Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136372e302f32342d3234203d3e203532363730.roa
File: 3137302e38322e3136372e302f32342d3234203d3e203532363730.roa (raw, json)
Hash identifier: tDHI6cbj2MRFC6ySDfAAT4DqspHGn74Vl07UpaJrygU=
Subject key identifier: A7:A6:54:2C:3A:1E:A0:F8:0C:14:54:6D:20:79:8B:37:9A:65:FB:37
Certificate issuer: /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial: 5F2D53EA6F9E7458281C16B1AB51DF699005DC0F
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136372e302f32342d3234203d3e203532363730.roa
Signing time: Tue 20 Jan 2026 13:22:19 +0000
ROA not before: Tue 20 Jan 2026 13:17:19 +0000
ROA not after: Tue 19 Jan 2027 13:22:19 +0000
asID: 52670
IP address blocks: 170.82.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jan 2026 13:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2d:53:ea:6f:9e:74:58:28:1c:16:b1:ab:51:df:69:90:05:dc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Validity
Not Before: Jan 20 13:17:19 2026 GMT
Not After : Jan 19 13:22:19 2027 GMT
Subject: CN=A7A6542C3A1EA0F80C14546D20798B379A65FB37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:74:ad:84:d7:7c:99:fb:73:39:98:fe:d6:
5b:3e:cd:72:da:f0:88:5c:8e:4d:29:1b:4c:bf:2f:
2b:f4:42:32:c8:57:16:3d:d2:95:e2:4d:23:89:c0:
5b:c9:4b:80:b1:6e:92:92:46:27:a4:bf:6a:b7:86:
91:92:0b:ec:17:dd:8e:ec:b5:76:99:74:73:b7:d8:
15:10:5f:85:0f:23:a3:c3:e3:19:0a:6b:08:ce:ec:
72:5c:d3:a7:2b:91:24:50:1a:a7:46:e1:ec:2f:44:
4b:ac:ba:07:94:22:4d:1e:2f:39:50:98:20:bd:80:
b8:96:3b:da:7f:50:0b:d1:e2:cf:0d:54:e1:ce:85:
19:48:dc:b6:0f:6c:05:17:f4:30:ef:d4:6e:05:05:
4c:08:b1:1d:e7:ba:2a:68:28:1a:40:18:53:24:c2:
e1:a9:36:4c:6a:de:2e:34:7a:62:6e:8d:03:76:99:
a2:cf:2c:6e:89:8b:21:85:c6:f4:31:bb:b9:c0:08:
fd:68:b5:32:6b:d5:1e:4a:3c:17:6d:91:00:37:1e:
2e:68:5b:ee:10:b0:18:2f:d8:2b:c7:78:46:89:8f:
71:f5:3d:41:2a:6a:79:1e:8f:51:e1:5a:7a:f1:db:
75:a2:19:60:be:63:1c:c9:e5:fc:11:f6:ad:ef:f0:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:54:2C:3A:1E:A0:F8:0C:14:54:6D:20:79:8B:37:9A:65:FB:37
X509v3 Authority Key Identifier:
keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3137302e38322e3136372e302f32342d3234203d3e203532363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.167.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1d:4a:ec:75:23:11:7b:3b:de:f6:76:b5:ca:e5:4c:b9:c1:
ad:e7:cb:9e:5c:46:86:f1:d2:71:a4:bd:07:ab:31:a0:2a:4c:
e0:53:a6:82:31:4e:1d:7e:6c:5a:fc:ae:e2:4a:00:36:6d:f4:
1a:1f:d2:8c:4c:b7:f8:77:4f:ec:61:df:70:4e:08:a7:1b:87:
96:0d:69:25:02:99:5b:5e:28:bb:1b:0b:73:b5:15:78:0b:8c:
c0:88:90:72:b1:d5:31:eb:ff:01:48:14:f4:21:62:94:8b:f1:
66:4a:e6:6b:8a:92:33:51:e4:e1:d9:47:23:57:9d:cc:18:be:
d3:d9:da:f3:76:bc:d7:71:0f:01:26:64:81:34:05:6f:0b:ab:
59:c2:b4:3b:40:64:b1:c8:09:3d:fb:df:14:00:2e:d3:05:15:
c8:f8:80:27:25:9f:1d:70:5b:ca:51:b8:6f:b3:df:73:d0:d7:
57:c0:5f:d2:45:5e:85:b5:7f:9c:f9:6d:48:e1:4e:07:40:5d:
70:03:37:1a:4b:3e:cf:31:2a:1d:77:5c:0b:0e:e5:5a:04:a9:
55:c3:84:96:45:05:cd:79:d3:2c:3d:4a:fe:04:0e:b0:f6:0e:
40:4e:14:95:4d:3c:98:84:52:86:8a:f7:3b:8d:d3:7d:8f:7a:
7a:fc:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 23:41:53 2026 by rpki-client