Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e382e302f32322d3232203d3e20323632343337.roa
File: 3137302e38322e382e302f32322d3232203d3e20323632343337.roa (raw, json)
Hash identifier: vnzjfppC587AEJUQdkoKSZQp8H2gLfw3Hn69EHCH+I8=
Subject key identifier: 0E:B7:F6:28:6F:DE:74:AD:EA:76:64:EC:D5:3B:3A:7E:21:AD:95:25
Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial: 210696701E57C71DE3F73B96DF25E11C5A9F4B57
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e382e302f32322d3232203d3e20323632343337.roa
Signing time: Wed 24 Apr 2024 13:03:25 +0000
ROA not before: Wed 24 Apr 2024 12:58:25 +0000
ROA not after: Wed 23 Apr 2025 13:03:25 +0000
asID: 262437
IP address blocks: 170.82.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 May 2024 11:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:06:96:70:1e:57:c7:1d:e3:f7:3b:96:df:25:e1:1c:5a:9f:4b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Validity
Not Before: Apr 24 12:58:25 2024 GMT
Not After : Apr 23 13:03:25 2025 GMT
Subject: CN=0EB7F6286FDE74ADEA7664ECD53B3A7E21AD9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:b9:4c:47:b7:11:31:25:ef:4c:87:cc:a6:
b9:d1:b0:59:89:f6:9b:9e:19:bf:3e:b5:d5:89:71:
85:e8:1c:37:b0:3a:61:75:36:b9:23:dd:e7:6f:ea:
ff:cc:26:4e:19:ea:a8:47:49:6d:d5:f6:43:96:5a:
64:0f:f3:69:5a:1a:f9:c7:bf:ff:5e:d4:a9:04:04:
dc:0a:9f:1e:2a:13:64:8a:16:86:fb:c0:5b:cc:31:
d5:94:88:67:59:e1:df:35:39:13:86:14:14:6c:9e:
76:72:aa:22:ef:c9:c8:95:4f:44:e7:31:e4:96:df:
64:ef:6a:e8:24:ac:bb:97:a2:8d:98:13:4a:4b:03:
3d:b4:14:eb:1d:92:06:1c:54:6a:aa:86:68:a5:81:
da:12:90:5e:d4:39:2d:95:de:4c:cc:ae:ce:f6:70:
5d:b2:ff:e9:bf:d7:3e:4f:ae:b1:a0:bb:21:94:1e:
90:25:4c:51:5e:34:49:c6:5f:de:21:f5:e3:e2:3c:
80:01:08:9d:d0:7b:53:52:99:3d:30:31:76:b1:05:
d2:17:40:af:8a:0d:c0:88:88:c0:81:85:ac:7b:89:
17:5a:69:e2:d0:d8:54:70:3c:c9:9f:b9:62:18:2d:
b1:f1:f3:65:f3:9a:ec:78:8a:1c:b9:30:cd:f5:f0:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:F6:28:6F:DE:74:AD:EA:76:64:EC:D5:3B:3A:7E:21:AD:95:25
X509v3 Authority Key Identifier:
keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3137302e38322e382e302f32322d3232203d3e20323632343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.82.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:87:25:fa:ab:d5:dd:dc:c1:9a:ac:d3:5e:49:23:ce:3a:f2:
82:6d:ea:dd:6d:d2:97:d1:7a:d3:eb:ee:65:7a:8b:85:d8:a9:
a4:09:8a:46:f3:6e:69:74:a8:41:90:c4:b4:aa:88:08:dc:4a:
93:a2:62:d4:b0:d7:c8:76:fb:95:76:b0:81:15:31:48:6e:67:
c6:ef:18:87:83:35:23:e9:a2:76:ee:4c:18:86:8c:f2:57:38:
1f:ce:71:f3:89:c1:60:38:13:19:3b:f2:7a:45:40:40:5b:1d:
a7:6d:bc:b9:cc:ee:78:68:2f:8f:f3:17:6d:42:7f:d5:db:5e:
75:b3:07:6b:43:e0:26:7e:32:93:05:48:13:fe:3a:f1:2c:b5:
00:0d:a8:ea:ec:86:cf:43:f3:5f:ef:21:11:65:c7:c2:28:41:
fb:b9:cd:16:51:b4:a7:46:35:4c:9e:cf:0f:ba:78:e3:6c:5b:
eb:c9:a8:2a:d9:d6:fb:52:9f:7a:78:21:3b:f9:ca:85:86:bf:
e9:dc:fe:dc:c5:58:22:fa:18:fd:f9:6b:2a:e4:19:cc:24:f6:
da:12:c7:30:c8:10:49:78:2c:ea:18:f2:ef:d8:50:0f:32:80:
ae:d2:9b:3e:f3:9f:e5:87:7b:99:94:43:8a:ec:9c:f6:ba:ec:
f4:4c:99:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIQaWcB5Xxx3j9zuW3yXhHFqfS1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2
ODJDMjcyOTAeFw0yNDA0MjQxMjU4MjVaFw0yNTA0MjMxMzAzMjVaMDMxMTAvBgNV
BAMTKDBFQjdGNjI4NkZERTc0QURFQTc2NjRFQ0Q1M0IzQTdFMjFBRDk1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxLlMR7cRMSXvTIfMprnRsFmJ
9pueGb8+tdWJcYXoHDewOmF1Nrkj3edv6v/MJk4Z6qhHSW3V9kOWWmQP82laGvnH
v/9e1KkEBNwKnx4qE2SKFob7wFvMMdWUiGdZ4d81OROGFBRsnnZyqiLvyciVT0Tn
MeSW32TvaugkrLuXoo2YE0pLAz20FOsdkgYcVGqqhmilgdoSkF7UOS2V3kzMrs72
cF2y/+m/1z5PrrGguyGUHpAlTFFeNEnGX94h9ePiPIABCJ3Qe1NSmT0wMXaxBdIX
QK+KDcCIiMCBhax7iRdaaeLQ2FRwPMmfuWIYLbHx82Xzmux4ihy5MM318DxNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUDrf2KG/edK3qdmTs1Ts6fiGtlSUwHwYDVR0j
BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1
NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5
MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVdnNDYkhHdzV2VWdzRXFMU1c3UGtEYjZ5OFFEdjFaQjZqdU5mQTl6dTVMLzAv
MzEzNzMwMmUzODMyMmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjM0
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpSCDANBgkqhkiG9w0BAQsFAAOCAQEAiocl+qvV3dzB
mqzTXkkjzjrygm3q3W3Sl9F60+vuZXqLhdippAmKRvNuaXSoQZDEtKqICNxKk6Ji
1LDXyHb7lXawgRUxSG5nxu8Yh4M1I+midu5MGIaM8lc4H85x84nBYDgTGTvyekVA
QFsdp228uczueGgvj/MXbUJ/1dtedbMHa0PgJn4ykwVIE/468Sy1AA2o6uyGz0Pz
X+8hEWXHwihB+7nNFlG0p0Y1TJ7PD7p442xb68moKtnW+1KfenghO/nKhYa/6dz+
3MVYIvoY/flrKuQZzCT22hLHMMgQSXgs6hjy79hQDzKArtKbPvOf5Yd7mZRDiuyc
9rrs9EyZUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org