Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3233203d3e20323633303837.roa
File: 3137372e3133372e3230382e302f32332d3233203d3e20323633303837.roa (raw, json)
Hash identifier: iTQfUCw/S51FdmXZhnRQc4rTjLWhHakbXhotY8Q8bVM=
Subject key identifier: 2B:59:75:36:B6:63:A8:EC:A8:B8:04:E2:E7:E4:D2:EB:F0:99:A8:6C
Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Certificate serial: 79D69E6B83E43E53EE64EBE2A418BB2D658C08CB
Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3233203d3e20323633303837.roa
Signing time: Thu 18 Apr 2024 14:31:11 +0000
ROA not before: Thu 18 Apr 2024 14:26:11 +0000
ROA not after: Thu 17 Apr 2025 14:31:11 +0000
asID: 263087
IP address blocks: 177.137.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 17:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d6:9e:6b:83:e4:3e:53:ee:64:eb:e2:a4:18:bb:2d:65:8c:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94
Validity
Not Before: Apr 18 14:26:11 2024 GMT
Not After : Apr 17 14:31:11 2025 GMT
Subject: CN=2B597536B663A8ECA8B804E2E7E4D2EBF099A86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:8d:88:8d:69:c3:80:99:15:3c:a1:85:7d:
05:e9:1a:75:2c:0d:98:f3:59:f8:dd:d3:5f:9a:32:
16:53:66:c2:22:1c:31:23:98:29:b2:d0:ff:69:c6:
f1:e6:d9:58:3c:46:08:af:eb:68:98:0b:16:6a:7f:
19:69:fe:a6:0f:ef:0d:38:55:63:b4:58:e5:f9:b6:
b7:ff:ea:23:b0:95:4d:af:30:1e:73:9f:7b:95:04:
b5:65:b0:94:6c:25:11:e7:5a:d5:06:26:b6:f2:bf:
28:a5:bd:8d:ac:42:6a:22:56:f5:79:36:0b:6c:7b:
f9:a9:42:8c:0e:d2:d8:42:aa:d2:35:db:80:70:66:
29:ed:6d:a8:9b:0c:cc:8c:59:72:84:f1:eb:cc:d6:
64:63:cb:b9:41:c4:8b:93:82:52:c9:33:bc:e2:82:
87:c5:94:2e:81:1a:e5:84:e3:c4:e0:4d:8c:7c:26:
56:43:bc:9b:73:53:78:3c:ed:91:ff:42:16:45:7b:
fe:e8:c8:01:ea:54:7a:14:f4:ae:f2:40:6f:d9:72:
e1:ed:2b:7c:26:ca:0a:e8:ba:18:d5:b4:7a:36:35:
5c:ef:ac:25:dc:63:4e:62:e3:d4:47:f6:6d:d7:a7:
4f:0e:26:a6:8a:7b:67:10:47:b9:15:65:d2:bb:ae:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:75:36:B6:63:A8:EC:A8:B8:04:E2:E7:E4:D2:EB:F0:99:A8:6C
X509v3 Authority Key Identifier:
keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/3137372e3133372e3230382e302f32332d3233203d3e20323633303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.137.208.0/23
Signature Algorithm: sha256WithRSAEncryption
38:89:f8:23:6a:f7:18:c3:07:b2:12:85:41:d6:e5:0a:54:d1:
56:cb:a1:1c:f6:e3:3a:e2:b9:fb:6a:44:fb:5d:5f:8e:f1:44:
3f:6e:92:c2:04:61:42:cd:07:8b:45:bf:3b:68:a4:fd:75:fd:
1b:80:86:89:f5:21:a2:ab:bc:d0:d5:d5:63:fc:be:24:ca:67:
ef:5f:ff:6b:ba:43:f8:0d:65:a9:27:84:40:df:6b:aa:c1:17:
59:36:c1:d7:e0:34:7e:81:c1:42:97:68:c8:dc:6f:df:4c:e5:
ee:00:6b:56:96:8f:98:bc:eb:aa:bd:9f:0a:a7:67:66:ab:7c:
f1:27:ca:a8:b8:08:72:5a:6f:ec:cb:46:53:ce:07:4d:c6:70:
d1:60:17:d3:f6:38:c1:df:8b:c4:c5:20:1e:5a:80:41:6d:ee:
66:94:7f:b6:f3:35:71:7d:17:b7:b5:ef:a1:8d:53:01:b7:17:
e8:76:9f:90:40:6b:fd:bb:e2:3c:f4:82:01:65:ef:b1:e1:77:
db:0c:96:24:4a:01:86:ef:60:4e:4b:47:d2:5b:02:ed:07:60:
c1:c9:f8:09:14:b1:7e:ce:9d:4c:26:ed:37:82:73:6a:16:59:
90:d4:81:2b:28:55:3b:b7:82:ef:23:f0:9b:aa:cc:c6:5b:eb:
16:bb:70:ac
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUedaea4PkPlPuZOvipBi7LWWMCMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB
MzY0M0Y5NDAeFw0yNDA0MTgxNDI2MTFaFw0yNTA0MTcxNDMxMTFaMDMxMTAvBgNV
BAMTKDJCNTk3NTM2QjY2M0E4RUNBOEI4MDRFMkU3RTREMkVCRjA5OUE4NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxY2IjWnDgJkVPKGFfQXpGnUs
DZjzWfjd01+aMhZTZsIiHDEjmCmy0P9pxvHm2Vg8Rgiv62iYCxZqfxlp/qYP7w04
VWO0WOX5trf/6iOwlU2vMB5zn3uVBLVlsJRsJRHnWtUGJrbyvyilvY2sQmoiVvV5
Ngtse/mpQowO0thCqtI124BwZintbaibDMyMWXKE8evM1mRjy7lBxIuTglLJM7zi
gofFlC6BGuWE48TgTYx8JlZDvJtzU3g87ZH/QhZFe/7oyAHqVHoU9K7yQG/ZcuHt
K3wmygrouhjVtHo2NVzvrCXcY05i49RH9m3Xp08OJqaKe2cQR7kVZdK7rs+jAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUK1l1NrZjqOyouATi5+TS6/CZqGwwHwYDVR0j
BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C
LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF
QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9L
RmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1CLzAvMzEz
NzM3MmUzMTMzMzcyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbGJ0DANBgkqhkiG9w0BAQsFAAOCAQEAOIn4I2r3
GMMHshKFQdblClTRVsuhHPbjOuK5+2pE+11fjvFEP26SwgRhQs0Hi0W/O2ik/XX9
G4CGifUhoqu80NXVY/y+JMpn71//a7pD+A1lqSeEQN9rqsEXWTbB1+A0foHBQpdo
yNxv30zl7gBrVpaPmLzrqr2fCqdnZqt88SfKqLgIclpv7MtGU84HTcZw0WAX0/Y4
wd+LxMUgHlqAQW3uZpR/tvM1cX0Xt7XvoY1TAbcX6HafkEBr/bviPPSCAWXvseF3
2wyWJEoBhu9gTktH0lsC7Qdgwcn4CRSxfs6dTCbtN4JzahZZkNSBKyhVO7eC7yPw
m6rMxlvrFrtwrA==
-----END CERTIFICATE-----
Generated at Wed May 22 22:19:57 2024 by rpki-client on console-ams.rpki-client.org