Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
File: 323830343a313736383a3a2f33332d3333203d3e20323633313434.roa (raw, json)
Hash identifier: yccTNFjNTMV5j+zb1m9Iim5XOiV8l1cIDq4Y5XlwZVs=
Subject key identifier: 5F:96:AA:E9:12:23:1D:79:6A:18:6E:74:45:E5:2B:5B:82:5C:05:3E
Certificate issuer: /CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
Certificate serial: 1748C11684A8F238E20D98EFD1EC47512D405CF8
Authority key identifier: FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
Signing time: Wed 28 Jan 2026 15:02:34 +0000
ROA not before: Wed 28 Jan 2026 14:57:34 +0000
ROA not after: Wed 27 Jan 2027 15:02:34 +0000
asID: 263144
IP address blocks: 2804:1768::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 05 Feb 2026 23:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:48:c1:16:84:a8:f2:38:e2:0d:98:ef:d1:ec:47:51:2d:40:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
Validity
Not Before: Jan 28 14:57:34 2026 GMT
Not After : Jan 27 15:02:34 2027 GMT
Subject: CN=5F96AAE912231D796A186E7445E52B5B825C053E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:6e:0f:cc:a9:ab:39:8c:94:cf:84:b4:c7:
82:c0:21:14:84:4f:fa:2f:ce:38:7c:19:2b:d6:c6:
fd:aa:35:e0:2a:05:1b:ee:f3:d3:66:a7:a8:75:46:
8c:a9:f0:ec:98:e9:28:71:ff:45:98:58:64:c0:ec:
99:7d:6b:b7:81:84:ac:1d:86:33:cb:f0:ce:c4:ce:
6d:3c:31:37:23:f1:c0:5d:5a:e5:0f:15:b6:69:85:
e2:04:a2:cf:5c:78:04:71:fd:7e:9f:ac:5a:64:d3:
5f:a8:30:f8:16:90:8a:e2:7f:fd:db:30:aa:19:35:
d3:9b:d6:48:b7:4c:31:4f:75:34:0a:d5:65:82:97:
ef:4b:48:1c:61:27:49:a0:ee:35:bb:9b:c5:cc:93:
15:f6:60:60:48:91:bc:19:27:19:47:c0:c5:9f:19:
93:63:2c:8d:d8:b7:e1:26:ee:14:64:c8:9e:95:b4:
f0:4d:9b:f5:5d:2c:6a:69:9b:9f:53:79:de:35:99:
6b:de:8a:43:1a:e2:93:61:24:22:b2:83:a7:ab:19:
fb:55:a3:8e:7e:0a:77:c2:47:b3:76:18:69:1b:66:
7b:67:d7:a0:34:f3:3b:a2:4e:65:d7:e7:d3:c6:28:
45:70:7d:8d:88:5c:a0:4f:fb:2a:09:74:af:5d:4a:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:AA:E9:12:23:1D:79:6A:18:6E:74:45:E5:2B:5B:82:5C:05:3E
X509v3 Authority Key Identifier:
keyid:FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/323830343a313736383a3a2f33332d3333203d3e20323633313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1768::/33
Signature Algorithm: sha256WithRSAEncryption
7f:c6:67:a8:14:b5:4f:47:8f:ed:3b:da:13:4c:78:d5:96:51:
0c:9e:46:20:95:88:69:46:fe:65:7d:fb:81:09:c5:27:3c:c3:
76:56:3a:3b:d2:8a:be:bc:14:55:cf:03:25:3e:c6:f6:9e:4c:
f0:9b:77:51:d8:2b:a5:d0:a2:c2:01:80:2c:7f:8a:39:5a:bd:
e8:60:be:9f:0b:8b:aa:3e:ad:80:f5:b8:98:2b:e0:ea:81:37:
ad:ec:ca:c9:17:0f:14:73:9a:da:76:9f:7e:4f:87:c3:5f:30:
e1:58:46:dd:e4:be:fe:02:a7:5e:2e:c5:34:3c:0a:f9:10:e2:
e0:5a:f7:24:c7:f6:20:f2:d1:c7:47:ca:c9:1a:15:7d:56:6f:
93:b3:1f:af:55:30:c9:5a:c4:fb:26:d8:7c:32:3e:bd:cd:fa:
ed:d1:cc:db:28:22:d1:f4:0a:f3:55:79:ce:d7:4d:e3:dc:86:
8a:58:8e:89:15:63:14:fb:9e:19:47:6d:dc:3f:17:6f:72:8e:
93:7f:89:37:84:ad:25:2f:61:c4:85:fc:68:63:ce:93:01:cc:
0b:c4:0b:ce:6d:eb:37:09:80:c3:7b:cb:66:c8:66:99:02:98:
39:c7:00:5c:35:02:47:88:20:70:23:ef:0e:88:98:2d:e3:4a:
45:bd:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:11 2026 by rpki-client