Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa
File: 323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa (raw, json)
Hash identifier: q6nHWQaQfBoaN1xa34p6Asn28FsuFyginm+b37I+pTc=
Subject key identifier: CC:1B:12:D9:B8:C3:9D:9A:96:30:03:58:D0:AF:8A:B8:2B:57:98:15
Certificate issuer: /CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
Certificate serial: 23ABF85D95C0141FA013880E9FBB863B4BD744F4
Authority key identifier: FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa
Signing time: Wed 28 Jan 2026 15:02:38 +0000
ROA not before: Wed 28 Jan 2026 14:57:38 +0000
ROA not after: Wed 27 Jan 2027 15:02:38 +0000
asID: 263144
IP address blocks: 2804:1768:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 05 Feb 2026 23:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ab:f8:5d:95:c0:14:1f:a0:13:88:0e:9f:bb:86:3b:4b:d7:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
Validity
Not Before: Jan 28 14:57:38 2026 GMT
Not After : Jan 27 15:02:38 2027 GMT
Subject: CN=CC1B12D9B8C39D9A96300358D0AF8AB82B579815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:7d:73:75:51:5d:c9:1d:cd:cd:0d:7e:c8:
a0:98:a3:44:65:28:8c:7b:d3:75:40:9e:9f:4f:44:
ec:fd:f7:06:a9:a4:ad:6c:16:14:52:ee:19:24:4d:
f6:6b:1a:5b:95:4c:ce:ef:98:6c:a9:d4:29:5d:59:
39:79:ef:ab:51:1e:91:38:95:a6:ef:98:56:17:74:
b0:a8:04:b9:88:d2:2c:8a:5c:61:aa:5c:be:31:e2:
e5:69:9d:f0:80:a1:af:68:1f:22:a2:51:c4:78:5b:
05:a3:18:8d:6a:64:1f:82:86:57:d3:93:04:7b:bd:
b7:4d:ca:56:9b:e3:15:24:73:47:67:33:da:19:01:
86:20:b5:6b:30:2e:10:17:0d:4f:41:8a:4d:2f:83:
3d:e7:d2:8c:ce:07:b1:82:70:a9:89:ee:7f:d6:51:
d3:97:97:06:d6:df:3a:4e:38:5b:e0:d4:48:a5:a9:
b6:14:4e:e7:0d:54:1f:46:5e:c2:61:a7:27:b0:a3:
92:a8:7a:a5:03:97:70:7b:87:82:5d:0c:cf:ba:88:
ad:2c:2b:05:bf:e0:44:ca:98:32:e5:9d:a7:39:10:
07:8a:1b:94:3f:44:97:f3:b1:70:25:7f:59:2b:50:
21:10:bb:72:4a:78:38:30:35:20:97:0b:a4:f5:bf:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1B:12:D9:B8:C3:9D:9A:96:30:03:58:D0:AF:8A:B8:2B:57:98:15
X509v3 Authority Key Identifier:
keyid:FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1768:8000::/33
Signature Algorithm: sha256WithRSAEncryption
19:e8:68:9b:7a:ea:c3:3f:48:1f:8e:a8:3b:b8:07:7d:d7:89:
0d:44:13:dc:69:83:47:50:24:ea:05:43:d0:9d:1c:aa:ca:74:
34:62:c5:f6:a9:0b:ae:91:28:ea:ec:11:2a:a2:38:ec:49:cc:
b4:79:5b:7d:a5:1f:98:18:9b:7c:92:97:7b:b6:f5:c2:0b:2e:
27:8e:b4:c3:6a:df:ac:70:09:5e:cb:80:75:a9:39:cb:22:6c:
35:78:ff:1c:ce:8d:9d:1e:a0:27:24:2a:ea:50:1d:7c:00:8d:
f0:33:71:ff:87:c2:44:52:b5:b0:08:f9:cd:02:2d:e8:af:31:
af:ea:06:66:e2:df:fd:9b:0a:f0:b9:f8:92:1f:72:84:d0:b9:
98:21:1f:2f:85:b5:f0:72:d1:84:0d:86:4d:fa:33:4d:0f:c8:
5d:be:67:5d:0a:06:85:2c:6b:20:9a:3a:16:6a:25:94:f6:4b:
03:68:f3:5a:7b:4d:03:43:8e:79:fe:c4:91:c0:ae:a5:f0:99:
97:67:ee:9c:cc:02:5b:bc:2d:70:ea:c4:2c:2d:8b:b2:1b:87:
13:b0:9a:e4:3f:3e:01:f0:a0:c3:90:c4:24:b8:cc:7e:ca:12:
a2:ea:53:cc:bc:34:65:90:93:07:20:21:0d:ff:1c:b0:93:58:
b5:4d:3d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:18 2026 by rpki-client