Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a343030303a3a2f33342d3334203d3e20323639313832.roa
File: 323830343a363061383a343030303a3a2f33342d3334203d3e20323639313832.roa (raw, json)
Hash identifier: 0ltuE/7CFalIRO6EgiNeQx9jjrA9UB9VigGxCXslEWE=
Subject key identifier: 96:90:F0:A6:0F:E1:C4:08:74:FC:87:47:DC:6A:F1:6D:4F:9F:8B:87
Certificate issuer: /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial: 2EE9D7385CD4BCDA147E9B8B69095D872E9D131C
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a343030303a3a2f33342d3334203d3e20323639313832.roa
Signing time: Sat 10 Oct 2026 23:29:41 +0000
ROA not before: Sat 10 Oct 2026 23:24:41 +0000
ROA not after: Sat 09 Oct 2027 23:29:41 +0000
asID: 269182
IP address blocks: 2804:60a8:4000::/34 maxlen: 34
Validation: Failed, certificate revoked on Sun 11 Oct 2026 11:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e9:d7:38:5c:d4:bc:da:14:7e:9b:8b:69:09:5d:87:2e:9d:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Validity
Not Before: Oct 10 23:24:41 2026 GMT
Not After : Oct 9 23:29:41 2027 GMT
Subject: CN=9690F0A60FE1C40874FC8747DC6AF16D4F9F8B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:5a:c9:f7:44:ba:b9:f7:32:8b:d6:83:72:
d5:d2:84:2e:35:17:16:26:e4:d3:e8:c7:92:3c:8b:
55:c6:f0:f8:1b:b5:46:d0:00:37:28:58:e9:2f:0f:
16:44:73:b1:99:6b:35:71:af:da:37:7d:ad:12:0a:
f7:72:79:34:ea:ea:ac:8c:21:e1:5e:70:01:9e:a7:
38:a8:1d:eb:90:38:cf:5a:68:1a:44:48:d1:28:1a:
34:da:40:0b:38:49:66:0c:b9:b6:09:17:1d:0c:7f:
ec:6e:82:a0:04:18:90:d3:6e:65:bb:ab:a4:80:2b:
a3:45:9d:7b:d8:1c:35:7f:43:0b:fa:b8:5c:98:c6:
03:df:cb:43:8d:61:48:82:ab:9d:91:4b:ae:f1:14:
c5:c5:c7:aa:1e:16:e0:3d:7e:e1:1d:d4:33:10:e7:
33:7f:05:e2:70:15:89:e1:46:25:27:63:5e:c2:13:
fe:ee:e6:52:52:7b:df:e5:39:39:81:27:13:69:27:
22:25:2c:33:d1:7b:83:0f:87:91:e2:b5:35:04:7e:
82:75:66:58:12:56:0a:05:d1:1c:cf:7e:be:e2:f2:
43:8b:42:21:19:ac:44:57:ad:98:46:50:87:1d:d3:
c7:b0:66:ca:cf:4b:03:54:ed:66:bb:3a:92:74:65:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:F0:A6:0F:E1:C4:08:74:FC:87:47:DC:6A:F1:6D:4F:9F:8B:87
X509v3 Authority Key Identifier:
keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a343030303a3a2f33342d3334203d3e20323639313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60a8:4000::/34
Signature Algorithm: sha256WithRSAEncryption
4f:e4:f3:04:85:80:65:c2:45:4b:f8:0a:50:d9:07:d2:a9:22:
88:ec:aa:03:f3:a1:ab:fb:a8:d3:82:06:d7:1f:84:5d:4f:66:
86:12:ee:7f:46:5d:13:e3:dd:e6:7c:8c:6f:13:5b:05:23:93:
11:a7:79:25:d2:ce:42:6f:f5:2d:00:ef:3c:7c:12:38:e4:3d:
d0:87:1e:12:71:7f:4b:ee:c3:68:6a:e7:90:f4:67:cc:ab:10:
93:03:71:bf:7b:65:63:7c:b4:7d:93:26:b8:f3:af:05:07:73:
68:d3:3a:8c:2e:41:2c:e4:4c:87:8f:cb:03:d5:e2:8f:8a:07:
d5:ab:d2:44:86:88:3f:83:57:23:d3:16:ae:85:72:b8:38:f4:
ca:2e:f1:29:98:fc:00:dd:38:90:be:a3:a9:67:d7:8e:31:bb:
e5:8a:8d:84:d6:5d:77:63:23:74:43:8b:a1:cf:24:1f:64:a3:
aa:af:b1:77:0f:c4:de:41:52:e9:34:a2:0c:38:0d:e5:c5:59:
23:1d:11:d5:75:8c:68:16:76:91:64:df:64:00:b7:dc:4a:83:
73:d1:ce:46:59:24:9a:90:0b:98:7c:d8:5a:31:9a:07:b2:99:
3c:43:95:82:bf:67:a3:a0:a7:4b:cf:df:89:c2:0a:01:ff:1c:
d9:15:30:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULunXOFzUvNoUfpuLaQldhy6dExwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3MUI1MjZBNDUxRTJFRUZGMEZGQ0FDRjQ2QkJDMkJD
NzREODkwNjAeFw0yNjEwMTAyMzI0NDFaFw0yNzEwMDkyMzI5NDFaMDMxMTAvBgNV
BAMTKDk2OTBGMEE2MEZFMUM0MDg3NEZDODc0N0RDNkFGMTZENEY5RjhCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAlrJ90S6ufcyi9aDctXShC41
FxYm5NPox5I8i1XG8PgbtUbQADcoWOkvDxZEc7GZazVxr9o3fa0SCvdyeTTq6qyM
IeFecAGepzioHeuQOM9aaBpESNEoGjTaQAs4SWYMubYJFx0Mf+xugqAEGJDTbmW7
q6SAK6NFnXvYHDV/Qwv6uFyYxgPfy0ONYUiCq52RS67xFMXFx6oeFuA9fuEd1DMQ
5zN/BeJwFYnhRiUnY17CE/7u5lJSe9/lOTmBJxNpJyIlLDPRe4MPh5HitTUEfoJ1
ZlgSVgoF0RzPfr7i8kOLQiEZrERXrZhGUIcd08ewZsrPSwNU7Wa7OpJ0ZT5vAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlpDwpg/hxAh0/IdH3GrxbU+fi4cwHwYDVR0j
BBgwFoAUZXG1JqRR4u7/D/ys9Gu8K8dNiQYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODV4TTNlaWc0ZUFjWk1pVTFrNlJNYkVCZUhzV2RIZENRaURlWDF4ZVJZ
cWEvMC82NTcxQjUyNkE0NTFFMkVFRkYwRkZDQUNGNDZCQkMyQkM3NEQ4OTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1NzFCNTI2QTQ1MUUyRUVG
RjBGRkNBQ0Y0NkJCQzJCQzc0RDg5MDYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1eE0zZWlnNGVBY1pNaVUxazZSTWJFQmVIc1dkSGRDUWlEZVgxeGVSWXFhLzAv
MzIzODMwMzQzYTM2MzA2MTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTMxMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEYKhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBP5PMEhYBlwkVL+ApQ2QfSqSKI7KoD86Gr+6jTggbXH4RdT2aGEu5/Rl0T
493mfIxvE1sFI5MRp3kl0s5Cb/UtAO88fBI45D3Qhx4ScX9L7sNoaueQ9GfMqxCT
A3G/e2VjfLR9kya4868FB3No0zqMLkEs5EyHj8sD1eKPigfVq9JEhog/g1cj0xau
hXK4OPTKLvEpmPwA3TiQvqOpZ9eOMbvlio2E1l13YyN0Q4uhzyQfZKOqr7F3D8Te
QVLpNKIMOA3lxVkjHRHVdYxoFnaRZN9kALfcSoNz0c5GWSSakAuYfNhaMZoHspk8
Q5WCv2ejoKdLz9+JwgoB/xzZFTAV
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:06:15 2026 by rpki-client