![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa
File: 3137372e32312e35362e302f32322d3232203d3e20323633303834.roa (raw, json)
Hash identifier: 4UC3gAdtXL+nuX/uSO2aXpC9CwZMw7S7x8W9PXc1Kek=
Subject key identifier: 91:F4:0C:98:26:7A:C3:F6:CB:68:78:92:C2:C1:9F:79:DA:53:6D:41
Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial: 5385F6C1A01E2EC93117858DF341533715FA6AA3
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa
Signing time: Wed 24 Apr 2024 18:20:40 +0000
ROA not before: Wed 24 Apr 2024 18:15:40 +0000
ROA not after: Wed 23 Apr 2025 18:20:40 +0000
asID: 263084
IP address blocks: 177.21.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:85:f6:c1:a0:1e:2e:c9:31:17:85:8d:f3:41:53:37:15:fa:6a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Validity
Not Before: Apr 24 18:15:40 2024 GMT
Not After : Apr 23 18:20:40 2025 GMT
Subject: CN=91F40C98267AC3F6CB687892C2C19F79DA536D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:8b:96:7b:6f:d6:b9:fa:aa:36:33:13:0d:
2e:3a:40:70:90:a6:e2:dc:25:cd:24:57:9f:8b:48:
e3:30:08:61:17:6c:3d:c7:a8:d7:d2:69:aa:1f:c2:
c6:35:a7:dd:d6:9f:5a:29:cc:8e:d2:10:4a:33:77:
38:9d:28:4f:96:13:dd:f0:ee:a1:8a:9f:01:ca:b9:
a3:68:c4:73:7a:c4:e7:7a:42:df:90:b3:4e:0b:44:
9c:ef:a2:61:08:82:8a:57:52:20:8d:be:54:d3:f9:
75:8e:74:2b:df:01:a5:66:e9:a1:26:2e:80:d7:56:
2f:5c:c5:3a:89:f6:b9:25:41:70:51:72:ed:ab:9a:
cb:b2:3c:8e:d3:6a:6b:27:ed:72:f1:49:e5:ed:cf:
4c:7b:68:ea:12:0a:0c:3a:d6:58:1b:e5:de:a5:1c:
20:92:1d:81:43:3d:bc:23:cf:3d:30:50:f8:2d:28:
c1:0e:df:48:e0:85:cd:06:0b:70:40:2b:72:eb:ef:
5e:f3:29:9f:4f:ec:ad:60:01:8d:7a:91:82:3d:46:
bf:3c:73:ce:62:6f:0e:97:b0:88:de:d2:04:db:12:
3f:d6:cc:3f:d8:9b:b8:be:8d:92:e3:dd:57:db:bb:
3a:f5:f8:45:31:7d:c6:d2:13:9d:fd:78:ec:5a:7e:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:0C:98:26:7A:C3:F6:CB:68:78:92:C2:C1:9F:79:DA:53:6D:41
X509v3 Authority Key Identifier:
keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.56.0/22
Signature Algorithm: sha256WithRSAEncryption
37:2e:f3:06:36:31:f3:d8:25:c2:f8:50:da:5b:d0:fd:65:fa:
68:67:a9:86:b3:55:45:7b:1b:19:fb:cc:90:96:06:e3:42:49:
74:2a:9b:1a:1f:d2:cf:60:6f:a0:f6:00:fc:d1:23:1d:31:82:
b9:3a:e6:75:e3:94:75:c4:32:b8:fe:2d:ef:6a:3e:0d:28:cd:
86:a7:62:94:3e:f7:b0:cc:db:84:c6:da:9b:cb:5c:a3:b1:09:
a2:db:63:63:f9:c3:c5:81:13:cd:c3:f7:ba:2c:29:63:a7:d8:
46:cc:8c:19:48:f0:de:7c:3e:8e:11:68:b7:ad:27:9b:5c:33:
c5:cd:ee:cb:15:9c:71:14:39:2a:b3:3c:7b:92:4b:14:27:57:
1f:4e:a0:0e:d9:20:15:8b:71:86:45:e5:e8:df:27:1c:c7:88:
35:f7:4f:53:fa:5a:11:92:56:bd:d7:e3:7e:84:54:23:1a:43:
ec:28:f3:3c:0b:c4:47:75:2e:eb:47:c6:fe:02:c0:e5:29:93:
e6:4d:24:29:07:fc:72:b0:18:e1:19:60:a2:1d:cf:00:5c:eb:
6c:d7:28:37:b4:71:cb:f5:a5:e9:b2:25:48:9b:53:d5:e8:0f:
fd:19:15:a1:a9:5c:e0:b3:39:36:07:be:24:d7:72:6a:b4:f0:
79:7a:d2:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU4X2waAeLskxF4WN80FTNxX6aqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG
NjMwNDJBMzAeFw0yNDA0MjQxODE1NDBaFw0yNTA0MjMxODIwNDBaMDMxMTAvBgNV
BAMTKDkxRjQwQzk4MjY3QUMzRjZDQjY4Nzg5MkMyQzE5Rjc5REE1MzZENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8YuWe2/WufqqNjMTDS46QHCQ
puLcJc0kV5+LSOMwCGEXbD3HqNfSaaofwsY1p93Wn1opzI7SEEozdzidKE+WE93w
7qGKnwHKuaNoxHN6xOd6Qt+Qs04LRJzvomEIgopXUiCNvlTT+XWOdCvfAaVm6aEm
LoDXVi9cxTqJ9rklQXBRcu2rmsuyPI7Tamsn7XLxSeXtz0x7aOoSCgw61lgb5d6l
HCCSHYFDPbwjzz0wUPgtKMEO30jghc0GC3BAK3Lr717zKZ9P7K1gAY16kYI9Rr88
c85ibw6XsIje0gTbEj/WzD/Ym7i+jZLj3Vfbuzr1+EUxfcbSE539eOxafj27AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkfQMmCZ6w/bLaHiSwsGfedpTbUEwHwYDVR0j
BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk
N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC
NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSQmt4WWRESERYSDJTYVh3ZWFGUTFqQW5zWG1acUVzcHNqZnRBR1JFZDdZLzAv
MzEzNzM3MmUzMjMxMmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMz
MzAzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsRU4MA0GCSqGSIb3DQEBCwUAA4IBAQA3LvMGNjHz
2CXC+FDaW9D9ZfpoZ6mGs1VFexsZ+8yQlgbjQkl0KpsaH9LPYG+g9gD80SMdMYK5
OuZ145R1xDK4/i3vaj4NKM2Gp2KUPvewzNuExtqby1yjsQmi22Nj+cPFgRPNw/e6
LCljp9hGzIwZSPDefD6OEWi3rSebXDPFze7LFZxxFDkqszx7kksUJ1cfTqAO2SAV
i3GGReXo3yccx4g1909T+loRkla91+N+hFQjGkPsKPM8C8RHdS7rR8b+AsDlKZPm
TSQpB/xysBjhGWCiHc8AXOts1yg3tHHL9aXpsiVIm1PV6A/9GRWhqVzgszk2B74k
13JqtPB5etLZ
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:22 2025 by rpki-client