![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa
File: 323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa (raw, json)
Hash identifier: O5voc+uhNKob0zICo53OYpjpLk1TQJNncDL/Lmd4du8=
Subject key identifier: F1:F6:AE:94:B9:B7:C4:77:04:8F:21:26:F6:5E:FB:75:6D:C7:0B:CA
Certificate issuer: /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial: 48C7978DFBB9E734289DB6E265AE79BF6FD3DD5C
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa
Signing time: Wed 24 Apr 2024 17:06:29 +0000
ROA not before: Wed 24 Apr 2024 17:01:29 +0000
ROA not after: Wed 23 Apr 2025 17:06:29 +0000
asID: 265436
IP address blocks: 2804:341c:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c7:97:8d:fb:b9:e7:34:28:9d:b6:e2:65:ae:79:bf:6f:d3:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Validity
Not Before: Apr 24 17:01:29 2024 GMT
Not After : Apr 23 17:06:29 2025 GMT
Subject: CN=F1F6AE94B9B7C477048F2126F65EFB756DC70BCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:37:b5:b0:be:bd:4f:a4:05:fe:68:e4:91:
29:c0:2d:d2:b8:52:da:83:9d:be:70:bb:74:1d:dc:
36:64:c2:7e:7e:23:31:e0:af:34:16:d1:aa:0f:7c:
73:a2:88:f9:53:49:c0:da:31:1e:6f:f0:7d:6e:21:
8d:dd:04:be:43:5d:22:fe:a5:8b:bb:16:9c:d8:a7:
6e:06:b3:f6:49:0e:b3:4a:1f:c6:18:0d:4e:6b:57:
7a:1f:07:c4:1f:53:7d:10:fe:1d:1e:46:a7:09:20:
44:68:c3:61:d4:bb:50:b6:e6:46:f1:8c:e9:12:7b:
43:a5:7f:a9:fc:38:de:3f:62:9a:16:11:c2:90:af:
93:58:b1:4e:d8:d5:e2:80:ed:cc:8e:c9:d0:c0:79:
d9:f5:22:35:95:a7:e5:55:17:81:1f:83:84:db:81:
bd:c3:08:c3:f6:91:d2:d4:00:fa:9f:0c:0d:34:fe:
a3:09:23:27:e7:90:cd:9b:e3:ac:f6:41:77:aa:d8:
46:8f:0c:8c:49:a0:25:c0:65:1c:f3:b4:8d:d5:69:
b7:49:41:73:35:91:e1:15:0d:46:dc:e5:e8:4c:7b:
ea:ae:a7:fe:8e:9d:78:d6:9d:18:97:03:17:09:20:
54:20:ef:26:96:20:df:3f:9a:1b:29:20:c5:ad:4b:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:AE:94:B9:B7:C4:77:04:8F:21:26:F6:5E:FB:75:6D:C7:0B:CA
X509v3 Authority Key Identifier:
keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/323830343a333431633a383030303a3a2f33332d3333203d3e20323635343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:341c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9d:1e:b1:f2:02:f5:4f:a8:6b:a3:db:f6:53:36:bc:67:0d:8b:
6a:27:a0:a5:69:81:ab:9f:a2:d5:2b:40:d0:c2:07:3b:60:24:
48:eb:be:74:22:ee:59:43:3a:9c:d0:5d:7a:46:d3:1b:71:68:
38:fc:bb:34:51:bd:fa:76:18:85:14:cc:28:6b:53:7a:f8:1d:
eb:29:61:1a:1b:7f:8b:01:52:43:c0:39:69:1f:be:c5:d8:af:
de:3e:f9:51:a7:fc:53:71:6f:ed:8b:37:9a:9b:df:7b:0b:ae:
c1:1a:5c:cf:ca:6f:64:81:27:45:bb:bf:1a:0c:32:5b:34:c8:
72:5c:f1:19:62:d2:3f:ee:4b:32:ff:ae:6b:e1:c9:18:82:32:
94:42:87:49:9e:b7:98:43:9d:85:7d:83:78:3a:ba:1c:03:f6:
78:cc:1d:99:af:70:15:94:ef:d5:b9:70:11:d3:7f:44:61:2c:
2a:25:bc:bd:80:ee:01:c1:96:f2:c0:a8:69:78:d2:d5:c8:d0:
48:d0:86:51:9a:4c:97:5f:ed:9d:bf:15:3e:ba:8a:4b:bb:87:
54:1c:5c:8c:c3:a3:29:14:1f:4c:d9:9a:c8:ce:22:c0:36:58:
07:2c:00:a0:c4:30:74:da:70:1b:19:9d:0f:c0:82:b2:6d:d6:
4a:3b:fb:68
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSMeXjfu55zQonbbiZa55v2/T3VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ1NDI5QkJCMDJERUU4QkJFN0ZDNjc2NkI2RTBCNzRC
Qzg1OThFMTAeFw0yNDA0MjQxNzAxMjlaFw0yNTA0MjMxNzA2MjlaMDMxMTAvBgNV
BAMTKEYxRjZBRTk0QjlCN0M0NzcwNDhGMjEyNkY2NUVGQjc1NkRDNzBCQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoje1sL69T6QF/mjkkSnALdK4
UtqDnb5wu3Qd3DZkwn5+IzHgrzQW0aoPfHOiiPlTScDaMR5v8H1uIY3dBL5DXSL+
pYu7FpzYp24Gs/ZJDrNKH8YYDU5rV3ofB8QfU30Q/h0eRqcJIERow2HUu1C25kbx
jOkSe0Olf6n8ON4/YpoWEcKQr5NYsU7Y1eKA7cyOydDAedn1IjWVp+VVF4Efg4Tb
gb3DCMP2kdLUAPqfDA00/qMJIyfnkM2b46z2QXeq2EaPDIxJoCXAZRzztI3VabdJ
QXM1keEVDUbc5ehMe+qup/6OnXjWnRiXAxcJIFQg7yaWIN8/mhspIMWtS/cFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU8faulLm3xHcEjyEm9l77dW3HC8owHwYDVR0j
BBgwFoAU/VQpu7At7ou+f8Z2a24LdLyFmOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2FnWWtKRnQzdXJacG1EZlBCRExvdW9SVkRVeWhvRGhUSDhqd3UzUHo0
OTMvMC9GRDU0MjlCQkIwMkRFRThCQkU3RkM2NzY2QjZFMEI3NEJDODU5OEUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZENTQyOUJCQjAyREVFOEJC
RTdGQzY3NjZCNkUwQjc0QkM4NTk4RTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNhZ1lrSkZ0M3VyWnBtRGZQQkRMb3VvUlZEVXlob0RoVEg4and1M1B6NDkzLzAv
MzIzODMwMzQzYTMzMzQzMTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNTM0MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENByAMA0GCSqGSIb3DQEBCwUA
A4IBAQCdHrHyAvVPqGuj2/ZTNrxnDYtqJ6ClaYGrn6LVK0DQwgc7YCRI6750Iu5Z
Qzqc0F16RtMbcWg4/Ls0Ub36dhiFFMwoa1N6+B3rKWEaG3+LAVJDwDlpH77F2K/e
PvlRp/xTcW/tizeam997C67BGlzPym9kgSdFu78aDDJbNMhyXPEZYtI/7ksy/65r
4ckYgjKUQodJnreYQ52FfYN4OrocA/Z4zB2Zr3AVlO/VuXAR039EYSwqJby9gO4B
wZbywKhpeNLVyNBI0IZRmkyXX+2dvxU+uopLu4dUHFyMw6MpFB9M2ZrIziLANlgH
LACgxDB02nAbGZ0PwIKybdZKO/to
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:17 2025 by rpki-client