Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a383030303a3a2f33342d3334203d3e20323639313832.roa
File: 323830343a363061383a383030303a3a2f33342d3334203d3e20323639313832.roa (raw, json)
Hash identifier: 8jdFJA4nTyF06hWhcEjnt8bx3kg5PllfbtRyTDSC5ik=
Subject key identifier: 38:06:24:8C:96:D9:1B:9C:46:F9:A0:EF:1E:5D:D1:5A:8A:D0:AB:8B
Certificate issuer: /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial: 3A4080804E472A5F5520D610526FD1B723C2280F
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a383030303a3a2f33342d3334203d3e20323639313832.roa
Signing time: Sat 10 Oct 2026 23:29:59 +0000
ROA not before: Sat 10 Oct 2026 23:24:59 +0000
ROA not after: Sat 09 Oct 2027 23:29:59 +0000
asID: 269182
IP address blocks: 2804:60a8:8000::/34 maxlen: 34
Validation: Failed, certificate revoked on Sun 11 Oct 2026 11:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:40:80:80:4e:47:2a:5f:55:20:d6:10:52:6f:d1:b7:23:c2:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Validity
Not Before: Oct 10 23:24:59 2026 GMT
Not After : Oct 9 23:29:59 2027 GMT
Subject: CN=3806248C96D91B9C46F9A0EF1E5DD15A8AD0AB8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:f9:b3:09:8a:53:09:68:67:40:9f:65:21:
4d:59:ea:eb:7b:02:c7:a4:97:ac:8b:ba:90:38:4d:
5e:1b:87:94:1c:69:80:f5:a1:12:fc:b3:b9:94:5b:
b1:ac:a7:59:24:6e:08:80:1d:a1:84:c9:dd:6d:db:
ea:67:fd:c7:92:33:f1:f6:6e:e6:40:a4:e0:05:24:
17:7d:5d:47:f4:86:57:2b:c4:88:4f:62:6f:61:ae:
a7:fa:f1:ec:3b:13:ab:d7:64:95:79:4d:0e:0d:13:
6a:ae:bc:02:8a:0a:0e:23:bf:07:d2:7c:3e:8d:df:
1a:10:11:24:2b:10:10:1e:20:28:73:11:89:31:25:
d3:85:8b:90:ee:46:d8:7d:d7:db:a3:ce:8c:36:8a:
f6:14:78:45:3d:4c:49:47:83:c5:f2:30:eb:d2:ce:
58:1d:0f:fe:16:4c:88:da:85:c0:43:be:2d:ac:b3:
8e:28:2c:ae:02:b7:47:39:45:9b:c2:f8:f1:a2:ad:
52:41:09:a9:25:fa:4b:94:c9:85:0c:cd:1c:9d:eb:
25:74:61:b4:e8:6f:c5:34:73:30:69:cc:b5:be:3f:
f6:f1:93:e3:2c:53:d5:07:cf:2f:c0:68:8c:35:76:
27:8d:9a:d6:7c:91:1d:b5:1a:bc:32:51:7b:1c:c5:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:24:8C:96:D9:1B:9C:46:F9:A0:EF:1E:5D:D1:5A:8A:D0:AB:8B
X509v3 Authority Key Identifier:
keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a383030303a3a2f33342d3334203d3e20323639313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60a8:8000::/34
Signature Algorithm: sha256WithRSAEncryption
53:8a:af:ed:86:8e:19:9b:0e:09:7b:f7:56:b1:9b:e4:36:3f:
55:71:4e:dc:b7:e3:70:d5:34:f8:46:3d:cb:42:1d:db:9d:72:
71:f7:08:bc:6f:6a:33:f8:e5:e5:39:d1:66:91:2b:ef:be:37:
72:12:be:1a:78:51:9a:8e:6d:a2:69:b1:97:9c:16:d1:73:ed:
9c:d0:1d:e8:27:5e:4e:6d:1d:49:d8:6c:fe:42:8f:3f:e1:12:
00:e6:23:5c:57:88:f5:bb:92:17:6f:4c:e1:9a:83:0f:d0:8c:
f1:b2:ea:73:23:9e:31:fe:c2:2c:12:f1:93:e8:76:5f:71:2e:
a5:f5:aa:0a:d8:63:af:2f:06:cf:e0:33:0f:d9:43:f6:8b:69:
cc:f1:58:ff:79:61:fa:53:fa:35:cf:e6:a6:63:7c:e1:36:5a:
d6:d5:e6:9c:d3:e8:79:42:1c:98:31:33:53:56:33:d9:55:18:
d2:60:0d:7e:fb:d0:86:2d:ef:64:8d:12:49:a9:7f:34:3f:bf:
97:0f:1f:54:3b:f1:16:17:ea:6f:d1:35:7f:c7:fd:c2:40:93:
5e:bf:42:47:c8:e5:14:af:0f:f3:9b:5d:00:bc:b8:04:bd:02:
23:69:67:d3:44:84:ed:ac:48:19:dd:d2:b3:24:83:99:21:a3:
be:2d:60:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:06:34 2026 by rpki-client