Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32322d3232203d3e20323632373932.roa
File: 3230312e37362e3130342e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier: zcAJUTMmjkwKp6T335SHLUElSU/jYeNzP/SM2aFHWRw=
Subject key identifier: 4A:1E:C1:5C:8E:9C:A4:73:A2:FC:59:99:D6:E1:F7:18:C8:DA:8B:14
Certificate issuer: /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial: 634BD0A5A5D72D0C989304C28D16D565ED24F050
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32322d3232203d3e20323632373932.roa
Signing time: Thu 04 Apr 2024 11:26:03 +0000
ROA not before: Thu 04 Apr 2024 11:21:03 +0000
ROA not after: Thu 03 Apr 2025 11:26:03 +0000
asID: 262792
IP address blocks: 201.76.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Sep 2024 23:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4b:d0:a5:a5:d7:2d:0c:98:93:04:c2:8d:16:d5:65:ed:24:f0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Validity
Not Before: Apr 4 11:21:03 2024 GMT
Not After : Apr 3 11:26:03 2025 GMT
Subject: CN=4A1EC15C8E9CA473A2FC5999D6E1F718C8DA8B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:87:d4:7b:d5:d2:0e:31:b6:ba:fa:56:62:
d7:ad:70:cd:5e:74:8c:5d:c7:b1:fd:c3:46:c2:9d:
a5:5e:6b:14:ad:8a:65:7e:76:e1:68:54:7f:90:3c:
e6:60:c2:4b:d8:20:37:58:95:73:fa:3f:16:50:ff:
64:25:d0:31:8a:ac:41:6d:15:97:42:01:8a:04:dd:
31:ab:5f:a4:5d:fd:f1:aa:6a:f0:49:c6:2c:f0:3e:
04:e4:b7:e0:b7:a6:0f:3a:4d:9a:18:af:06:0d:20:
f0:73:37:f3:3e:2c:64:02:3a:77:fe:f4:29:51:d7:
d1:76:15:34:e4:36:2b:89:25:20:2a:59:a4:81:d3:
da:91:f9:b8:12:4e:b9:31:c1:83:26:5a:f5:e3:f9:
06:d0:99:2b:ee:3e:2b:05:0f:3c:83:ed:1c:91:8d:
36:52:62:cd:84:6c:f1:99:02:f0:c5:8b:a8:3e:8b:
53:75:8f:76:63:a8:d7:89:74:30:e5:e1:af:71:c8:
bb:61:df:86:e7:42:3e:50:f9:0b:af:64:e3:1e:bd:
2c:98:c3:4a:99:f1:4e:87:97:c1:25:a6:41:a9:12:
11:0e:fc:f8:59:94:87:39:f2:a8:12:fd:0a:15:67:
45:da:96:be:68:47:da:b3:d2:46:8e:33:0a:86:31:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1E:C1:5C:8E:9C:A4:73:A2:FC:59:99:D6:E1:F7:18:C8:DA:8B:14
X509v3 Authority Key Identifier:
keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32322d3232203d3e20323632373932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.76.104.0/22
Signature Algorithm: sha256WithRSAEncryption
74:c9:66:51:90:0f:f1:32:ef:96:c9:0e:b9:3e:2d:9c:aa:d8:
45:54:38:47:dd:4b:57:16:39:d1:d7:26:b0:42:4b:9a:a6:ed:
be:4c:76:58:d5:a6:66:b4:bb:72:66:3c:4c:c5:5b:fe:fd:f9:
2d:52:ff:6c:82:c8:d5:7f:ff:58:46:30:32:20:c2:df:69:4c:
89:72:ab:e4:c3:6a:0c:a3:a2:4e:08:b5:b0:15:bd:0e:7f:5a:
ce:6e:83:13:8c:98:24:c4:0c:40:20:77:72:6a:48:d5:22:b4:
a2:2b:7b:42:f1:1b:05:2d:fa:20:40:3b:1e:5d:eb:9e:9f:fc:
36:05:bb:a8:69:42:e2:fe:bb:2b:f0:da:f9:a2:5a:2e:e7:59:
d2:f7:da:5f:f8:54:da:d8:f0:1b:21:7d:6d:ff:52:e8:44:b3:
b6:19:af:89:69:84:1a:27:fd:60:f1:0a:5f:22:0b:98:a8:ee:
76:2a:b0:48:9e:6b:92:7c:08:c0:fd:3b:70:95:bf:57:0a:0c:
56:98:da:80:5d:d8:e2:af:4f:9e:b9:a2:e8:76:33:c9:47:af:
c9:e0:86:be:1e:f3:ab:f0:1a:c4:19:a4:27:ec:d5:e9:80:2e:
db:6a:93:bf:58:35:11:e7:1d:be:0a:17:7a:17:17:9d:38:c5:
f0:eb:33:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY0vQpaXXLQyYkwTCjRbVZe0k8FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNDA0MDQxMTIxMDNaFw0yNTA0MDMxMTI2MDNaMDMxMTAvBgNV
BAMTKDRBMUVDMTVDOEU5Q0E0NzNBMkZDNTk5OUQ2RTFGNzE4QzhEQThCMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMf4fUe9XSDjG2uvpWYtetcM1e
dIxdx7H9w0bCnaVeaxStimV+duFoVH+QPOZgwkvYIDdYlXP6PxZQ/2Ql0DGKrEFt
FZdCAYoE3TGrX6Rd/fGqavBJxizwPgTkt+C3pg86TZoYrwYNIPBzN/M+LGQCOnf+
9ClR19F2FTTkNiuJJSAqWaSB09qR+bgSTrkxwYMmWvXj+QbQmSvuPisFDzyD7RyR
jTZSYs2EbPGZAvDFi6g+i1N1j3ZjqNeJdDDl4a9xyLth34bnQj5Q+QuvZOMevSyY
w0qZ8U6Hl8ElpkGpEhEO/PhZlIc58qgS/QoVZ0Xalr5oR9qz0kaOMwqGMZrjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSh7BXI6cpHOi/FmZ1uH3GMjaixQwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJTGgwDQYJKoZIhvcNAQELBQADggEBAHTJZlGQ
D/Ey75bJDrk+LZyq2EVUOEfdS1cWOdHXJrBCS5qm7b5MdljVpma0u3JmPEzFW/79
+S1S/2yCyNV//1hGMDIgwt9pTIlyq+TDagyjok4ItbAVvQ5/Ws5ugxOMmCTEDEAg
d3JqSNUitKIre0LxGwUt+iBAOx5d656f/DYFu6hpQuL+uyvw2vmiWi7nWdL32l/4
VNrY8BshfW3/UuhEs7YZr4lphBon/WDxCl8iC5io7nYqsEiea5J8CMD9O3CVv1cK
DFaY2oBd2OKvT565ouh2M8lHr8nghr4e86vwGsQZpCfs1emALttqk79YNRHnHb4K
F3oXF504xfDrMwA=
-----END CERTIFICATE-----
Generated at Tue Oct 1 00:23:33 2024 by rpki-client on console-ams.rpki-client.org