Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32312d3231203d3e20323632373932.roa
File: 3230312e37362e3130342e302f32312d3231203d3e20323632373932.roa (raw, json)
Hash identifier: ftaY/matTWiHk2Bo1Cm06ooVhjlj3VDn0QO4cdXtBCA=
Subject key identifier: 33:79:1C:46:FD:94:CF:F9:EA:65:33:01:E4:4F:3A:84:E1:59:B2:D1
Certificate issuer: /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial: 71C179597C9AC3D2F6B3F6F466C033BF3D8EFF1D
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32312d3231203d3e20323632373932.roa
Signing time: Thu 04 Apr 2024 11:26:03 +0000
ROA not before: Thu 04 Apr 2024 11:21:03 +0000
ROA not after: Thu 03 Apr 2025 11:26:03 +0000
asID: 262792
IP address blocks: 201.76.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c1:79:59:7c:9a:c3:d2:f6:b3:f6:f4:66:c0:33:bf:3d:8e:ff:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Validity
Not Before: Apr 4 11:21:03 2024 GMT
Not After : Apr 3 11:26:03 2025 GMT
Subject: CN=33791C46FD94CFF9EA653301E44F3A84E159B2D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:6e:fd:26:0d:f0:61:b5:9c:5e:e7:92:fe:
75:be:1f:07:ff:c0:0c:38:5d:55:c8:b9:6a:cb:48:
6a:5f:39:9a:46:59:c0:74:75:74:f2:90:69:ee:fd:
aa:c6:4f:bf:e6:80:55:7f:03:29:3e:2b:0d:63:bc:
45:fc:c7:e5:9a:49:11:3b:c9:8e:ed:29:bc:c5:5a:
40:da:a1:71:f6:33:f0:92:cc:26:c6:b9:a3:c6:5d:
8c:37:7b:7d:f6:53:e8:d0:f3:11:86:f1:c6:bc:c6:
85:9a:be:7e:05:ff:b3:ec:c8:c4:b8:6d:69:23:97:
fc:eb:95:95:95:a6:fe:22:a2:f1:0f:57:86:9d:59:
65:c5:5d:55:79:38:5d:18:35:45:07:6d:7c:89:a1:
5c:9e:c2:1b:88:55:30:23:9f:fb:38:fa:9c:96:0d:
00:f4:66:d7:0a:fa:e6:8d:95:16:3d:5b:47:cd:74:
eb:83:d9:cb:58:51:cd:02:47:35:65:b4:8f:2b:be:
61:d6:b5:17:a5:ab:55:a5:e4:c8:ea:56:7f:e5:85:
41:ca:ae:81:7f:ba:b8:96:96:13:af:00:bc:d5:48:
bd:90:ee:79:bc:2b:c1:3e:47:24:fb:43:cb:3b:44:
c1:08:78:0a:c2:8f:85:b1:4f:57:87:c6:3f:28:8a:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:1C:46:FD:94:CF:F9:EA:65:33:01:E4:4F:3A:84:E1:59:B2:D1
X509v3 Authority Key Identifier:
keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32312d3231203d3e20323632373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.76.104.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:59:c1:24:e2:51:f1:86:10:4e:3a:18:78:a8:bc:54:9a:b6:
e6:38:06:31:42:65:14:f2:29:25:98:5c:19:67:25:e0:0e:c6:
d9:1e:12:2e:7c:1b:6d:50:7e:30:a7:e2:62:90:20:eb:74:0f:
dd:c3:53:ed:eb:22:cc:37:f0:54:f6:f7:43:31:3e:45:7e:d8:
ae:4c:50:52:c7:02:66:11:d2:93:8c:42:c0:27:f5:b6:d3:48:
84:5f:7d:81:55:95:50:44:5b:b4:dc:2e:b7:f2:3f:21:be:5b:
40:df:4f:0f:7e:b2:65:40:ec:45:75:2d:30:82:e5:77:7b:85:
0d:62:52:f4:ed:5c:88:85:04:41:0e:48:91:40:00:54:39:b6:
ec:99:37:b8:87:19:93:01:9d:a6:58:93:b9:fa:50:18:29:3b:
32:96:8d:9e:3f:91:0a:2e:f1:7e:b8:aa:35:b2:d2:0e:21:c6:
0a:83:94:1f:96:c7:84:49:f5:fe:44:ad:ad:c0:c8:68:c4:36:
e8:7b:cb:02:6e:7a:c6:45:87:cf:8b:15:a3:bb:e7:25:af:d0:
80:f8:c5:6a:c7:6e:d8:86:4e:cb:db:6e:78:6f:71:de:18:9b:
d0:db:87:93:80:3b:e5:f5:6b:69:43:b8:1a:b8:6a:16:9a:05:
a5:c4:bb:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUccF5WXyaw9L2s/b0ZsAzvz2O/x0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNDA0MDQxMTIxMDNaFw0yNTA0MDMxMTI2MDNaMDMxMTAvBgNV
BAMTKDMzNzkxQzQ2RkQ5NENGRjlFQTY1MzMwMUU0NEYzQTg0RTE1OUIyRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xm79Jg3wYbWcXueS/nW+Hwf/
wAw4XVXIuWrLSGpfOZpGWcB0dXTykGnu/arGT7/mgFV/Ayk+Kw1jvEX8x+WaSRE7
yY7tKbzFWkDaoXH2M/CSzCbGuaPGXYw3e332U+jQ8xGG8ca8xoWavn4F/7PsyMS4
bWkjl/zrlZWVpv4iovEPV4adWWXFXVV5OF0YNUUHbXyJoVyewhuIVTAjn/s4+pyW
DQD0ZtcK+uaNlRY9W0fNdOuD2ctYUc0CRzVltI8rvmHWtRelq1Wl5MjqVn/lhUHK
roF/uriWlhOvALzVSL2Q7nm8K8E+RyT7Q8s7RMEIeArCj4WxT1eHxj8oiga/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM3kcRv2Uz/nqZTMB5E86hOFZstEwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzMTMwMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPJTGgwDQYJKoZIhvcNAQELBQADggEBALJZwSTi
UfGGEE46GHiovFSatuY4BjFCZRTyKSWYXBlnJeAOxtkeEi58G21QfjCn4mKQIOt0
D93DU+3rIsw38FT290MxPkV+2K5MUFLHAmYR0pOMQsAn9bbTSIRffYFVlVBEW7Tc
LrfyPyG+W0DfTw9+smVA7EV1LTCC5Xd7hQ1iUvTtXIiFBEEOSJFAAFQ5tuyZN7iH
GZMBnaZYk7n6UBgpOzKWjZ4/kQou8X64qjWy0g4hxgqDlB+Wx4RJ9f5Era3AyGjE
Nuh7ywJuesZFh8+LFaO75yWv0ID4xWrHbtiGTsvbbnhvcd4Ym9Dbh5OAO+X1a2lD
uBq4ahaaBaXEu60=
-----END CERTIFICATE-----
Generated at Tue Oct 1 00:23:33 2024 by rpki-client on console-ams.rpki-client.org