Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3230303a3a2f34312d3431203d3e203533303139.roa
File: 323830343a3564633a3230303a3a2f34312d3431203d3e203533303139.roa (raw, json)
Hash identifier: af9CSmmBM46djSEN1r3grnlY/an1D4yokHv6CRRetQU=
Subject key identifier: 2A:9D:C1:9A:43:CC:ED:4C:35:A9:D2:5F:86:FE:3E:84:36:5A:D5:9B
Certificate issuer: /CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Certificate serial: 25F694E2A85EE493E7C84A7123713E9967727211
Authority key identifier: E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3230303a3a2f34312d3431203d3e203533303139.roa
Signing time: Wed 15 Jan 2025 10:30:05 +0000
ROA not before: Wed 15 Jan 2025 10:25:05 +0000
ROA not after: Wed 14 Jan 2026 10:30:05 +0000
asID: 53019
IP address blocks: 2804:5dc:200::/41 maxlen: 41
Validation: Failed, certificate revoked on Wed 15 Jan 2025 16:18:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f6:94:e2:a8:5e:e4:93:e7:c8:4a:71:23:71:3e:99:67:72:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E64C7BA3061B5F4E05BCEE186C2E72826CACBD74
Validity
Not Before: Jan 15 10:25:05 2025 GMT
Not After : Jan 14 10:30:05 2026 GMT
Subject: CN=2A9DC19A43CCED4C35A9D25F86FE3E84365AD59B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:06:69:2b:b1:cf:0a:d7:c4:a7:90:a4:3c:
5d:75:56:7f:8e:91:12:73:44:50:62:a9:d4:a2:3a:
93:db:05:f3:05:20:ba:d4:c6:ce:98:2d:45:43:ba:
fa:11:7e:8e:a8:4f:ef:d4:d4:13:4d:e8:97:22:1d:
e2:25:ce:e5:8c:2d:cb:bd:05:77:a0:a3:d0:20:01:
59:a4:6e:c3:8e:2a:23:9d:2a:f1:4c:b4:9e:13:1e:
a4:66:bc:14:4c:a3:36:e2:a6:d7:10:77:78:8c:a7:
61:50:64:cf:aa:ef:22:4b:2c:f3:92:9b:b2:da:9b:
83:19:c7:8f:36:fa:61:16:a8:a3:32:16:d2:2a:4a:
82:73:42:6b:9d:f6:f8:34:5e:dd:75:6a:eb:e7:91:
b9:7f:6a:b7:85:88:06:ee:ce:44:8b:c5:d5:ae:59:
b2:9d:26:5a:c7:f8:22:f7:6b:02:76:e2:b8:85:d1:
45:3d:4b:7b:b8:fb:05:10:27:0d:1c:96:e7:5c:da:
b8:5b:09:25:36:11:bb:ca:6b:af:b7:2d:90:5a:c7:
f3:d4:ae:34:5b:10:7b:e7:08:8e:65:0a:ed:3a:d2:
8a:b7:1a:0b:51:39:4f:04:77:30:e4:f1:b2:d7:ab:
d0:a3:ac:8b:fb:d1:63:cf:3c:93:8b:82:e7:2c:3e:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9D:C1:9A:43:CC:ED:4C:35:A9:D2:5F:86:FE:3E:84:36:5A:D5:9B
X509v3 Authority Key Identifier:
keyid:E6:4C:7B:A3:06:1B:5F:4E:05:BC:EE:18:6C:2E:72:82:6C:AC:BD:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E64C7BA3061B5F4E05BCEE186C2E72826CACBD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/323830343a3564633a3230303a3a2f34312d3431203d3e203533303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5dc:200::/41
Signature Algorithm: sha256WithRSAEncryption
c3:23:fb:53:1c:cf:c6:f5:3c:ff:4f:4a:11:6f:b3:0c:15:b5:
b5:33:dc:7e:67:14:bd:51:8a:8c:10:76:9f:8b:5c:8a:0e:fb:
7f:fa:d8:1e:86:23:09:ee:47:00:90:f4:86:cf:cb:58:cb:d2:
c0:2c:06:59:4a:8f:ee:b3:99:81:0b:75:32:bd:6a:fb:06:e9:
f7:26:6d:a2:04:a3:05:15:16:36:da:47:cb:a2:29:a2:ee:c3:
ca:ae:af:1c:ad:da:21:10:d9:22:10:9f:83:2a:ee:96:58:ae:
13:b0:8b:2d:8f:51:d3:80:56:a8:28:04:32:00:c5:9b:d3:56:
6c:e0:31:e7:74:e2:f3:53:8a:29:b4:3f:45:aa:d3:f2:dc:23:
54:a6:eb:91:10:17:09:71:ae:6e:98:5e:97:2d:17:53:6f:e1:
52:75:d3:73:c7:60:d5:6f:25:91:98:4a:2d:83:de:56:82:74:
cb:3a:d0:bc:51:d5:34:96:0f:1f:e1:86:44:95:43:bf:1f:b7:
bb:a8:81:c7:92:28:5d:9e:3e:e0:de:cf:d7:49:3d:93:22:42:
9c:41:e9:01:5e:83:1f:0f:c9:30:16:25:aa:28:90:16:86:c0:
d7:97:84:d8:82:13:6f:b0:da:cb:8b:3e:87:a7:7e:54:26:a2:
14:86:31:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJfaU4qhe5JPnyEpxI3E+mWdychEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0QzdCQTMwNjFCNUY0RTA1QkNFRTE4NkMyRTcyODI2
Q0FDQkQ3NDAeFw0yNTAxMTUxMDI1MDVaFw0yNjAxMTQxMDMwMDVaMDMxMTAvBgNV
BAMTKDJBOURDMTlBNDNDQ0VENEMzNUE5RDI1Rjg2RkUzRTg0MzY1QUQ1OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQAZpK7HPCtfEp5CkPF11Vn+O
kRJzRFBiqdSiOpPbBfMFILrUxs6YLUVDuvoRfo6oT+/U1BNN6JciHeIlzuWMLcu9
BXego9AgAVmkbsOOKiOdKvFMtJ4THqRmvBRMozbiptcQd3iMp2FQZM+q7yJLLPOS
m7Lam4MZx482+mEWqKMyFtIqSoJzQmud9vg0Xt11auvnkbl/areFiAbuzkSLxdWu
WbKdJlrH+CL3awJ24riF0UU9S3u4+wUQJw0cludc2rhbCSU2EbvKa6+3LZBax/PU
rjRbEHvnCI5lCu060oq3GgtROU8EdzDk8bLXq9CjrIv70WPPPJOLgucsPu7NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKp3BmkPM7Uw1qdJfhv4+hDZa1ZswHwYDVR0j
BBgwFoAU5kx7owYbX04FvO4YbC5ygmysvXQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xdFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFX
LzAvRTY0QzdCQTMwNjFCNUY0RTA1QkNFRTE4NkMyRTcyODI2Q0FDQkQ3NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjRDN0JBMzA2MUI1RjRFMDVC
Q0VFMTg2QzJFNzI4MjZDQUNCRDc0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
dFQxTTk5NmpnSEZyUWpCd3FwUkJhc3NkNkVoVUZyQ2Vwa1hpY1M3cFFXLzAvMzIz
ODMwMzQzYTM1NjQ2MzNhMzIzMDMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIwMzUz
MzMwMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBygEBdwCADANBgkqhkiG9w0BAQsFAAOCAQEAwyP7
UxzPxvU8/09KEW+zDBW1tTPcfmcUvVGKjBB2n4tcig77f/rYHoYjCe5HAJD0hs/L
WMvSwCwGWUqP7rOZgQt1Mr1q+wbp9yZtogSjBRUWNtpHy6Ipou7Dyq6vHK3aIRDZ
IhCfgyrulliuE7CLLY9R04BWqCgEMgDFm9NWbOAx53Ti81OKKbQ/RarT8twjVKbr
kRAXCXGubphely0XU2/hUnXTc8dg1W8lkZhKLYPeVoJ0yzrQvFHVNJYPH+GGRJVD
vx+3u6iBx5IoXZ4+4N7P10k9kyJCnEHpAV6DHw/JMBYlqiiQFobA15eE2IITb7Da
y4s+h6d+VCaiFIYxog==
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:33:55 2025 by rpki-client