Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138382e302f32332d3233203d3e203532363730.roa
File: 3137372e36372e3138382e302f32332d3233203d3e203532363730.roa (raw, json)
Hash identifier: LzSxWtsCKgY5IkPrO1v+8N2djmK7xzm4npo5TKHtKxU=
Subject key identifier: D9:AC:73:0B:37:AA:B4:38:F6:33:1D:9D:A8:DA:ED:20:3C:34:F0:CB
Certificate issuer: /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial: 143AECC479D9ECBD446569E0C0255F6AC000920B
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138382e302f32332d3233203d3e203532363730.roa
Signing time: Tue 20 Jan 2026 13:13:26 +0000
ROA not before: Tue 20 Jan 2026 13:08:26 +0000
ROA not after: Tue 19 Jan 2027 13:13:26 +0000
asID: 52670
IP address blocks: 177.67.188.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Jan 2026 13:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3a:ec:c4:79:d9:ec:bd:44:65:69:e0:c0:25:5f:6a:c0:00:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Validity
Not Before: Jan 20 13:08:26 2026 GMT
Not After : Jan 19 13:13:26 2027 GMT
Subject: CN=D9AC730B37AAB438F6331D9DA8DAED203C34F0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:bd:16:0a:93:27:bd:9a:34:a7:7f:bd:18:
b8:ca:3f:cf:e5:b2:f6:86:c8:6d:14:80:da:92:92:
bf:48:8a:9b:c7:b0:7e:98:5b:f1:dd:de:5d:6e:72:
b8:7f:c6:05:22:ed:8c:43:65:72:31:04:48:4a:eb:
73:aa:8c:75:bb:fa:7e:57:90:e0:56:43:9e:b2:8e:
e7:06:eb:28:63:31:0d:3f:f7:65:22:af:cb:51:39:
25:43:70:ae:b6:ca:f2:e5:8b:9d:e8:23:8b:bd:12:
9b:9d:91:4f:1c:db:2a:8d:14:a7:5f:f4:2d:8f:0d:
ed:ce:af:c5:87:18:43:a5:8f:a8:fa:5d:7e:3d:28:
f3:6d:be:e1:3b:b2:f4:13:80:7c:c9:c1:11:c0:d4:
8e:f4:09:c1:f5:20:04:cd:5f:fa:51:f8:55:eb:03:
87:44:ab:62:bc:c2:36:88:e5:63:67:af:40:31:94:
cb:8d:81:4b:f7:3d:46:a0:93:dd:0a:da:94:fd:4f:
6e:75:de:b5:b7:ac:67:37:29:f1:e4:fc:e7:6a:9f:
02:2a:3b:0f:32:39:7b:ea:ac:d3:d5:42:2e:73:05:
a0:b3:6e:bf:8b:6e:7e:7d:61:c8:55:81:18:a5:db:
fb:72:f0:ea:8b:aa:3b:23:6a:ea:f8:d9:98:1a:6a:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AC:73:0B:37:AA:B4:38:F6:33:1D:9D:A8:DA:ED:20:3C:34:F0:CB
X509v3 Authority Key Identifier:
keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3138382e302f32332d3233203d3e203532363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.188.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ad:21:d4:0e:24:45:4b:3d:05:5d:e6:7a:d8:a8:61:c3:7d:
44:84:35:79:fd:7d:70:73:e2:9d:38:f6:dc:ee:18:4b:69:35:
e0:49:9f:e3:d1:ff:27:3d:2c:f2:93:dc:6a:8b:84:67:5e:20:
01:a4:f7:1a:32:ed:36:c7:c9:bf:d5:69:1c:e1:ef:d9:40:ab:
8d:2a:11:1b:cf:ce:05:ff:08:e0:36:52:bc:23:0b:7d:ea:64:
67:70:fb:c4:73:e2:c3:b8:4f:f2:1f:cc:44:53:b8:96:51:82:
5b:2c:ed:4e:db:cd:cb:c9:8f:52:5f:9d:01:64:c7:8d:8e:22:
be:60:de:69:09:4c:ca:26:29:1a:de:f7:5d:44:37:f1:77:7e:
3b:7d:b5:71:37:13:e8:2c:9d:b1:79:4c:90:9c:7a:7a:93:b6:
eb:70:79:b7:a4:3a:0a:bc:66:d3:11:21:c2:12:0d:9f:3c:9d:
40:59:05:47:9e:f7:c3:b4:bb:00:28:9a:1a:1f:a1:8c:57:1b:
79:b1:f2:58:c4:e8:f8:58:a5:dd:a1:f8:c5:6c:d8:93:fb:9c:
1d:0b:8b:3b:ac:39:77:c1:8c:b3:68:18:aa:d9:62:04:b5:61:
e4:62:d4:10:50:dd:7f:57:fc:f1:4b:b3:7c:2d:fb:6e:f2:8f:
87:ab:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:45:36 2026 by rpki-client