Route Origin Authorization
$ rpki-client -vvvf rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d3334203d3e20313938393439.roa
File: 323830343a376562633a3a2f33322d3334203d3e20313938393439.roa (raw, json)
Hash identifier: 62piBMgiHeAgkq6NscL5/f2wYwjVkhKutCVpFGI35xc=
Subject key identifier: E8:DF:38:5F:06:69:90:92:A3:DC:39:2A:1F:30:CC:AF:B6:54:3A:D5
Certificate issuer: /CN=1596E3D6FA102B17703E59394675FF1E41C63BA1
Certificate serial: 708A7751D2411A0B40CF1427387463F3486F95C8
Authority key identifier: 15:96:E3:D6:FA:10:2B:17:70:3E:59:39:46:75:FF:1E:41:C6:3B:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1596E3D6FA102B17703E59394675FF1E41C63BA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d3334203d3e20313938393439.roa
Signing time: Fri 23 Oct 2026 12:47:05 +0000
ROA not before: Fri 23 Oct 2026 12:42:05 +0000
ROA not after: Fri 22 Oct 2027 12:47:05 +0000
asID: 198949
IP address blocks: 2804:7ebc::/32 maxlen: 34
Validation: Failed, certificate revoked on Fri 30 Oct 2026 18:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8a:77:51:d2:41:1a:0b:40:cf:14:27:38:74:63:f3:48:6f:95:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1596E3D6FA102B17703E59394675FF1E41C63BA1
Validity
Not Before: Oct 23 12:42:05 2026 GMT
Not After : Oct 22 12:47:05 2027 GMT
Subject: CN=E8DF385F06699092A3DC392A1F30CCAFB6543AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:ef:31:ea:1a:46:0a:94:ac:4c:0e:1a:dd:
3e:04:ab:78:cc:61:26:97:99:de:14:25:22:c0:24:
65:b8:ce:76:71:8f:c2:3e:63:d9:91:07:a9:a3:c4:
5d:1d:42:66:01:e1:94:91:e0:e8:2e:cf:43:28:61:
23:78:f3:ef:80:42:b7:d3:54:d4:4a:fa:32:e9:e7:
ef:35:db:a2:da:de:45:7f:2b:0e:08:23:6d:9d:4d:
ac:3b:2b:18:55:ec:d1:9f:59:86:78:d2:ab:5b:81:
bc:be:c1:d1:50:71:69:1e:77:43:1f:c6:00:73:46:
49:d6:75:e9:5e:3f:ef:2f:75:5c:1e:1b:41:92:5e:
af:de:90:e9:ca:f3:89:1b:3b:c4:1c:b4:21:47:e8:
da:17:37:d8:cd:41:05:05:d1:80:e8:e7:7b:c3:c7:
c6:2f:0e:76:bd:1d:47:e5:a5:dc:82:e1:00:92:9e:
e1:46:ae:51:47:c2:b4:d9:d1:43:52:e2:68:69:6d:
d1:b1:06:eb:c5:bd:53:98:4e:7f:84:39:83:24:fb:
67:6f:8d:ed:6d:12:cf:20:f1:f8:d9:04:3b:f2:d9:
83:5d:d1:de:d3:74:b0:e3:ae:7e:80:57:db:10:36:
10:1c:97:5f:da:31:ac:04:63:6e:ba:b5:14:27:35:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:38:5F:06:69:90:92:A3:DC:39:2A:1F:30:CC:AF:B6:54:3A:D5
X509v3 Authority Key Identifier:
keyid:15:96:E3:D6:FA:10:2B:17:70:3E:59:39:46:75:FF:1E:41:C6:3B:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/1596E3D6FA102B17703E59394675FF1E41C63BA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1596E3D6FA102B17703E59394675FF1E41C63BA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d3334203d3e20313938393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7ebc::/32
Signature Algorithm: sha256WithRSAEncryption
11:36:eb:95:e5:c8:35:a2:03:83:7e:f9:38:6f:dc:98:9c:0f:
19:5e:c9:7e:35:72:ea:64:c7:c2:3f:69:a5:1b:10:ec:7a:d9:
be:a9:20:54:7b:7d:68:5f:98:25:2d:44:a6:54:85:f4:de:e1:
f3:5f:14:10:17:c6:32:4e:55:5c:94:6e:bc:ca:f4:dc:04:11:
8f:88:f0:60:de:f0:84:c2:29:41:cc:0c:84:5d:54:2e:b1:55:
2c:40:0c:2f:62:1f:6e:f2:6e:9f:ca:59:78:ec:f2:c8:11:cc:
26:44:a0:5f:90:27:2c:e4:6d:56:34:b4:b6:e0:d9:ed:42:cd:
2d:cd:72:2b:45:18:8e:a8:30:8d:1f:d5:3a:2c:25:3a:78:8e:
c1:6e:b3:bd:e7:62:a9:77:a2:44:e2:e5:b6:34:4f:93:a5:00:
31:fb:52:fe:a3:e7:1d:98:bc:d2:f5:28:e5:68:59:45:12:9e:
15:b4:c1:f2:4d:d5:c0:1c:a5:6c:90:49:4f:3c:ff:7e:18:79:
1f:cf:31:12:07:a9:c4:91:18:cb:9e:25:b3:a8:57:09:b3:58:
cb:9d:df:10:3c:de:56:ef:5e:84:f1:bc:d8:83:ce:10:02:9c:
08:d7:73:71:da:5e:d8:52:ac:76:ed:db:ee:8f:4c:bf:0e:9b:
eb:13:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:42:25 2026 by rpki-client