Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233332e302f32342d3332203d3e20323731363536.roa
File: 34352e3138362e3233332e302f32342d3332203d3e20323731363536.roa (raw, json)
Hash identifier: so8RXTkeLjhk06pWpU5yhCoPJPanqSM2nRNe/vR61QE=
Subject key identifier: AB:B9:F4:CC:5A:6B:C3:05:CB:2D:02:DE:DC:47:1D:E4:9A:70:CD:EE
Certificate issuer: /CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Certificate serial: 1BDFF660FCB430DCCB0FB8DF8253AD2DFBDED74E
Authority key identifier: 40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233332e302f32342d3332203d3e20323731363536.roa
Signing time: Wed 05 Feb 2025 13:10:07 +0000
ROA not before: Wed 05 Feb 2025 13:05:07 +0000
ROA not after: Wed 04 Feb 2026 13:10:07 +0000
asID: 271656
IP address blocks: 45.186.233.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 16:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:df:f6:60:fc:b4:30:dc:cb:0f:b8:df:82:53:ad:2d:fb:de:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4060CF147FD7B929ED4E779D61DCD3763F62E9B6
Validity
Not Before: Feb 5 13:05:07 2025 GMT
Not After : Feb 4 13:10:07 2026 GMT
Subject: CN=ABB9F4CC5A6BC305CB2D02DEDC471DE49A70CDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:1f:7c:f7:8d:8d:67:af:de:86:77:eb:11:
37:73:6f:80:81:41:bf:75:c6:4b:67:f7:d7:e1:32:
7b:9b:16:b2:c3:71:12:c2:f0:37:1d:ed:9a:fe:74:
51:23:21:7e:49:93:05:06:60:72:9e:10:c1:97:78:
2c:b4:36:0a:41:40:6c:28:e9:92:b5:fc:fb:77:d7:
b9:48:5a:4c:f2:00:ac:5f:4d:23:29:79:8b:79:e8:
06:1b:5e:ec:c2:4b:6f:7f:49:e3:6a:16:28:f2:c7:
65:70:e3:bc:1f:02:2a:62:6b:91:fc:20:53:f8:73:
2f:60:bc:d7:8e:c8:68:bd:da:cc:4a:1c:5c:6d:0d:
05:6c:92:2c:88:56:98:ed:b8:f8:b5:24:f6:07:f2:
6d:db:6f:1a:a3:f7:75:cc:af:7d:ef:09:45:ad:01:
24:bc:4d:0a:c0:0d:ea:be:56:86:6b:53:2d:e7:c4:
a0:fe:22:bc:a7:05:c0:79:ad:4b:9e:24:20:d4:87:
70:b5:51:bf:66:d9:c8:76:f1:d0:e2:98:08:f4:72:
0e:cd:cd:76:4d:42:59:3b:e1:5e:3b:fe:8e:db:d1:
db:f2:78:d6:dd:57:be:b7:17:0d:1a:2b:9d:14:ec:
33:40:47:f8:03:55:05:8f:42:b8:02:ff:e6:44:d7:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:F4:CC:5A:6B:C3:05:CB:2D:02:DE:DC:47:1D:E4:9A:70:CD:EE
X509v3 Authority Key Identifier:
keyid:40:60:CF:14:7F:D7:B9:29:ED:4E:77:9D:61:DC:D3:76:3F:62:E9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4060CF147FD7B929ED4E779D61DCD3763F62E9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89Tn91A53yhbjX1D9DBJ8TT85y6NBj4Leo6YJG7BGzMM/0/34352e3138362e3233332e302f32342d3332203d3e20323731363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.233.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e7:52:3c:7d:70:a9:fe:c3:5d:b4:43:51:19:91:78:5b:40:
d2:2f:2a:47:7f:50:23:c3:05:a5:2b:0a:b9:33:6f:96:44:2a:
4e:84:3c:f7:c2:22:79:6d:b9:d3:1d:4c:d8:c4:6d:be:37:85:
cb:68:cb:3d:ab:32:cc:5b:84:28:41:23:03:6f:a3:9f:ba:7f:
79:6d:58:0d:20:61:2b:5d:d6:bb:e9:73:62:ac:f5:9c:bb:b5:
2a:63:d6:35:47:b8:bf:1c:09:9e:c9:59:bd:ea:02:bc:db:e5:
4c:2b:f2:ad:f8:22:4a:99:3b:ca:22:52:e1:dd:90:78:51:ac:
27:20:90:e9:f5:59:d0:56:44:af:52:34:0a:77:fe:cd:70:c7:
70:fb:07:1e:06:98:ed:1d:b9:d3:69:83:47:a6:5b:0c:30:c3:
30:99:9b:7a:d8:6c:77:37:a3:9e:06:3c:c4:38:d5:10:e9:30:
8d:0e:61:dd:ec:3d:9b:8b:94:ee:1c:a1:7e:5c:0f:ab:c1:75:
70:de:39:b1:59:2a:d9:a3:32:f9:00:f8:24:60:01:5a:85:23:
73:2f:cc:67:1f:9f:7e:ee:75:6c:49:eb:e0:7e:9e:5c:ef:ba:
1f:32:95:9a:2b:99:69:35:fb:a6:bd:19:be:9c:e7:a8:63:85:
4c:4a:c9:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG9/2YPy0MNzLD7jfglOtLfve104wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2MENGMTQ3RkQ3QjkyOUVENEU3NzlENjFEQ0QzNzYz
RjYyRTlCNjAeFw0yNTAyMDUxMzA1MDdaFw0yNjAyMDQxMzEwMDdaMDMxMTAvBgNV
BAMTKEFCQjlGNENDNUE2QkMzMDVDQjJEMDJERURDNDcxREU0OUE3MENERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspR98942NZ6/ehnfrETdzb4CB
Qb91xktn99fhMnubFrLDcRLC8Dcd7Zr+dFEjIX5JkwUGYHKeEMGXeCy0NgpBQGwo
6ZK1/Pt317lIWkzyAKxfTSMpeYt56AYbXuzCS29/SeNqFijyx2Vw47wfAipia5H8
IFP4cy9gvNeOyGi92sxKHFxtDQVskiyIVpjtuPi1JPYH8m3bbxqj93XMr33vCUWt
ASS8TQrADeq+VoZrUy3nxKD+IrynBcB5rUueJCDUh3C1Ub9m2ch28dDimAj0cg7N
zXZNQlk74V47/o7b0dvyeNbdV763Fw0aK50U7DNAR/gDVQWPQrgC/+ZE1we/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq7n0zFprwwXLLQLe3Ecd5Jpwze4wHwYDVR0j
BBgwFoAUQGDPFH/XuSntTnedYdzTdj9i6bYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODlUbjkxQTUzeWhialgxRDlEQko4VFQ4NXk2TkJqNExlbzZZSkc3Qkd6
TU0vMC80MDYwQ0YxNDdGRDdCOTI5RUQ0RTc3OUQ2MURDRDM3NjNGNjJFOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjBDRjE0N0ZEN0I5MjlF
RDRFNzc5RDYxRENEMzc2M0Y2MkU5QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg5VG45MUE1M3loYmpYMUQ5REJKOFRUODV5Nk5CajRMZW82WUpHN0JHek1NLzAv
MzQzNTJlMzEzODM2MmUzMjMzMzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzEzNjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuukwDQYJKoZIhvcNAQELBQADggEBAEPnUjx9
cKn+w120Q1EZkXhbQNIvKkd/UCPDBaUrCrkzb5ZEKk6EPPfCInltudMdTNjEbb43
hctoyz2rMsxbhChBIwNvo5+6f3ltWA0gYStd1rvpc2Ks9Zy7tSpj1jVHuL8cCZ7J
Wb3qArzb5Uwr8q34IkqZO8oiUuHdkHhRrCcgkOn1WdBWRK9SNAp3/s1wx3D7Bx4G
mO0dudNpg0emWwwwwzCZm3rYbHc3o54GPMQ41RDpMI0OYd3sPZuLlO4coX5cD6vB
dXDeObFZKtmjMvkA+CRgAVqFI3MvzGcfn37udWxJ6+B+nlzvuh8ylZormWk1+6a9
Gb6c56hjhUxKyXQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:29:06 2025 by rpki-client