 15:04:11 2026 GMT
Not After : Jul 12 15:09:11 2027 GMT
Subject: CN=BF1FFDEC1C81DF376280E82C196F495A9F988B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:cd:d0:66:cb:f6:01:d4:90:5b:53:f7:02:
2b:01:85:af:9b:42:24:ec:f8:6c:db:6d:c7:80:4b:
3f:5a:99:ed:48:ab:31:ce:0a:6e:ba:ca:58:07:2c:
a3:20:c9:68:b8:9b:f7:c6:7f:9f:34:3f:b5:ea:55:
22:e8:1f:13:8b:5b:74:1a:4f:90:64:18:72:84:ff:
70:48:a0:6a:0e:2f:86:b6:8e:0c:9b:d0:f3:61:2e:
91:2b:27:1f:30:d4:87:09:1d:2f:b4:79:ca:86:be:
21:45:29:f0:a6:c7:2f:8b:93:69:e0:91:58:e0:e4:
9d:d6:d3:6b:b2:f6:ee:2a:99:d2:24:23:2a:6c:f0:
2f:5c:51:9c:15:a0:e6:e1:26:06:20:ce:ad:be:81:
84:46:de:18:16:28:53:4c:6a:d0:62:ca:bc:ef:19:
49:2a:70:0d:05:87:05:6f:75:6e:32:dd:fe:1c:6c:
59:e2:e9:e4:b0:53:b0:d0:6d:38:48:b3:8b:78:d7:
4d:ae:85:ff:6b:67:5a:d8:fd:c8:41:46:c9:63:8c:
be:b3:b3:40:d5:cf:ce:63:6e:b5:02:f2:24:66:26:
d9:4b:c7:b9:5b:e0:7a:96:11:ea:e7:1d:ef:b6:15:
93:14:87:04:55:1f:05:71:28:73:7c:f7:7f:28:79:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:FD:EC:1C:81:DF:37:62:80:E8:2C:19:6F:49:5A:9F:98:8B:7C
X509v3 Authority Key Identifier:
keyid:21:CE:E9:B4:AE:71:66:71:BE:BD:32:60:3D:C5:A6:1B:CA:D3:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CEE9B4AE716671BEBD32603DC5A61BCAD35898.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3f7hXK8Q3KP8BZupiEwLV1q1L7BmRRKrB1bRX4JVqE4T/0/3137302e37392e3137352e302f32342d3234203d3e20323636333033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.79.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9f:68:e8:84:5b:54:b7:2c:12:17:b9:26:cc:2a:14:b7:69:
83:51:8e:64:2e:69:4d:f0:09:73:d9:97:db:66:7f:6e:fa:13:
6e:0b:11:e8:41:41:04:19:79:71:89:54:61:20:84:78:84:8f:
8a:30:1a:1f:7d:9b:e2:ea:65:71:9e:05:41:ec:94:8b:46:57:
57:f5:ad:ce:06:9d:91:81:e5:e1:e4:49:ae:9e:fa:59:0b:2f:
bc:a0:1f:07:c5:16:4f:28:f2:ca:0b:48:ed:f7:79:1f:c5:20:
84:67:9a:0a:3e:75:f5:4b:12:51:a7:8f:29:cb:25:df:8a:44:
0c:f9:54:9a:db:a0:ea:cc:8d:89:1d:64:a8:8b:87:b7:b6:34:
a8:29:50:f7:ac:ac:55:04:e6:b3:c5:c2:e8:a2:db:5c:9b:bd:
54:8d:13:ed:3e:8a:a8:6c:e7:89:ad:dd:8f:1f:21:98:c7:37:
8a:90:59:dc:ad:d8:0f:a5:bb:1d:54:b1:6b:21:f1:40:3b:b7:
92:16:89:4c:fb:c0:be:f4:5f:d7:f1:4e:8c:05:39:8f:e8:ad:
fc:5b:26:8d:87:de:df:19:05:31:3c:c2:58:40:2a:30:8a:11:
7c:d7:17:ef:97:99:f9:1a:fc:c2:bb:dd:c4:1d:3b:34:5f:e4:
ff:d7:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:22:01 2026 by rpki-client