Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa
File: 323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa (raw, json)
Hash identifier: DG6aZQeciFK3tIyulmd7WLhjS228MAGLZpJnb+QOSHI=
Subject key identifier: D3:EB:66:7C:54:B2:53:1C:2C:14:74:01:7C:01:01:B9:DF:2D:1F:D7
Certificate issuer: /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial: 4D91DBAFF6D9946C134F66C173BDE9495C0AFA0C
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa
Signing time: Fri 27 Mar 2026 13:20:03 +0000
ROA not before: Fri 27 Mar 2026 13:15:03 +0000
ROA not after: Fri 26 Mar 2027 13:20:03 +0000
asID: 269175
IP address blocks: 2804:1f4c:8800::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 27 Mar 2026 15:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:91:db:af:f6:d9:94:6c:13:4f:66:c1:73:bd:e9:49:5c:0a:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Validity
Not Before: Mar 27 13:15:03 2026 GMT
Not After : Mar 26 13:20:03 2027 GMT
Subject: CN=D3EB667C54B2531C2C1474017C0101B9DF2D1FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:49:0d:57:8b:7d:94:cd:6b:d6:66:fa:e1:
aa:cf:92:6f:cc:a2:cd:54:88:21:1b:16:68:c4:23:
25:16:78:d5:32:4e:08:80:e9:c9:76:a7:d1:5a:13:
7a:9a:b4:9a:0c:00:11:4c:b4:8b:3c:66:6a:35:f1:
be:51:ac:4e:ae:3f:ff:fc:8d:f8:a5:30:d8:09:e9:
8b:26:66:68:38:d2:20:c9:d6:dc:51:13:83:20:0b:
c7:93:fe:b9:a4:49:80:db:c5:dd:b5:b5:5e:e9:8a:
ef:11:63:84:da:3d:c9:ff:33:d3:03:b4:aa:03:5f:
24:79:a9:c2:1f:01:f7:41:a5:cf:31:16:8e:10:d2:
92:d1:fe:71:ff:c4:4c:61:33:20:ea:78:51:26:da:
d9:69:af:df:c0:58:27:b0:c8:2c:24:cc:0f:2b:6d:
86:6f:d2:23:ba:17:5c:5e:2f:90:f4:85:c5:d8:6f:
a9:44:71:07:28:8b:2d:04:91:4a:84:0c:ad:c5:46:
64:f1:7a:64:ac:0a:22:19:7f:77:5c:2f:00:06:4e:
3c:46:e5:77:fe:7a:86:b9:2b:00:16:cc:62:a7:28:
fd:06:4e:28:d4:74:be:7a:2c:4d:19:17:47:4e:77:
80:87:e4:e6:5d:90:8a:dd:46:b1:d3:bd:15:8c:c4:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:66:7C:54:B2:53:1C:2C:14:74:01:7C:01:01:B9:DF:2D:1F:D7
X509v3 Authority Key Identifier:
keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383830303a3a2f34302d3430203d3e20323639313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f4c:8800::/40
Signature Algorithm: sha256WithRSAEncryption
3d:0b:8b:75:3a:b9:28:c1:97:c1:b9:ba:75:94:82:c6:88:8c:
53:a0:10:23:63:57:41:a3:8d:83:d0:18:3e:98:30:f1:97:67:
d9:bc:80:3e:e6:17:93:13:6c:d8:52:b2:cf:96:3a:0a:7c:a3:
fc:4c:d0:3a:49:6d:9f:c6:86:90:d8:4f:14:f9:8f:58:21:51:
ea:28:f4:c1:11:1a:8c:3f:02:7a:ca:99:31:4e:c6:fb:c6:c3:
c4:64:e6:ee:d8:9a:28:bf:65:61:59:b2:62:61:bb:58:f2:98:
32:88:21:84:e4:f0:08:71:6c:b0:14:5e:b6:f7:97:31:a7:72:
d5:7f:13:10:bf:20:8b:4e:aa:4f:77:04:ab:6c:94:e3:07:8f:
7f:9e:ff:a1:89:73:fa:8e:57:f7:67:86:80:7e:2a:20:e5:c6:
15:8a:b3:43:fb:f2:9f:68:20:0c:2f:da:7a:1a:8e:34:75:f8:
b2:26:ee:0e:85:de:9d:76:b9:7b:07:a8:1b:82:be:c1:e0:aa:
d9:ac:d2:c0:a0:5b:84:32:8b:24:99:e1:28:33:15:40:5f:4a:
c4:fb:ea:5e:d9:38:d7:87:70:98:c9:1e:43:09:f4:eb:0e:d8:
98:bb:bb:32:b8:cc:59:43:42:5b:3b:26:b5:43:2b:02:22:44:
8b:75:d1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:27:21 2026 by rpki-client