Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa
File: 3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier: NyM2x+327JOyaTmmJXP82ZPNMqUkLeHhZitB7Sex0dY=
Subject key identifier: 4E:6B:E9:4B:7A:9D:F6:11:43:B9:6F:50:DF:6D:98:BE:3F:03:D7:7B
Certificate issuer: /CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Certificate serial: 01B538540595E95F4BB97C6762A3F6DC9177B260
Authority key identifier: 91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa
Signing time: Mon 31 Mar 2025 20:01:12 +0000
ROA not before: Mon 31 Mar 2025 19:56:12 +0000
ROA not after: Mon 30 Mar 2026 20:01:12 +0000
asID: 264323
IP address blocks: 138.121.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 22:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b5:38:54:05:95:e9:5f:4b:b9:7c:67:62:a3:f6:dc:91:77:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
Validity
Not Before: Mar 31 19:56:12 2025 GMT
Not After : Mar 30 20:01:12 2026 GMT
Subject: CN=4E6BE94B7A9DF61143B96F50DF6D98BE3F03D77B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:2c:50:69:24:bf:27:1e:41:d2:a4:35:f4:
6a:45:13:53:52:8c:7f:b7:77:55:7b:83:19:0b:f7:
9c:6e:74:32:78:7a:70:75:61:a5:3a:28:7a:89:a0:
60:a1:89:fe:1b:68:89:92:02:08:f0:a0:96:c0:d2:
d0:0e:d5:5b:d0:63:74:36:c4:ba:ad:82:c0:92:75:
b7:f8:27:3b:a3:a6:1c:06:f0:c1:c6:6e:a5:69:f9:
fe:ad:fe:bd:46:c8:14:d4:02:ef:ce:d2:0f:23:3f:
27:c9:8b:a2:d1:95:99:8b:08:6d:11:e1:7d:1c:bd:
bd:52:e5:e8:9e:88:6a:c7:52:21:81:09:6f:f1:2c:
e9:2c:4d:4b:5a:62:fa:d5:66:b7:47:27:84:5f:a9:
28:c0:ce:54:76:ad:e2:ef:34:8c:38:d6:bf:ea:0c:
fa:7f:41:15:da:e4:37:cd:0d:75:79:f2:69:e4:c0:
0d:74:6a:61:37:18:1a:42:76:e3:f6:47:06:ca:3c:
68:d0:9f:4f:73:60:fd:15:74:9d:6a:e1:78:b4:ae:
f4:ed:8d:70:d7:c7:cd:dd:8c:01:83:34:25:95:2d:
1c:26:88:58:0c:0f:c1:a1:46:fe:b7:4f:dc:8b:e4:
0d:66:46:1b:c9:d9:60:f7:64:46:a8:70:41:14:64:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:E9:4B:7A:9D:F6:11:43:B9:6F:50:DF:6D:98:BE:3F:03:D7:7B
X509v3 Authority Key Identifier:
keyid:91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.247.0/24
Signature Algorithm: sha256WithRSAEncryption
41:31:8d:3c:25:b8:0e:32:c5:e6:7f:d2:ea:ba:48:63:b7:41:
97:fc:ea:ac:3d:5f:4e:3e:52:ec:9e:ad:a2:3b:a6:99:3d:86:
5d:42:7a:36:d8:e7:f4:ef:5d:86:f2:88:00:14:8e:12:3d:0b:
37:78:82:98:78:5a:5f:f4:93:7b:e8:77:c3:6a:1c:c8:95:cc:
e6:b6:2d:0c:b9:a0:b2:65:18:d2:30:81:91:34:86:bb:04:9d:
4e:bb:78:f6:66:47:2f:20:18:3e:be:c3:d0:b5:d3:8a:be:bb:
0c:29:bc:ef:d8:d6:e5:43:e2:57:fa:1e:a3:e2:7e:9e:45:b3:
a8:d3:46:7d:04:d3:e4:8b:ef:7b:6d:04:1c:8a:50:7d:00:00:
fd:5d:05:2b:99:5c:d5:22:60:ec:2f:6e:74:5d:39:58:cf:03:
3b:b0:b5:c9:88:a8:fe:77:0a:b5:1e:72:9f:d8:18:cf:0a:3b:
92:00:1f:0f:cf:da:68:fa:04:44:c4:65:ea:a2:cf:d6:19:b7:
cb:7f:34:d4:92:5c:b0:6d:13:cb:c8:24:a8:e9:5c:7a:17:5e:
10:71:8b:cc:50:01:be:e9:0e:9d:e7:34:05:5b:13:30:44:b4:
e5:95:2e:6b:7b:e7:47:8a:2d:57:a3:25:80:20:15:0c:2f:0b:
e2:52:73:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAbU4VAWV6V9LuXxnYqP23JF3smAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFFQjEzQjk1QjcwNTk4MUIzQkNCMDU5MjUyMkFGRkE5
QjI5NDYwRTAeFw0yNTAzMzExOTU2MTJaFw0yNjAzMzAyMDAxMTJaMDMxMTAvBgNV
BAMTKDRFNkJFOTRCN0E5REY2MTE0M0I5NkY1MERGNkQ5OEJFM0YwM0Q3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspixQaSS/Jx5B0qQ19GpFE1NS
jH+3d1V7gxkL95xudDJ4enB1YaU6KHqJoGChif4baImSAgjwoJbA0tAO1VvQY3Q2
xLqtgsCSdbf4JzujphwG8MHGbqVp+f6t/r1GyBTUAu/O0g8jPyfJi6LRlZmLCG0R
4X0cvb1S5eieiGrHUiGBCW/xLOksTUtaYvrVZrdHJ4RfqSjAzlR2reLvNIw41r/q
DPp/QRXa5DfNDXV58mnkwA10amE3GBpCduP2RwbKPGjQn09zYP0VdJ1q4Xi0rvTt
jXDXx83djAGDNCWVLRwmiFgMD8GhRv63T9yL5A1mRhvJ2WD3ZEaocEEUZC7hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTmvpS3qd9hFDuW9Q322Yvj8D13swHwYDVR0j
BBgwFoAUkesTuVtwWYGzvLBZJSKv+pspRg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVZLcVVNc3JlbU1qTFFZZURoS3JoU2pjOTJtM1lubmtmelhCbnprZ0F6
Qk4vMC85MUVCMTNCOTVCNzA1OTgxQjNCQ0IwNTkyNTIyQUZGQTlCMjk0NjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRUIxM0I5NUI3MDU5ODFC
M0JDQjA1OTI1MjJBRkZBOUIyOTQ2MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVWS3FVTXNyZW1NakxRWWVEaEtyaFNqYzkybTNZbm5rZnpYQm56a2dBekJOLzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp59zANBgkqhkiG9w0BAQsFAAOCAQEAQTGN
PCW4DjLF5n/S6rpIY7dBl/zqrD1fTj5S7J6tojummT2GXUJ6Ntjn9O9dhvKIABSO
Ej0LN3iCmHhaX/STe+h3w2ocyJXM5rYtDLmgsmUY0jCBkTSGuwSdTrt49mZHLyAY
Pr7D0LXTir67DCm879jW5UPiV/oeo+J+nkWzqNNGfQTT5Ivve20EHIpQfQAA/V0F
K5lc1SJg7C9udF05WM8DO7C1yYio/ncKtR5yn9gYzwo7kgAfD8/aaPoERMRl6qLP
1hm3y3801JJcsG0Ty8gkqOlcehdeEHGLzFABvukOnec0BVsTMES05ZUua3vnR4ot
V6MlgCAVDC8L4lJzPA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:56 2025 by rpki-client