Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
File: 323830343a346337633a3a2f33332d3333203d3e20323637333733.roa (raw, json)
Hash identifier: rXbTUq30T66vH04DnvzvbIFlHraSFFMvSwb6nKBrw0g=
Subject key identifier: 89:70:AF:5F:BB:44:A7:13:27:36:34:E9:B8:4F:9C:33:81:64:20:FB
Certificate issuer: /CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Certificate serial: 643728B0127A351A106B50BFE9B4878BAFBB0E33
Authority key identifier: 02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
Signing time: Wed 14 Oct 2026 18:10:53 +0000
ROA not before: Wed 14 Oct 2026 18:05:53 +0000
ROA not after: Wed 13 Oct 2027 18:10:53 +0000
asID: 267373
IP address blocks: 2804:4c7c::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 27 Oct 2026 14:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:37:28:b0:12:7a:35:1a:10:6b:50:bf:e9:b4:87:8b:af:bb:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02717EC1E65FB47AF994C220A5D781D4760D1309
Validity
Not Before: Oct 14 18:05:53 2026 GMT
Not After : Oct 13 18:10:53 2027 GMT
Subject: CN=8970AF5FBB44A713273634E9B84F9C33816420FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:63:5a:15:a0:45:7f:eb:b9:dc:10:13:07:
2c:cf:ad:d0:f1:40:03:d8:30:f4:36:58:78:7c:6a:
56:9b:9b:fe:7c:b0:b8:c9:7f:48:34:e3:2d:75:59:
b6:70:40:76:90:de:d7:39:8f:1f:3c:f4:d6:16:b0:
25:52:5d:76:5b:46:b8:24:a8:03:dc:3e:36:0c:6b:
b9:c7:58:6f:be:cf:46:0b:a9:4d:77:15:a8:78:1f:
61:a6:2d:29:06:f3:1e:a6:34:83:f2:51:27:6d:11:
3d:d2:2f:fe:d9:1f:6a:bb:81:09:76:be:28:fc:7d:
0d:4d:d0:e4:db:d5:57:f6:d0:e0:83:59:0e:7f:5d:
02:e2:12:da:47:24:82:83:96:9e:78:88:0a:03:71:
cd:2b:6a:1e:1d:9b:bb:0a:64:49:de:02:9a:8b:e7:
e7:18:ff:a7:ce:0c:a7:68:67:48:54:cc:8c:f3:95:
e2:54:eb:18:a7:70:1f:96:f8:15:c8:b6:c5:d0:34:
77:4c:73:12:ac:3b:08:56:ee:1b:e0:a3:29:89:2f:
c0:bb:58:0d:81:d4:f9:42:c8:7c:66:5a:ab:cc:ea:
99:dc:ba:a3:0b:60:8d:92:3f:7e:1d:28:2b:d9:2a:
88:d9:30:c1:bb:d6:2d:99:dd:6c:5e:c6:82:4c:79:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:AF:5F:BB:44:A7:13:27:36:34:E9:B8:4F:9C:33:81:64:20:FB
X509v3 Authority Key Identifier:
keyid:02:71:7E:C1:E6:5F:B4:7A:F9:94:C2:20:A5:D7:81:D4:76:0D:13:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/02717EC1E65FB47AF994C220A5D781D4760D1309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02717EC1E65FB47AF994C220A5D781D4760D1309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pPffDrQMXwDipXFabXF93unKUK9w3faZsyYLauYjVwk/0/323830343a346337633a3a2f33332d3333203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c7c::/33
Signature Algorithm: sha256WithRSAEncryption
71:40:3a:a8:2d:32:b4:df:5b:21:8e:60:e6:99:a0:50:e8:8f:
5e:b6:85:44:e1:32:ce:a5:3a:73:d4:0b:0d:54:4c:5c:2f:10:
19:1e:11:9c:fb:3d:50:a8:08:12:5d:e5:8c:c6:ef:cd:72:34:
18:61:c0:14:d2:9a:b0:7e:4b:d5:4d:49:b9:75:aa:35:fe:d7:
73:c4:96:2c:b7:cb:25:9e:b3:3d:d1:be:f0:d5:51:d9:47:dd:
3c:80:71:07:cd:e5:a0:9a:3b:f7:5e:06:fb:e8:eb:18:55:98:
11:e0:b8:15:c7:25:5d:4f:5b:09:c1:80:95:0b:1c:03:20:53:
77:0e:b2:6c:ab:85:3f:fd:26:30:b0:05:1b:df:6e:d1:b4:65:
7e:a3:f0:74:44:c6:72:30:65:e4:b5:6c:27:8a:83:70:e2:04:
4f:b5:0e:f1:f5:1b:85:d9:5b:b8:ba:e7:16:4e:cb:03:d5:f9:
52:cb:00:81:13:2a:5e:e5:62:a5:46:95:90:66:0d:41:21:16:
e1:c9:ad:00:b7:c8:4b:d5:a3:5f:ff:30:d2:3c:3c:ab:ad:05:
e6:aa:d0:a5:34:6c:8e:8e:dc:f3:7e:cd:8a:b9:55:96:47:a7:
11:a1:6d:4b:33:4b:3f:69:d6:9a:37:27:a3:c5:06:eb:6a:ae:
ae:cb:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 20:22:30 2026 by rpki-client