Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa
File: 3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa (raw, json)
Hash identifier: uGc16ZfkmqB7XwJi4olYnQpnlWMtoKtYV4TkK5EVMMk=
Subject key identifier: 2C:AA:78:3E:91:D4:52:CA:BA:4B:ED:2E:BB:6E:37:53:25:39:7F:5E
Certificate issuer: /CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
Certificate serial: 33D86004AB0A2D309F498B929ECFBEF85CB92107
Authority key identifier: D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa
Signing time: Fri 28 Aug 2026 13:29:08 +0000
ROA not before: Fri 28 Aug 2026 13:24:08 +0000
ROA not after: Fri 27 Aug 2027 13:29:08 +0000
asID: 263078
IP address blocks: 170.244.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Aug 2026 13:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d8:60:04:ab:0a:2d:30:9f:49:8b:92:9e:cf:be:f8:5c:b9:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
Validity
Not Before: Aug 28 13:24:08 2026 GMT
Not After : Aug 27 13:29:08 2027 GMT
Subject: CN=2CAA783E91D452CABA4BED2EBB6E375325397F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:a0:e5:b9:15:ec:cc:71:4c:f7:e6:8e:93:
4b:52:76:4c:1c:3e:17:c4:a4:c1:94:e4:23:06:d5:
44:ba:e8:59:a6:3a:a7:d5:70:e8:03:a2:ea:1a:69:
09:20:0b:1f:1a:b0:94:d3:65:26:45:fb:5c:e6:58:
d2:4b:58:bf:52:2b:9b:39:74:86:e8:ee:f0:53:8c:
c7:e5:7a:21:2b:de:17:7c:ac:68:2a:85:d8:33:6c:
07:fc:15:63:45:b3:a4:02:25:c0:bd:8e:f5:17:43:
2c:fe:bc:f5:d1:72:71:a6:8c:ed:e8:8b:11:e2:8c:
51:5b:ed:45:d9:71:47:b6:a9:c7:31:7b:fd:09:63:
76:28:05:08:f8:d5:9c:76:ac:50:54:e0:b0:9b:b1:
6d:7a:2b:c5:5d:d7:33:73:70:a8:70:f9:6c:70:3d:
f5:af:42:e8:11:66:a5:e6:60:02:17:99:a9:0a:d0:
63:84:f7:89:fc:0a:8a:8b:63:84:5d:ab:75:ca:e6:
1d:a9:10:d8:e8:9c:93:f5:9b:7c:0c:98:65:51:83:
4b:45:d8:01:69:10:93:c3:94:5d:6e:5b:8e:f1:3a:
a1:97:f0:36:77:0d:23:a8:38:c8:2b:3f:3f:7c:24:
c5:c8:f2:db:f1:1a:9b:81:49:25:4e:c5:e9:ad:d9:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:78:3E:91:D4:52:CA:BA:4B:ED:2E:BB:6E:37:53:25:39:7F:5E
X509v3 Authority Key Identifier:
keyid:D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133342e302f32342d3234203d3e20323633303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:73:4d:61:f3:66:50:3c:a9:30:a4:a6:28:48:00:97:87:ba:
eb:b7:e8:55:d1:cd:4f:04:3e:72:fd:b1:46:9d:72:00:84:44:
f2:14:ff:db:f8:90:80:cc:b8:78:d5:4d:70:76:97:cb:da:ff:
a2:0a:b3:21:68:71:4a:8e:8d:54:15:f8:be:e0:69:29:b5:70:
c2:76:8c:f9:41:e4:0b:a4:21:d5:8c:71:56:44:cb:ce:59:fa:
22:0e:42:f1:cb:ca:5b:b9:73:5a:84:7d:55:79:ca:ca:d7:d1:
17:18:45:b6:1a:f9:50:09:77:78:83:2a:38:b6:bf:db:37:b9:
4f:5e:7e:dc:4e:8b:35:71:e4:a0:5d:19:38:ff:d6:03:ed:ff:
f1:7b:92:25:3c:86:6c:46:3f:f6:0d:ef:d3:e4:80:98:80:22:
5b:02:79:2d:5c:69:48:70:30:ae:c6:08:9b:59:1e:2a:5e:1c:
bf:fb:7c:16:e7:b3:c3:58:00:be:03:90:25:07:56:89:38:67:
a2:78:6c:b4:16:e9:ab:67:3f:87:06:9b:e8:06:63:ac:6a:8f:
5b:d8:ed:9e:0f:f1:4b:91:49:87:96:9a:83:6b:10:36:8e:04:
c7:a8:f1:5e:b4:eb:75:40:24:cd:6e:fb:b2:71:2f:20:d8:6e:
6d:4b:26:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM9hgBKsKLTCfSYuSns+++Fy5IQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUwMzZBRkUzRjBCODA0REEyNDJGODU1RDU1RjdDNDY3
QTlCRjQ5MzAeFw0yNjA4MjgxMzI0MDhaFw0yNzA4MjcxMzI5MDhaMDMxMTAvBgNV
BAMTKDJDQUE3ODNFOTFENDUyQ0FCQTRCRUQyRUJCNkUzNzUzMjUzOTdGNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+qDluRXszHFM9+aOk0tSdkwc
PhfEpMGU5CMG1US66FmmOqfVcOgDouoaaQkgCx8asJTTZSZF+1zmWNJLWL9SK5s5
dIbo7vBTjMfleiEr3hd8rGgqhdgzbAf8FWNFs6QCJcC9jvUXQyz+vPXRcnGmjO3o
ixHijFFb7UXZcUe2qccxe/0JY3YoBQj41Zx2rFBU4LCbsW16K8Vd1zNzcKhw+Wxw
PfWvQugRZqXmYAIXmakK0GOE94n8CoqLY4Rdq3XK5h2pENjonJP1m3wMmGVRg0tF
2AFpEJPDlF1uW47xOqGX8DZ3DSOoOMgrPz98JMXI8tvxGpuBSSVOxemt2e1ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULKp4PpHUUsq6S+0uu243UyU5f14wHwYDVR0j
BBgwFoAU1QNq/j8LgE2iQvhV1V98Rnqb9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZIdmF5MkQ0eWZBaXpKN1Z0M3FuM29VeFZ4M1hqQXNHUXVCc3d0SHpQ
aVQvMC9ENTAzNkFGRTNGMEI4MDREQTI0MkY4NTVENTVGN0M0NjdBOUJGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MDM2QUZFM0YwQjgwNERB
MjQyRjg1NUQ1NUY3QzQ2N0E5QkY0OTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2SHZheTJENHlmQWl6SjdWdDNxbjNvVXhWeDNYakFzR1F1QnN3dEh6UGlULzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr0hjANBgkqhkiG9w0BAQsFAAOCAQEAxHNN
YfNmUDypMKSmKEgAl4e667foVdHNTwQ+cv2xRp1yAIRE8hT/2/iQgMy4eNVNcHaX
y9r/ogqzIWhxSo6NVBX4vuBpKbVwwnaM+UHkC6Qh1YxxVkTLzln6Ig5C8cvKW7lz
WoR9VXnKytfRFxhFthr5UAl3eIMqOLa/2ze5T15+3E6LNXHkoF0ZOP/WA+3/8XuS
JTyGbEY/9g3v0+SAmIAiWwJ5LVxpSHAwrsYIm1keKl4cv/t8Fuezw1gAvgOQJQdW
iThnonhstBbpq2c/hwab6AZjrGqPW9jtng/xS5FJh5aag2sQNo4Ex6jxXrTrdUAk
zW77snEvINhubUsm3g==
-----END CERTIFICATE-----
Generated at Tue Nov 3 10:09:18 2026 by rpki-client