Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
File: 3138392e39302e33362e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier: rIM1Wh+0bfzHSTC1Wt5BWXNjKSzTum/URtRLYMn0EZ4=
Subject key identifier: C5:4E:5A:83:1E:4A:30:F9:AE:9B:2A:79:61:60:F9:C0:B7:63:FE:8C
Certificate issuer: /CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Certificate serial: 5C2EDE2998843725A59AFF22A700DFDB67F09BE0
Authority key identifier: 3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
Signing time: Wed 17 Apr 2024 11:42:30 +0000
ROA not before: Wed 17 Apr 2024 11:37:30 +0000
ROA not after: Wed 16 Apr 2025 11:42:30 +0000
asID: 28191
IP address blocks: 189.90.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 Apr 2024 18:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2e:de:29:98:84:37:25:a5:9a:ff:22:a7:00:df:db:67:f0:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748
Validity
Not Before: Apr 17 11:37:30 2024 GMT
Not After : Apr 16 11:42:30 2025 GMT
Subject: CN=C54E5A831E4A30F9AE9B2A796160F9C0B763FE8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:10:ad:69:21:09:84:a3:4a:dd:f9:85:a6:
fa:24:87:85:25:b2:48:91:dd:61:50:78:1d:05:f1:
12:50:f8:e7:56:41:3f:09:98:c1:f0:1e:51:eb:6a:
0c:01:d3:d7:0d:28:dd:ea:4a:ec:6f:50:97:27:38:
68:7e:16:de:cf:2c:ab:fa:a3:d5:73:2d:1d:35:81:
a3:ad:d3:42:e0:63:7f:78:d0:79:db:3a:73:56:a8:
9c:23:17:ce:27:f8:34:a8:d1:da:17:f3:8d:42:fb:
9b:94:69:f4:5f:cd:af:49:7e:df:57:98:e4:f0:e2:
05:5c:1c:27:0c:6a:0a:96:b1:43:28:a3:70:1d:e6:
c9:45:2a:74:5d:c0:07:66:ef:de:99:55:25:84:20:
cb:27:b8:97:b1:39:c9:a1:41:b0:15:b8:78:11:6a:
b5:8a:a5:93:ca:da:10:7c:fa:fc:2b:1f:f4:19:d0:
0a:5d:17:d2:3a:7d:1d:ad:c5:2f:36:ca:0b:44:45:
b6:2f:fd:52:0f:0d:d3:3b:ff:49:49:06:83:fb:f8:
29:ab:10:c8:46:6e:64:ff:84:36:b1:7e:79:b0:86:
e5:3f:17:0b:b1:be:f9:04:e8:49:78:a2:dc:6c:da:
eb:fc:a5:2b:fa:bd:2f:72:c0:05:fe:2c:3a:bc:fa:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4E:5A:83:1E:4A:30:F9:AE:9B:2A:79:61:60:F9:C0:B7:63:FE:8C
X509v3 Authority Key Identifier:
keyid:3D:57:EF:B3:DD:0B:A8:2C:13:B6:61:DB:8C:C4:EE:B1:B3:5D:07:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D57EFB3DD0BA82C13B661DB8CC4EEB1B35D0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33362e302f32322d3232203d3e203238313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.90.36.0/22
Signature Algorithm: sha256WithRSAEncryption
72:27:cd:60:1a:4e:99:e6:d1:58:ce:51:10:e2:ec:78:b8:d5:
ea:ad:34:aa:d6:7f:b7:a3:b3:79:d3:59:d2:a7:1b:ac:cd:a8:
4b:a4:6e:41:e2:37:46:ab:74:e3:c7:00:17:b5:18:b6:b7:48:
31:29:b7:90:9b:5a:9d:4b:49:e4:1c:d7:0e:ae:1e:38:52:78:
0a:49:e4:32:f4:2d:08:5a:d3:8d:33:2c:0e:81:79:3f:7b:cd:
df:a5:ed:c8:89:8b:5a:97:8d:33:75:f8:90:da:6f:b8:44:b3:
b0:f3:e8:9b:df:d6:39:25:f3:90:05:c9:be:e7:8e:c7:10:f1:
ca:0c:c0:84:02:72:43:ea:22:83:92:1b:67:75:96:16:d8:8c:
ea:bd:73:ee:27:0e:28:8f:f5:c3:b2:9d:c8:5e:8d:51:9a:b5:
7b:e8:43:53:44:35:16:ac:53:3f:5b:08:65:ba:31:f3:12:33:
78:dc:6b:a2:63:51:ec:1c:78:62:78:6c:dd:ae:8c:6d:50:7c:
1c:b3:e6:5e:f7:aa:f4:51:0f:47:0f:a3:3e:57:be:f7:7d:73:
e6:2f:b4:11:e0:b0:8a:2f:d1:4c:d1:3f:f2:c1:df:d4:ad:65:
d3:93:59:b4:68:74:ea:82:5d:e5:4c:e3:54:92:65:dc:a2:60:
09:17:4f:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXC7eKZiENyWlmv8ipwDf22fwm+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q1N0VGQjNERDBCQTgyQzEzQjY2MURCOENDNEVFQjFC
MzVEMDc0ODAeFw0yNDA0MTcxMTM3MzBaFw0yNTA0MTYxMTQyMzBaMDMxMTAvBgNV
BAMTKEM1NEU1QTgzMUU0QTMwRjlBRTlCMkE3OTYxNjBGOUMwQjc2M0ZFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyhCtaSEJhKNK3fmFpvokh4Ul
skiR3WFQeB0F8RJQ+OdWQT8JmMHwHlHragwB09cNKN3qSuxvUJcnOGh+Ft7PLKv6
o9VzLR01gaOt00LgY3940HnbOnNWqJwjF84n+DSo0doX841C+5uUafRfza9Jft9X
mOTw4gVcHCcMagqWsUMoo3Ad5slFKnRdwAdm796ZVSWEIMsnuJexOcmhQbAVuHgR
arWKpZPK2hB8+vwrH/QZ0ApdF9I6fR2txS82ygtERbYv/VIPDdM7/0lJBoP7+Cmr
EMhGbmT/hDaxfnmwhuU/FwuxvvkE6El4otxs2uv8pSv6vS9ywAX+LDq8+iazAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxU5agx5KMPmumyp5YWD5wLdj/owwHwYDVR0j
BBgwFoAUPVfvs90LqCwTtmHbjMTusbNdB0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8zRDU3RUZCM0REMEJBODJDMTNCNjYxREI4Q0M0RUVCMUIzNUQwNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENTdFRkIzREQwQkE4MkMx
M0I2NjFEQjhDQzRFRUIxQjM1RDA3NDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr1aJDANBgkqhkiG9w0BAQsFAAOCAQEAcifNYBpOmebR
WM5REOLseLjV6q00qtZ/t6OzedNZ0qcbrM2oS6RuQeI3Rqt048cAF7UYtrdIMSm3
kJtanUtJ5BzXDq4eOFJ4CknkMvQtCFrTjTMsDoF5P3vN36XtyImLWpeNM3X4kNpv
uESzsPPom9/WOSXzkAXJvueOxxDxygzAhAJyQ+oig5IbZ3WWFtiM6r1z7icOKI/1
w7KdyF6NUZq1e+hDU0Q1FqxTP1sIZbox8xIzeNxromNR7Bx4Ynhs3a6MbVB8HLPm
Xveq9FEPRw+jPle+931z5i+0EeCwii/RTNE/8sHf1K1l05NZtGh06oJd5UzjVJJl
3KJgCRdPEA==
-----END CERTIFICATE-----
Generated at Wed Apr 17 21:32:27 2024 by rpki-client on console-ams.rpki-client.org