Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
File: 323830343a6165303a3a2f33322d3332203d3e203238333532.roa (raw, json)
Hash identifier: kbMon+tTBTfUhwwJFvY17NwE40a+bblD09GOJ1NNH9c=
Subject key identifier: 89:1B:C6:D3:AE:76:9B:6C:A0:89:BF:6C:2B:EC:9C:A8:96:D3:C0:DF
Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial: 0715EDF77BDBF073D7CCB215D27D60B21F37A8B6
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
Signing time: Tue 06 Jan 2026 12:23:33 +0000
ROA not before: Tue 06 Jan 2026 12:18:33 +0000
ROA not after: Tue 05 Jan 2027 12:23:33 +0000
asID: 28352
IP address blocks: 2804:ae0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Jan 2026 18:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:15:ed:f7:7b:db:f0:73:d7:cc:b2:15:d2:7d:60:b2:1f:37:a8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Validity
Not Before: Jan 6 12:18:33 2026 GMT
Not After : Jan 5 12:23:33 2027 GMT
Subject: CN=891BC6D3AE769B6CA089BF6C2BEC9CA896D3C0DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:04:a1:13:b0:40:e8:85:ea:c3:04:3d:e9:
06:6c:21:b3:19:7c:1b:67:b7:c8:34:ce:26:7c:78:
76:2d:42:2f:d5:00:d1:b4:f6:74:18:26:71:7b:59:
27:b4:96:bd:b5:7f:57:31:0f:0a:75:80:b9:4b:93:
ab:f0:00:18:cb:8e:51:1e:3f:36:3c:20:20:7b:b1:
8f:0b:2c:fb:cf:b9:7d:91:61:79:60:6b:77:47:57:
ce:6a:cb:2e:56:34:c7:76:a6:88:a2:f5:fd:d2:68:
b4:33:49:bf:74:3f:40:05:8d:df:bd:08:3e:32:32:
20:7e:1a:25:de:90:8f:df:01:33:d4:ac:b9:00:bb:
3d:b3:01:f0:22:b5:68:da:8b:0e:f6:7e:63:4c:50:
1b:b0:4d:6d:60:74:c5:4f:e3:d7:a6:91:69:12:00:
3b:58:33:30:2c:b0:a2:1b:3a:9f:36:bd:55:95:8b:
27:97:06:cc:14:5e:fa:e0:a9:f0:89:dc:c6:37:d0:
1a:f7:4a:98:d9:c7:f5:d8:35:a2:14:23:e3:a2:40:
79:26:65:51:6b:87:b5:18:4a:42:eb:94:6d:ad:1f:
bf:94:30:ab:25:7c:09:28:7d:4e:a0:7c:c7:2c:d0:
dd:aa:9d:df:16:cb:2e:42:26:65:79:fa:7a:96:fc:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:C6:D3:AE:76:9B:6C:A0:89:BF:6C:2B:EC:9C:A8:96:D3:C0:DF
X509v3 Authority Key Identifier:
keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:fe:01:25:00:08:de:04:51:da:8a:9a:41:0c:fa:e6:32:7c:
2a:ed:0d:14:5e:86:98:a2:bc:3c:4e:fb:b6:60:a4:8d:94:b9:
a3:6c:80:13:a3:96:3c:7d:29:26:7d:d8:d7:a9:14:98:08:10:
70:df:96:32:ec:0a:e5:6a:cd:fd:58:4e:e3:60:b8:ae:4e:d4:
2d:be:a1:46:93:ae:f1:b9:4e:c7:79:b7:46:70:98:21:e9:c1:
e7:f0:ee:bf:68:61:0a:d6:da:7e:20:69:90:53:0a:1b:54:81:
f6:4c:c1:d2:cd:7a:fb:64:0f:e9:91:57:d8:bb:ef:e2:3e:b4:
ab:ef:82:1e:e6:89:74:45:32:75:b7:87:63:1d:75:78:69:aa:
f2:f1:1c:15:bb:54:bf:dc:37:60:b4:4b:1a:2a:b2:e1:d8:fa:
80:54:d3:01:03:05:22:71:d5:ab:11:d6:10:5f:83:f3:60:c5:
67:4e:aa:b5:db:48:99:e9:ef:d3:26:40:ac:fc:6d:57:8e:d8:
7b:fd:f5:86:54:ef:92:ae:a3:f4:72:da:a6:6d:08:0f:79:cb:
57:d4:d5:ff:3b:31:6d:f8:ba:2a:31:46:16:aa:bf:11:1d:84:
bc:e6:0f:e9:01:ec:28:b6:e9:df:1d:08:12:3a:2f:05:55:4a:
02:24:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:25:01 2026 by rpki-client