Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa
File: 3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa (raw, json)
Hash identifier: q+v9ejr394zjwSZ2CDP/etphbYM5yDeKGC8Kr/AZhds=
Subject key identifier: 6D:C4:CF:8D:2F:7C:72:E1:06:25:9B:ED:38:04:38:8D:4F:A5:34:70
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: AFD67FBDA1EB3F7C3A2863A9E51817E8B62F7B
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa
Signing time: Wed 24 Apr 2024 17:06:41 +0000
ROA not before: Wed 24 Apr 2024 17:01:41 +0000
ROA not after: Wed 23 Apr 2025 17:06:41 +0000
asID: 265436
IP address blocks: 168.195.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
af:d6:7f:bd:a1:eb:3f:7c:3a:28:63:a9:e5:18:17:e8:b6:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Apr 24 17:01:41 2024 GMT
Not After : Apr 23 17:06:41 2025 GMT
Subject: CN=6DC4CF8D2F7C72E106259BED3804388D4FA53470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:d0:03:da:80:72:0a:bd:94:b0:b0:14:1a:
ea:56:e5:5a:0b:f3:bc:fa:f4:16:08:44:ae:3b:d4:
6e:73:92:53:fe:1d:08:67:57:7a:62:f3:55:39:f1:
a7:b6:c1:45:39:b7:e9:b7:02:95:d4:34:82:f1:f8:
93:c6:85:0b:5d:6f:70:9a:66:5c:c2:1d:42:c7:e2:
3c:42:b4:7f:e3:9b:1c:43:eb:a2:e0:0a:89:d0:20:
51:17:36:e6:cc:25:b1:0f:5b:dc:4c:8f:10:49:c2:
e4:38:ae:48:d0:41:e9:84:94:64:59:6c:61:e3:84:
26:61:35:79:28:ec:2f:93:4b:de:af:9d:18:af:c2:
bc:0c:28:09:3a:5c:5b:fb:c0:9f:23:b0:e2:10:3c:
97:05:1f:e0:a1:9f:27:b5:9d:dd:90:9e:f7:7c:c0:
e8:39:39:29:63:79:9e:ab:d2:35:ef:56:16:0b:fa:
3e:3b:c2:b8:8c:3d:2d:a6:f3:46:f7:52:fe:78:1b:
4b:c4:b0:aa:3e:df:87:16:e4:59:cd:36:30:aa:32:
a2:69:da:c6:eb:d7:68:7a:5d:0a:6e:be:5f:94:f9:
45:d1:82:fb:89:dc:43:e3:85:e8:57:b4:ce:d0:85:
3e:87:a2:27:03:05:e2:0f:14:8d:d3:2f:f7:75:36:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:CF:8D:2F:7C:72:E1:06:25:9B:ED:38:04:38:8D:4F:A5:34:70
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:c0:95:c3:9c:9f:38:0a:26:97:9e:0f:ff:73:3a:b1:ed:46:
0d:28:65:1c:e6:b5:73:7d:c0:76:a0:90:01:2e:da:88:83:89:
08:43:bd:3d:bd:fe:66:64:e6:b9:8a:7a:4a:b7:ab:98:df:29:
ff:18:f5:64:3b:8c:68:f6:2d:05:d0:d9:52:bc:70:a5:97:ec:
f8:41:62:49:4f:ee:e1:47:10:66:28:05:df:58:28:89:2b:75:
02:bc:1e:6d:92:22:51:6f:c2:29:50:6b:9a:7d:ea:a8:ac:4e:
53:a9:db:d6:75:eb:b6:83:3f:2e:b5:d6:7e:d5:3e:56:fe:78:
d3:39:30:a5:91:e4:e0:d4:2a:c8:f5:ff:8e:52:e3:49:e1:8c:
84:be:31:c1:06:46:9e:91:72:31:a2:66:8d:76:20:7f:ee:74:
eb:14:06:81:9b:1d:a9:73:8e:3a:96:c0:d0:06:7a:db:8d:74:
7c:32:87:c2:b4:a6:e0:85:bd:a7:e4:2d:5c:71:43:fa:d4:a7:
51:82:cd:6a:78:fe:aa:d5:83:38:68:f1:89:d5:ee:23:d7:52:
07:92:72:92:40:a4:af:7d:3d:33:e7:3a:7c:9e:73:f0:9e:20:
5b:c3:0e:ca:b9:0e:f8:97:41:66:a5:6e:20:88:e6:a7:03:a4:
3b:96:6c:50
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAK/Wf72h6z98OihjqeUYF+i2L3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNDA0MjQxNzAxNDFaFw0yNTA0MjMxNzA2NDFaMDMxMTAvBgNV
BAMTKDZEQzRDRjhEMkY3QzcyRTEwNjI1OUJFRDM4MDQzODhENEZBNTM0NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCtAD2oByCr2UsLAUGupW5VoL
87z69BYIRK471G5zklP+HQhnV3pi81U58ae2wUU5t+m3ApXUNILx+JPGhQtdb3Ca
ZlzCHULH4jxCtH/jmxxD66LgConQIFEXNubMJbEPW9xMjxBJwuQ4rkjQQemElGRZ
bGHjhCZhNXko7C+TS96vnRivwrwMKAk6XFv7wJ8jsOIQPJcFH+Chnye1nd2Qnvd8
wOg5OSljeZ6r0jXvVhYL+j47wriMPS2m80b3Uv54G0vEsKo+34cW5FnNNjCqMqJp
2sbr12h6XQpuvl+U+UXRgvuJ3EPjhehXtM7QhT6HoicDBeIPFI3TL/d1NjiJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbcTPjS98cuEGJZvtOAQ4jU+lNHAwHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZ1lrSkZ0M3VyWnBtRGZQQkRMb3VvUlZEVXlob0RoVEg4and1M1B6NDkzLzAv
MzEzNjM4MmUzMTM5MzUyZTMxMzczMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNTM0MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajDqjANBgkqhkiG9w0BAQsFAAOCAQEAusCV
w5yfOAoml54P/3M6se1GDShlHOa1c33AdqCQAS7aiIOJCEO9Pb3+ZmTmuYp6Srer
mN8p/xj1ZDuMaPYtBdDZUrxwpZfs+EFiSU/u4UcQZigF31goiSt1ArwebZIiUW/C
KVBrmn3qqKxOU6nb1nXrtoM/LrXWftU+Vv540zkwpZHk4NQqyPX/jlLjSeGMhL4x
wQZGnpFyMaJmjXYgf+506xQGgZsdqXOOOpbA0AZ62410fDKHwrSm4IW9p+QtXHFD
+tSnUYLNanj+qtWDOGjxidXuI9dSB5JykkCkr309M+c6fJ5z8J4gW8MOyrkO+JdB
ZqVuIIjmpwOkO5ZsUA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:11 2025 by rpki-client