Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234362e302f32342d3234203d3e20323634333233.roa
File: 3133382e3132312e3234362e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier: 2CF2P4Z3jp95e2tR57zpqo07/EAjgEhOa2DD1uyGGMU=
Subject key identifier: 25:02:76:F1:22:1F:C0:31:96:1F:1D:E5:AD:15:0D:A9:A4:14:8E:D0
Certificate issuer: /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial: 21A877BD16BA3959B5532746FEF9B875F57B8167
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234362e302f32342d3234203d3e20323634333233.roa
Signing time: Mon 31 Mar 2025 20:01:12 +0000
ROA not before: Mon 31 Mar 2025 19:56:12 +0000
ROA not after: Mon 30 Mar 2026 20:01:12 +0000
asID: 264323
IP address blocks: 138.121.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 22:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a8:77:bd:16:ba:39:59:b5:53:27:46:fe:f9:b8:75:f5:7b:81:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Validity
Not Before: Mar 31 19:56:12 2025 GMT
Not After : Mar 30 20:01:12 2026 GMT
Subject: CN=250276F1221FC031961F1DE5AD150DA9A4148ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:8b:6b:df:30:c5:5a:ef:88:3b:af:13:63:
c7:c7:ae:bd:fd:78:5d:c4:e3:61:0c:e7:56:0e:e5:
92:09:27:39:0f:b2:07:68:74:b5:20:29:f8:0f:6d:
64:3f:05:fe:ea:56:f4:94:0d:d3:a1:0a:4a:b2:5f:
79:65:04:19:7f:ad:18:89:c1:e5:05:f7:e2:96:b6:
92:8d:24:8a:5c:98:a6:d6:83:69:37:49:2c:e1:0e:
0e:6b:70:c7:de:6b:47:4c:3a:d3:b9:80:e6:dd:0b:
f4:c0:48:7e:6e:c1:08:0a:ce:72:50:5b:76:74:f1:
78:8e:7a:0f:c3:83:e8:d8:5e:6c:bf:86:89:be:5f:
8f:91:af:8e:7f:22:fd:9d:6d:91:07:ee:f0:55:6c:
93:a9:fa:95:bc:5e:09:bd:a7:a1:1f:84:e9:b8:d4:
3e:94:bc:21:bf:db:55:88:de:00:30:ea:1a:d3:ff:
1c:b6:53:eb:a1:f0:33:e3:11:48:2a:dd:eb:ea:69:
1d:ca:10:ef:c4:6f:a8:f3:7f:83:7c:d0:ce:ed:60:
ce:14:f1:a3:ae:03:72:29:c7:4d:28:14:20:63:a2:
ac:c9:43:5b:26:d6:04:c1:a6:6d:af:7c:cf:18:0b:
8c:4d:4e:9f:7e:31:7b:80:2f:19:9e:50:49:87:82:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:76:F1:22:1F:C0:31:96:1F:1D:E5:AD:15:0D:A9:A4:14:8E:D0
X509v3 Authority Key Identifier:
keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234362e302f32342d3234203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:9b:24:32:bc:4a:06:2d:10:fb:90:c3:a4:3a:28:42:91:1d:
e0:a5:a3:60:91:b7:2e:51:e4:de:e0:61:e3:fe:d1:10:48:3b:
33:37:44:b8:1d:ba:29:f5:ab:4e:17:73:0d:86:d7:a7:9a:82:
f6:ba:92:12:ac:8c:9c:ac:ba:75:e8:ff:c5:43:c3:4c:9d:42:
74:50:59:b4:97:ac:9f:41:c3:06:f1:9a:aa:c1:4e:f3:8e:00:
bd:b3:2b:32:8b:86:99:54:12:c4:3a:e2:c9:a4:4e:09:12:a3:
c7:f4:e8:b5:db:cc:91:2c:3d:e9:65:c1:41:d5:0c:9a:e5:e6:
b7:c9:e2:07:6d:d1:89:df:4d:47:95:88:a2:1b:5b:4b:fe:d2:
7c:25:a3:1b:95:c1:44:c5:b5:3a:79:0a:ca:f8:1e:80:d5:7e:
74:44:f9:80:d0:db:d1:9e:ad:72:38:f0:da:f5:d0:4b:c1:14:
70:ac:42:2b:da:ec:12:14:bf:ad:97:b5:a6:0d:16:ff:4a:8e:
5a:be:ef:be:bc:6a:9c:90:3c:5a:e4:e3:54:f8:6b:ca:8b:cc:
ce:76:1c:82:2f:67:b0:0c:7a:df:29:15:bf:2b:af:22:9f:bd:
6a:e1:d9:13:ae:24:4d:b1:2d:7e:65:6e:61:75:ec:73:0b:42:
28:96:f8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:53 2025 by rpki-client