Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3139302e302f32332d3233203d3e203532363730.roa
File: 3137372e36372e3139302e302f32332d3233203d3e203532363730.roa (raw, json)
Hash identifier: 5SGrhTJOiEWZq0DemszGbmcr0BQlkIkrKweIo4lx/lE=
Subject key identifier: 7C:E0:9A:33:76:A1:2F:88:80:B5:66:8C:DD:7B:4C:07:DC:CD:64:82
Certificate issuer: /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial: 3BCCF4A400865F3AF353B698E2BF99F6538FB8E4
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3139302e302f32332d3233203d3e203532363730.roa
Signing time: Tue 20 Jan 2026 13:13:26 +0000
ROA not before: Tue 20 Jan 2026 13:08:26 +0000
ROA not after: Tue 19 Jan 2027 13:13:26 +0000
asID: 52670
IP address blocks: 177.67.190.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Jan 2026 13:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cc:f4:a4:00:86:5f:3a:f3:53:b6:98:e2:bf:99:f6:53:8f:b8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Validity
Not Before: Jan 20 13:08:26 2026 GMT
Not After : Jan 19 13:13:26 2027 GMT
Subject: CN=7CE09A3376A12F8880B5668CDD7B4C07DCCD6482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:d6:40:ee:77:bf:f7:43:a0:b5:4c:a8:f0:
34:0b:dc:9c:a3:f7:58:63:28:2e:83:3c:b1:fe:4c:
a4:ed:13:51:3f:73:d7:5f:36:66:d7:9c:97:bd:40:
3f:32:79:da:1f:c4:83:cb:a7:2d:c2:f7:72:f0:72:
09:4f:78:9f:06:7c:21:88:3b:68:7c:93:f0:cc:44:
7d:e7:c2:6f:54:42:8a:79:2e:52:22:c2:12:f4:c9:
8a:b0:ab:f7:96:96:10:a8:71:f1:86:10:cd:dc:af:
1c:62:4c:05:79:79:50:44:67:f1:1d:b8:9e:e7:11:
7f:c9:17:a5:cd:ac:4d:89:85:6c:d0:45:6d:79:34:
e1:86:bb:aa:f2:0e:d3:06:a2:52:db:0c:3e:42:c2:
ff:be:3d:59:53:93:a5:74:da:0e:1e:24:dc:90:c5:
66:58:cf:52:09:cd:e8:b3:83:50:fb:ce:56:b8:40:
eb:cb:04:cd:c8:54:dc:2f:21:0f:8c:66:02:4a:8d:
68:db:ec:6c:e7:b8:47:2f:68:b0:d3:c4:f3:8e:be:
da:14:50:25:70:3e:1d:f0:9c:30:c9:cb:f0:3d:2a:
e4:0d:ec:27:c7:6b:7d:47:d7:30:b8:4c:bf:b1:e7:
6f:eb:88:5d:e4:59:0e:30:2c:9f:19:a6:4f:da:aa:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:9A:33:76:A1:2F:88:80:B5:66:8C:DD:7B:4C:07:DC:CD:64:82
X509v3 Authority Key Identifier:
keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137372e36372e3139302e302f32332d3233203d3e203532363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f1:5f:e0:72:d4:3f:8e:cf:e2:14:9a:b5:64:56:a3:32:68:
0f:f7:3b:f9:ee:d3:93:c8:cb:a1:ae:dd:0c:f4:0c:43:65:3c:
77:7f:0f:5f:11:ba:a7:0b:0c:a6:56:95:4f:8e:3c:c2:bb:1a:
d9:70:ad:a9:ae:13:ac:e2:4f:a4:9b:e3:e9:21:43:de:d2:72:
b1:ab:7a:1d:23:5b:d1:7a:35:82:63:75:14:a7:04:22:0f:1b:
6c:be:97:35:07:ba:ce:e4:5b:0f:42:76:23:c3:f6:9f:6b:ae:
6e:0f:9e:d7:dd:59:e9:6e:ca:09:6f:74:4a:97:8a:be:07:48:
b8:11:de:6e:e5:ad:cb:c1:88:ce:90:d8:3e:b5:13:c5:71:8a:
21:94:b9:61:83:8d:54:49:1f:dd:28:85:ec:53:35:c2:c5:54:
21:58:57:5e:d7:16:fd:c1:0b:a0:8c:2c:7f:51:af:e7:8b:52:
b3:77:be:87:eb:76:a4:a3:0b:88:0d:78:67:41:24:ad:ca:78:
73:eb:ab:26:bd:0e:ce:bb:2e:8b:9f:27:ad:6d:2b:64:26:fd:
31:d2:49:b6:eb:a7:96:97:d7:06:0c:f2:03:a6:9a:22:a5:61:
ea:6d:73:45:fb:f4:ac:57:a7:97:fa:41:4b:28:a9:0c:e9:1a:
02:3c:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:15:39 2026 by rpki-client