Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32312d3231203d3e203238313931.roa
File: 3138392e39302e33322e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier: g6UTaSf9HbUKcjc/YE57NqbCDgMxrUrrkBvRGdtrBQI=
Subject key identifier: 12:3F:97:AE:B2:90:42:AF:69:FC:94:8B:3D:90:A3:38:83:50:C8:77
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 0E7FFB0CAF43E0ACE3073BB34B185C67AAD48196
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32312d3231203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:32 +0000
ROA not before: Wed 17 Apr 2024 11:37:32 +0000
ROA not after: Wed 16 Apr 2025 11:42:32 +0000
asID: 28191
IP address blocks: 189.90.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7f:fb:0c:af:43:e0:ac:e3:07:3b:b3:4b:18:5c:67:aa:d4:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:32 2024 GMT
Not After : Apr 16 11:42:32 2025 GMT
Subject: CN=123F97AEB29042AF69FC948B3D90A3388350C877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:4a:49:56:df:5b:25:b4:59:6f:bd:35:14:
ad:6e:34:64:38:bf:84:91:0e:3f:0c:f2:47:cd:2e:
29:8a:2f:31:83:7e:e9:08:59:07:d5:b3:dd:6f:98:
ab:f9:2d:b4:54:0e:41:4f:b6:bf:b5:4e:15:91:64:
89:5e:3b:a5:3b:b2:81:2a:24:0d:0d:f7:eb:56:ab:
b8:88:61:11:44:64:e6:81:a1:32:eb:47:25:ef:10:
d8:87:ea:c5:d3:0d:42:6f:94:2a:1c:4a:2b:29:74:
63:39:0e:66:b2:d4:94:fe:1d:df:ab:b1:fc:10:1f:
3a:74:92:83:23:7e:e0:60:34:0f:e8:89:40:9a:5d:
2e:42:2a:39:b9:0d:62:e4:28:70:e4:34:c5:b1:b9:
46:b2:c4:17:16:65:94:f0:c1:fc:0f:ba:bd:29:e7:
b3:19:db:85:fc:f1:a7:95:33:3d:c0:79:db:e4:b8:
f0:61:54:0a:77:94:1e:c0:93:8f:a9:c3:9d:08:e6:
41:78:df:1e:3c:df:af:9e:0e:cf:87:c1:32:4b:61:
51:ac:7f:f0:5c:1a:1c:7b:99:47:31:89:f9:11:ab:
34:02:a3:ff:c7:92:eb:e4:82:be:fb:13:92:4f:c5:
4c:72:a4:21:31:3e:c1:9b:67:75:94:b6:61:ed:36:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:97:AE:B2:90:42:AF:69:FC:94:8B:3D:90:A3:38:83:50:C8:77
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32312d3231203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:d6:c4:f8:f9:48:bb:4a:8d:88:0b:28:2c:9f:4a:45:9f:ed:
b2:76:15:b2:55:b4:69:2e:9d:21:b2:5d:e4:df:63:e3:0b:03:
29:ff:e2:d7:08:8b:03:1b:f5:d0:e2:16:1d:bc:1b:b8:db:a6:
09:cc:f5:8a:17:cf:d8:cb:fc:94:9b:13:70:d6:3f:74:21:86:
1f:14:54:5e:c9:f2:09:b5:63:37:96:64:b9:21:24:c7:04:46:
55:cf:ed:35:f1:e8:e9:79:bf:ec:d0:31:28:46:fd:e6:4e:82:
cb:1b:80:f3:87:be:38:f9:5b:db:28:80:d7:aa:0d:56:6e:1e:
db:71:f8:57:40:da:80:88:b5:68:61:d7:93:20:50:53:b5:20:
5d:1e:a8:3a:aa:6a:5c:53:d3:f3:49:6a:a6:60:21:25:18:15:
14:c8:fc:5c:de:b8:95:83:e1:af:a1:3b:6b:3a:dd:02:d9:cc:
bd:9b:4c:68:96:de:9f:74:01:3f:60:7f:a4:bb:6d:e0:73:2f:
59:4a:cc:17:3e:3c:cf:3c:ad:fc:05:29:fe:e2:72:f9:7a:0d:
d7:d6:51:e2:b0:55:ca:5e:08:93:82:29:cb:f3:58:ac:7f:0a:
7a:2b:8b:89:82:33:93:07:41:b5:cd:55:78:2b:a0:87:a5:79:
66:9a:52:78
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDn/7DK9D4KzjBzuzSxhcZ6rUgZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzJaFw0yNTA0MTYxMTQyMzJaMDMxMTAvBgNV
BAMTKDEyM0Y5N0FFQjI5MDQyQUY2OUZDOTQ4QjNEOTBBMzM4ODM1MEM4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJEpJVt9bJbRZb701FK1uNGQ4
v4SRDj8M8kfNLimKLzGDfukIWQfVs91vmKv5LbRUDkFPtr+1ThWRZIleO6U7soEq
JA0N9+tWq7iIYRFEZOaBoTLrRyXvENiH6sXTDUJvlCocSispdGM5Dmay1JT+Hd+r
sfwQHzp0koMjfuBgNA/oiUCaXS5CKjm5DWLkKHDkNMWxuUayxBcWZZTwwfwPur0p
57MZ24X88aeVMz3AedvkuPBhVAp3lB7Ak4+pw50I5kF43x4836+eDs+HwTJLYVGs
f/BcGhx7mUcxifkRqzQCo//Hkuvkgr77E5JPxUxypCExPsGbZ3WUtmHtNit9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEj+XrrKQQq9p/JSLPZCjOINQyHcwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA71aIDANBgkqhkiG9w0BAQsFAAOCAQEAW9bE+PlIu0qN
iAsoLJ9KRZ/tsnYVslW0aS6dIbJd5N9j4wsDKf/i1wiLAxv10OIWHbwbuNumCcz1
ihfP2Mv8lJsTcNY/dCGGHxRUXsnyCbVjN5ZkuSEkxwRGVc/tNfHo6Xm/7NAxKEb9
5k6CyxuA84e+OPlb2yiA16oNVm4e23H4V0DagIi1aGHXkyBQU7UgXR6oOqpqXFPT
80lqpmAhJRgVFMj8XN64lYPhr6E7azrdAtnMvZtMaJben3QBP2B/pLtt4HMvWUrM
Fz48zzyt/AUp/uJy+XoN19ZR4rBVyl4Ik4Ipy/NYrH8KeiuLiYIzkwdBtc1VeCug
h6V5ZppSeA==
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org