![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa
File: 323830343a316533343a3a2f33322d3332203d3e20323634343134.roa (raw, json)
Hash identifier: kcKS9RVqJlv0yDGCFydGjAasmbSp3ZwpVJEgkMjD+Uc=
Subject key identifier: 8E:9C:EF:47:02:AE:E1:4C:DA:F2:5A:52:E1:3A:FC:62:F6:25:FA:77
Certificate issuer: /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial: 40C133E9A2A1A3A40727C866963088D105D6232C
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa
Signing time: Thu 18 Apr 2024 19:36:27 +0000
ROA not before: Thu 18 Apr 2024 19:31:27 +0000
ROA not after: Thu 17 Apr 2025 19:36:27 +0000
asID: 264414
IP address blocks: 2804:1e34::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 19:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c1:33:e9:a2:a1:a3:a4:07:27:c8:66:96:30:88:d1:05:d6:23:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Validity
Not Before: Apr 18 19:31:27 2024 GMT
Not After : Apr 17 19:36:27 2025 GMT
Subject: CN=8E9CEF4702AEE14CDAF25A52E13AFC62F625FA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:f1:2f:74:3b:af:1e:42:cb:56:e2:02:e0:
7c:9b:9d:1e:ae:f1:f9:e9:a4:97:75:a0:e7:d1:0c:
81:af:f2:8c:73:63:5d:60:e3:52:a9:ea:bb:12:63:
f7:97:5c:ac:ea:f6:d2:cd:57:22:6c:26:37:c5:25:
4b:35:7e:30:d0:5e:f6:10:6c:b2:36:87:79:91:87:
c8:58:5f:a6:29:37:1d:da:56:11:00:56:b6:72:33:
3b:da:50:58:d2:61:aa:96:45:4b:65:1f:ce:6b:d0:
7d:59:b7:36:51:b5:38:c4:50:e4:52:85:75:b0:25:
4e:07:91:fc:da:2d:0b:33:01:91:8b:12:e1:95:fc:
51:e1:88:7c:26:54:9e:03:71:af:02:4a:6f:dc:20:
c7:30:3a:90:57:20:25:97:f3:2b:e1:ad:52:53:90:
78:37:aa:2d:38:35:4b:72:3b:6f:5d:71:7a:48:83:
36:f4:aa:7a:ad:0c:41:04:67:b3:a2:61:33:aa:72:
ff:0f:b8:8c:47:77:dd:f6:1d:cd:e2:c5:8c:ed:5d:
8a:b4:f9:86:b7:4d:44:45:81:99:c5:75:2c:5e:6f:
2a:60:e4:99:3f:b8:97:60:2a:c5:98:d8:1e:80:be:
2f:4f:1d:17:7f:55:d1:ef:c4:b0:2b:d0:1f:90:db:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:EF:47:02:AE:E1:4C:DA:F2:5A:52:E1:3A:FC:62:F6:25:FA:77
X509v3 Authority Key Identifier:
keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3332203d3e20323634343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e34::/32
Signature Algorithm: sha256WithRSAEncryption
6b:cd:f2:87:79:c7:88:0a:76:de:08:62:e3:7c:16:50:7c:34:
ca:05:4d:ee:24:a7:8e:57:c0:ed:63:15:ea:1a:02:63:11:a2:
43:75:49:72:00:bc:8b:3a:2e:0c:7c:43:2a:78:49:f3:ac:b0:
ee:00:3c:d6:03:10:50:36:7c:0e:40:8e:e6:aa:20:5b:6f:6a:
30:7a:9b:df:6c:90:23:fb:a1:d1:18:c0:d3:1a:fe:f8:87:6e:
b4:93:18:dd:d9:6d:8c:74:58:b9:c0:06:6d:0d:3a:6e:f9:54:
02:18:34:ea:0f:04:cb:45:1c:8c:f0:d2:1a:36:77:e5:e7:56:
41:a4:59:21:16:67:c6:58:e7:97:d5:0a:fa:92:4f:d8:cb:69:
dc:1c:04:42:a6:35:5e:c4:79:c0:8a:18:ba:36:c6:40:bf:2d:
3a:25:06:a0:98:4b:42:64:3f:cd:07:d1:5c:8b:29:68:61:f3:
f0:0d:33:ef:a9:36:0a:a7:f1:c1:a7:ef:40:3e:3b:d8:21:ac:
b7:32:2c:d3:54:56:92:c4:35:de:70:1f:79:05:92:88:d7:a9:
52:4e:f8:6b:62:ce:ab:ff:64:73:43:cb:c2:ca:04:b0:22:95:
d0:5e:33:ce:f3:78:be:e9:9b:76:2b:53:4d:64:21:2b:b2:a6:
9c:75:ae:3f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQMEz6aKho6QHJ8hmljCI0QXWIywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwQjhBODY3NzcyQjI0MzY3NTlFMEYwMTI3NjVEQzc3
QzEyQUNCNTAeFw0yNDA0MTgxOTMxMjdaFw0yNTA0MTcxOTM2MjdaMDMxMTAvBgNV
BAMTKDhFOUNFRjQ3MDJBRUUxNENEQUYyNUE1MkUxM0FGQzYyRjYyNUZBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFvEvdDuvHkLLVuIC4HybnR6u
8fnppJd1oOfRDIGv8oxzY11g41Kp6rsSY/eXXKzq9tLNVyJsJjfFJUs1fjDQXvYQ
bLI2h3mRh8hYX6YpNx3aVhEAVrZyMzvaUFjSYaqWRUtlH85r0H1ZtzZRtTjEUORS
hXWwJU4HkfzaLQszAZGLEuGV/FHhiHwmVJ4Dca8CSm/cIMcwOpBXICWX8yvhrVJT
kHg3qi04NUtyO29dcXpIgzb0qnqtDEEEZ7OiYTOqcv8PuIxHd932Hc3ixYztXYq0
+Ya3TURFgZnFdSxebypg5Jk/uJdgKsWY2B6Avi9PHRd/VdHvxLAr0B+Q20B1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjpzvRwKu4Uza8lpS4Tr8YvYl+ncwHwYDVR0j
BBgwFoAUDwuKhndyskNnWeDwEnZdx3wSrLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh
OE0vMC8wRjBCOEE4Njc3NzJCMjQzNjc1OUUwRjAxMjc2NURDNzdDMTJBQ0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMEI4QTg2Nzc3MkIyNDM2
NzU5RTBGMDEyNzY1REM3N0MxMkFDQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0RXpmWTRvbU10SngzNExGdXlLV29qazQ4dEJ1RFRNOHd0TGpFeGpmYThNLzAv
MzIzODMwMzQzYTMxNjUzMzM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzQzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQeNDANBgkqhkiG9w0BAQsFAAOCAQEAa83yh3nH
iAp23ghi43wWUHw0ygVN7iSnjlfA7WMV6hoCYxGiQ3VJcgC8izouDHxDKnhJ86yw
7gA81gMQUDZ8DkCO5qogW29qMHqb32yQI/uh0RjA0xr++IdutJMY3dltjHRYucAG
bQ06bvlUAhg06g8Ey0UcjPDSGjZ35edWQaRZIRZnxljnl9UK+pJP2Mtp3BwEQqY1
XsR5wIoYujbGQL8tOiUGoJhLQmQ/zQfRXIspaGHz8A0z76k2CqfxwafvQD472CGs
tzIs01RWksQ13nAfeQWSiNepUk74a2LOq/9kc0PLwsoEsCKV0F4zzvN4vumbditT
TWQhK7KmnHWuPw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:16 2025 by rpki-client