Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
File: 323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa (raw, json)
Hash identifier: 7LGQQYkM1AYuhMgXcbtSw77n8Fk49DNqn9OITKgRMeg=
Subject key identifier: 7E:A4:14:BF:BA:BB:B6:DE:B3:94:4C:8A:99:D8:36:75:2C:79:25:A2
Certificate issuer: /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial: 2A34B24FF9661F97723A950BCD25D59812A960D2
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
Signing time: Fri 27 Mar 2026 13:19:58 +0000
ROA not before: Fri 27 Mar 2026 13:14:58 +0000
ROA not after: Fri 26 Mar 2027 13:19:58 +0000
asID: 269175
IP address blocks: 2804:1f4c:800::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 27 Mar 2026 15:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:34:b2:4f:f9:66:1f:97:72:3a:95:0b:cd:25:d5:98:12:a9:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Validity
Not Before: Mar 27 13:14:58 2026 GMT
Not After : Mar 26 13:19:58 2027 GMT
Subject: CN=7EA414BFBABBB6DEB3944C8A99D836752C7925A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:5e:6f:71:86:05:7f:51:a1:b9:f9:bf:6e:
60:a4:78:95:1d:f1:72:7e:b7:fa:63:ad:89:bb:2c:
0a:91:bb:3b:a1:e7:44:64:c7:a3:31:35:43:75:4d:
23:ff:89:25:e3:51:8f:72:aa:cb:da:aa:a0:ca:8a:
4a:54:52:6a:e0:ae:e1:e0:a9:18:2b:ae:04:d6:a7:
0a:b6:ad:e6:64:a9:fd:25:1f:ff:8e:0a:03:2e:b4:
6a:fa:92:cc:a2:c0:f5:67:08:53:f3:85:fe:d7:a1:
c3:b3:b3:a4:4b:d2:e2:73:82:0b:59:a7:5f:96:c4:
b0:ed:b6:5a:19:dd:59:14:86:e7:63:db:e8:ff:c7:
b2:4f:60:fa:b1:dd:e9:dc:40:2d:d9:30:be:0f:16:
c1:97:7f:0e:12:ae:6c:92:e9:63:fe:21:80:9d:ab:
b5:5d:2e:99:d1:d2:fc:99:b4:b3:73:13:b6:4a:0a:
14:16:00:d2:97:54:92:d5:04:82:03:fe:4e:6c:c4:
fb:69:dd:d7:aa:00:aa:24:45:7c:c1:5c:74:d1:b2:
f5:ac:4a:5d:3e:a1:06:5d:c7:7f:dd:01:ae:d3:04:
a9:89:af:79:73:3d:0c:3b:25:dd:8b:a2:1d:36:36:
b3:eb:aa:16:43:c4:87:57:0b:18:96:71:a3:e1:e7:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:14:BF:BA:BB:B6:DE:B3:94:4C:8A:99:D8:36:75:2C:79:25:A2
X509v3 Authority Key Identifier:
keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3830303a3a2f34302d3430203d3e20323639313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f4c:800::/40
Signature Algorithm: sha256WithRSAEncryption
44:fd:5b:b1:26:b4:77:2c:65:b0:9d:6f:eb:0f:1c:99:50:a8:
98:4f:1a:fb:c5:bf:00:3b:c9:54:df:19:be:1c:7c:33:37:b7:
c4:1f:34:7c:0f:0f:89:9e:0f:38:f3:d7:62:dc:ad:65:2d:ab:
92:8d:f7:4a:19:96:db:fb:4d:09:ec:3e:8f:19:2e:65:10:30:
6b:96:93:9e:64:11:e9:2f:cf:70:a1:2c:5f:45:a0:f6:29:9c:
45:94:5f:f6:b2:f2:a8:56:38:3d:3e:ef:9f:61:40:46:13:90:
6c:ce:ba:16:26:95:a1:c9:66:d0:93:9c:98:b6:62:68:65:a6:
56:de:63:10:82:88:55:92:a0:5b:4c:d7:79:54:fd:93:b0:3c:
89:a4:11:a9:93:39:1f:2f:c8:a4:2e:7a:f4:fc:a5:ac:b0:a6:
b7:7a:4a:c2:c1:51:00:d9:cb:bd:55:4d:d1:85:c1:f0:8b:a8:
5f:c6:d1:d0:82:06:72:24:68:4a:9f:17:57:a8:36:37:de:e0:
e7:96:57:69:9d:ea:c6:aa:03:9f:5f:c6:03:21:d0:21:59:da:
a9:54:77:9c:e7:56:20:ee:05:5a:41:d8:38:ac:59:52:12:09:
a8:ca:92:dd:8f:48:88:e4:89:fe:73:90:72:78:b8:01:37:0f:
31:d8:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:15:47 2026 by rpki-client