Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343638.roa
File: 34352e3138372e3134302e302f32322d3332203d3e20323639343638.roa (raw, json)
Hash identifier: 5QOGz4iSWfx0MNRpfhs/NyVcGTgaelG1KQcgnhRmKqs=
Subject key identifier: 7A:5B:10:13:8E:3D:DF:EB:E1:7A:57:EE:CE:E2:9E:AF:6F:C1:B1:F6
Certificate issuer: /CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
Certificate serial: 718F4A0A68FF608D78E2391DAD716B1F16F3A6E0
Authority key identifier: D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343638.roa
Signing time: Tue 25 Mar 2025 14:25:24 +0000
ROA not before: Tue 25 Mar 2025 14:20:24 +0000
ROA not after: Tue 24 Mar 2026 14:25:24 +0000
asID: 269468
IP address blocks: 45.187.140.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 25 Mar 2025 14:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8f:4a:0a:68:ff:60:8d:78:e2:39:1d:ad:71:6b:1f:16:f3:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A
Validity
Not Before: Mar 25 14:20:24 2025 GMT
Not After : Mar 24 14:25:24 2026 GMT
Subject: CN=7A5B10138E3DDFEBE17A57EECEE29EAF6FC1B1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:55:3b:89:e3:f6:dd:58:52:49:08:31:55:
c8:f2:dc:3a:37:d8:07:c8:ad:6d:23:cb:0d:d6:17:
6f:6e:af:37:3d:80:13:56:0a:42:97:07:5f:19:16:
9f:65:bb:16:49:b9:a5:e8:cb:85:25:fd:5a:a4:3c:
29:14:bd:aa:2a:94:ad:6e:31:4c:dd:8e:23:e2:4e:
03:f0:89:10:e2:88:84:f9:af:d3:bc:e2:c1:12:28:
aa:ce:54:1d:03:b6:60:24:1e:ce:0e:e4:17:e7:a7:
b0:12:20:87:3e:18:ab:02:ec:1b:d4:37:36:b1:e8:
d6:3e:b8:12:85:3f:50:2b:97:b1:a7:f6:d6:29:cf:
32:f9:a0:88:dc:83:6f:09:8a:45:db:f2:80:57:d2:
39:2c:be:bf:21:af:68:14:d3:6d:92:de:ad:d0:8a:
87:87:7a:df:6e:c1:b6:ad:13:ff:77:39:74:84:7f:
2c:df:10:79:2a:a0:5b:4a:e1:11:58:1a:29:05:56:
98:8f:e4:0e:b7:cd:0c:bc:4b:81:b5:99:a9:30:70:
3f:89:b3:a6:b4:48:b6:e0:48:2d:47:e2:6e:f2:b7:
b7:f7:21:a1:4d:a7:69:1d:af:82:33:49:1a:9e:b4:
fd:2d:6d:54:3b:43:98:9f:e4:e5:3e:7b:fe:57:f0:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:10:13:8E:3D:DF:EB:E1:7A:57:EE:CE:E2:9E:AF:6F:C1:B1:F6
X509v3 Authority Key Identifier:
keyid:D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/34352e3138372e3134302e302f32322d3332203d3e20323639343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:db:2a:15:80:c6:59:6e:9b:22:2b:d3:07:80:dc:f0:32:c6:
5b:5d:0c:68:fa:06:f4:82:a9:5d:5e:5e:3b:44:c4:ec:55:d6:
42:64:ff:18:6f:7b:71:b1:98:2e:77:93:87:d1:ea:8b:6c:0d:
65:28:90:cd:ab:f3:62:de:ac:12:c0:ff:fb:4f:62:8a:70:f5:
5e:78:27:3d:21:bb:dc:a4:c0:6d:c3:e4:c3:5a:ec:2b:37:49:
d5:c8:15:d1:78:d8:eb:e8:5b:1f:78:04:07:14:94:4f:be:53:
b0:f1:61:c0:50:b9:8e:82:61:89:95:14:56:bb:98:ff:b4:c0:
c0:38:05:14:e3:df:1e:4a:b1:86:15:8b:2f:8f:80:fa:a0:da:
30:df:3c:1f:5b:e0:da:be:fb:ac:eb:3a:c9:cf:27:58:e9:5f:
83:69:01:33:bf:b3:ac:90:ef:e1:52:d5:e2:d5:ad:94:cb:16:
8c:55:fe:75:62:c8:4d:c9:3b:d6:95:bf:9d:50:f3:64:84:ce:
71:20:c6:df:ea:2d:36:3e:4f:aa:eb:57:96:8e:3b:c5:45:be:
16:02:6d:dc:1c:e8:b9:15:a2:b2:11:4a:7d:cc:fd:81:24:6f:
89:43:d4:55:99:c9:cc:19:e3:8a:2e:0f:88:65:cf:37:99:10:
dc:72:0e:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcY9KCmj/YI144jkdrXFrHxbzpuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAyN0EzQzM5MDU2OTlCRTFCMDFCQzJGQUY3NzY4NkVF
QTY2QzIwQTAeFw0yNTAzMjUxNDIwMjRaFw0yNjAzMjQxNDI1MjRaMDMxMTAvBgNV
BAMTKDdBNUIxMDEzOEUzRERGRUJFMTdBNTdFRUNFRTI5RUFGNkZDMUIxRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQlU7ieP23VhSSQgxVcjy3Do3
2AfIrW0jyw3WF29urzc9gBNWCkKXB18ZFp9luxZJuaXoy4Ul/VqkPCkUvaoqlK1u
MUzdjiPiTgPwiRDiiIT5r9O84sESKKrOVB0DtmAkHs4O5Bfnp7ASIIc+GKsC7BvU
Nzax6NY+uBKFP1Arl7Gn9tYpzzL5oIjcg28JikXb8oBX0jksvr8hr2gU022S3q3Q
ioeHet9uwbatE/93OXSEfyzfEHkqoFtK4RFYGikFVpiP5A63zQy8S4G1makwcD+J
s6a0SLbgSC1H4m7yt7f3IaFNp2kdr4IzSRqetP0tbVQ7Q5if5OU+e/5X8LBhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUelsQE4493+vhelfuzuKer2/BsfYwHwYDVR0j
BBgwFoAU0Cejw5BWmb4bAbwvr3dobupmwgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1
d2svMC9EMDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMjdBM0MzOTA1Njk5QkUx
QjAxQkMyRkFGNzc2ODZFRUE2NkMyMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjMnNBVkhZdkJ4bk5wVkRBQTI4ZWFubUo5b2VnU1lDWFVHNzVLUEdIdXdrLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzkzNDM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItu4wwDQYJKoZIhvcNAQELBQADggEBAA3bKhWA
xllumyIr0weA3PAyxltdDGj6BvSCqV1eXjtExOxV1kJk/xhve3GxmC53k4fR6ots
DWUokM2r82LerBLA//tPYopw9V54Jz0hu9ykwG3D5MNa7Cs3SdXIFdF42OvoWx94
BAcUlE++U7DxYcBQuY6CYYmVFFa7mP+0wMA4BRTj3x5KsYYViy+PgPqg2jDfPB9b
4Nq++6zrOsnPJ1jpX4NpATO/s6yQ7+FS1eLVrZTLFoxV/nViyE3JO9aVv51Q82SE
znEgxt/qLTY+T6rrV5aOO8VFvhYCbdwc6LkVorIRSn3M/YEkb4lD1FWZycwZ44ou
D4hlzzeZENxyDtQ=
-----END CERTIFICATE-----
Generated at Fri Jun 6 21:09:31 2025 by rpki-client