Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
File: 323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa (raw, json)
Hash identifier: xPr7V6LuNgDXUvNSVaxsf0okRKWm2/okirJ2bvswe/Q=
Subject key identifier: 4A:27:57:43:AE:D5:FC:11:0E:A9:23:08:9D:04:9C:C3:78:F3:92:93
Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial: 1B452BD523A9548B59130073BA1850D24531AB73
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
Signing time: Mon 11 Aug 2025 13:19:41 +0000
ROA not before: Mon 11 Aug 2025 13:14:41 +0000
ROA not after: Mon 10 Aug 2026 13:19:41 +0000
asID: 267027
IP address blocks: 2804:4708:c000::/35 maxlen: 35
Validation: Failed, certificate revoked on Mon 11 Aug 2025 14:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:45:2b:d5:23:a9:54:8b:59:13:00:73:ba:18:50:d2:45:31:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Validity
Not Before: Aug 11 13:14:41 2025 GMT
Not After : Aug 10 13:19:41 2026 GMT
Subject: CN=4A275743AED5FC110EA923089D049CC378F39293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:2a:27:a2:2a:ec:07:0d:48:20:24:5c:06:
b2:ab:d3:ea:7a:51:d9:76:22:4a:86:78:ca:80:72:
73:d2:52:0e:24:39:6c:d9:f1:6d:4c:29:7d:7e:fd:
b7:b7:e5:8a:51:14:33:55:82:23:96:3b:04:63:f0:
07:36:c1:fa:27:9a:64:36:ad:cb:7a:ea:b3:d1:33:
6f:3d:20:63:0e:d2:c1:ad:97:26:53:27:e6:76:bd:
b8:b2:09:38:ae:91:4e:14:45:ea:11:f0:cb:2e:2a:
07:f3:4a:41:6a:c9:c7:d0:c5:5e:82:74:b5:73:90:
36:93:c5:30:d2:36:42:b7:97:9b:36:77:74:0b:51:
4f:41:51:de:1d:ad:94:15:5d:db:8d:7e:5b:6a:e9:
a9:f9:52:55:e7:3d:3c:5d:9b:43:e5:10:6b:42:57:
9c:53:8a:77:b0:40:48:78:da:84:9e:fc:24:36:54:
f5:5a:c8:bc:e1:a5:c9:73:dc:33:1d:7a:38:2f:f7:
76:2c:75:6a:1f:f5:19:8b:a0:c9:be:c7:1f:f4:5e:
f7:36:f0:72:c1:52:a5:04:0f:8a:9e:0b:72:6a:a8:
c3:44:d4:5b:7c:6a:b3:c8:81:c9:7b:fd:e3:c6:ef:
de:d6:31:92:ff:48:1f:a5:4f:3f:0d:be:e9:14:72:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:57:43:AE:D5:FC:11:0E:A9:23:08:9D:04:9C:C3:78:F3:92:93
X509v3 Authority Key Identifier:
keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33352d3335203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4708:c000::/35
Signature Algorithm: sha256WithRSAEncryption
44:34:55:ac:32:91:5b:f7:d9:bd:e8:10:b2:e7:85:70:45:ed:
53:5c:d0:e3:4d:98:07:4d:66:34:a3:90:44:e0:83:a9:28:7a:
87:3e:ab:a7:fa:62:5b:9c:33:20:94:19:31:9a:9e:0e:07:85:
97:87:a0:45:f8:97:af:dc:cf:02:88:05:ae:97:74:21:7d:56:
e7:b4:cf:6e:6c:55:f4:1e:67:f8:57:1b:fb:25:73:cd:64:f8:
17:17:59:66:52:18:6f:8c:0a:bd:ba:3d:17:ac:03:d2:82:de:
c9:47:7b:e2:f6:96:53:2e:66:1a:47:82:00:9b:a1:3f:09:8c:
9d:3d:66:37:01:8d:01:86:e3:e0:d1:b4:22:44:f0:15:4e:c2:
7c:ce:fe:82:3f:35:9c:5e:d1:58:13:7d:44:a8:72:38:b7:2b:
20:c8:bf:90:d5:f4:9e:a6:95:36:06:66:ce:48:53:21:bd:c0:
64:88:d6:ef:c5:21:7a:e3:a4:39:46:3e:7c:df:2a:5e:85:de:
a7:90:e2:f7:32:bf:86:4f:7a:86:91:41:49:b6:60:3c:65:a8:
4f:55:3e:70:bd:b2:bb:66:36:f7:73:59:1d:b8:18:1e:5e:30:
68:09:ac:cf:dd:10:73:22:96:52:19:8b:da:05:24:a4:b6:76:
25:34:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:05:41 2025 by rpki-client