Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a633030303a3a2f33342d3334203d3e20323639313832.roa
File: 323830343a363061383a633030303a3a2f33342d3334203d3e20323639313832.roa (raw, json)
Hash identifier: 0cwdbhUjhG8N7DhD3lOz1/Tkv8ghbYn0WqNJDBYlWv8=
Subject key identifier: 50:2E:43:95:EA:20:E0:64:1A:BA:89:55:BC:F6:15:C4:31:F7:45:D6
Certificate issuer: /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial: 3C83ECA450CE276A0C772620787B733DD33791AB
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a633030303a3a2f33342d3334203d3e20323639313832.roa
Signing time: Sat 10 Oct 2026 23:30:13 +0000
ROA not before: Sat 10 Oct 2026 23:25:13 +0000
ROA not after: Sat 09 Oct 2027 23:30:13 +0000
asID: 269182
IP address blocks: 2804:60a8:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Sun 11 Oct 2026 11:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:83:ec:a4:50:ce:27:6a:0c:77:26:20:78:7b:73:3d:d3:37:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Validity
Not Before: Oct 10 23:25:13 2026 GMT
Not After : Oct 9 23:30:13 2027 GMT
Subject: CN=502E4395EA20E0641ABA8955BCF615C431F745D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:89:6c:de:7a:b6:2b:8e:ed:8e:49:f6:6e:
d7:e5:41:ca:2b:e0:5b:fd:26:3b:d3:8c:63:4b:21:
2a:f3:3c:38:ef:03:c4:12:41:50:f9:ba:88:9a:1f:
c7:78:9f:35:19:a4:1f:b8:ac:9c:6d:2c:9c:35:e1:
81:53:b5:e2:7d:30:09:8c:3b:2b:76:ee:93:d3:47:
a1:b5:2a:44:61:83:5e:cd:65:78:97:7a:9c:0e:04:
ad:3c:a7:95:2c:06:39:8f:7d:76:9e:ae:97:cc:ba:
cc:1a:39:82:89:1c:2b:07:80:75:65:89:ad:08:79:
52:87:f3:42:d9:80:66:ac:a0:93:9c:83:96:65:25:
5a:85:7a:c3:47:e4:4c:41:cd:ae:f6:4e:cf:72:cf:
ce:a2:aa:83:ec:d3:42:91:da:bd:5b:cd:f2:ef:64:
86:71:f3:34:de:3b:50:86:7a:70:73:34:14:b9:0c:
59:85:70:29:b5:03:f5:6c:23:df:d9:10:dc:ac:2c:
85:22:8e:44:c7:b2:dd:ea:34:93:7f:25:c1:3f:63:
b8:60:81:d5:61:ea:b2:d8:c8:9d:ee:e4:f5:58:86:
0a:0d:28:8c:31:9e:1a:31:70:a5:0e:12:5f:b1:82:
c7:bc:b0:3a:0e:00:cf:8f:36:6a:58:5c:e7:71:c9:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2E:43:95:EA:20:E0:64:1A:BA:89:55:BC:F6:15:C4:31:F7:45:D6
X509v3 Authority Key Identifier:
keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/323830343a363061383a633030303a3a2f33342d3334203d3e20323639313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60a8:c000::/34
Signature Algorithm: sha256WithRSAEncryption
04:b3:04:c4:4f:a2:97:aa:dc:55:08:bd:9d:27:f8:3a:59:4d:
6e:13:5c:05:34:9e:ae:18:20:f8:44:d1:88:c6:c5:7e:84:d2:
d4:24:d0:62:26:5e:bc:81:b1:ab:fa:f0:10:5c:b3:65:14:aa:
14:46:40:1a:9e:3f:74:0c:a8:ea:0d:45:e7:72:ac:5b:d1:8f:
2b:b6:75:4a:83:24:74:f8:a6:23:e5:c4:37:42:32:e7:00:37:
79:1e:40:62:b6:92:c7:ea:22:cb:f3:e9:8c:bc:9a:72:04:e4:
c6:13:17:56:1e:04:18:53:36:79:0f:9b:4b:01:71:51:45:ad:
ca:66:fe:6c:b5:95:3e:9d:ea:ab:02:7a:5d:0d:c9:50:19:7d:
2c:f7:38:44:c6:41:07:7c:ac:5d:2a:75:31:fd:e0:63:1f:2d:
57:20:d4:42:06:37:51:d9:3b:47:f5:f3:b8:e0:35:01:26:50:
25:23:8c:13:37:fb:be:9f:16:d8:73:8d:8b:98:cd:19:80:1d:
dd:af:73:ab:74:89:61:41:0e:5e:84:dc:3a:26:78:20:ce:8e:
eb:f4:29:9f:cf:8b:e6:dd:e4:0e:08:3a:1e:e2:e3:aa:e5:dd:
ab:e6:9b:0e:3d:8a:a9:ee:33:8d:0c:6b:aa:31:89:9f:eb:bd:
35:ba:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:29:49 2026 by rpki-client