Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
File: 323830343a313336383a3a2f33322d3333203d3e20323632383038.roa (raw, json)
Hash identifier: SodV9fBsbsoI6Wd3USyTZe8pt34tzkk5DqfmQnGkTZ8=
Subject key identifier: A8:02:2D:5A:E0:B8:1D:B7:D6:EA:7B:91:B2:9D:D6:71:69:B1:B0:CF
Certificate issuer: /CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
Certificate serial: 5A41C4BA48A642218BCB0414F7A6331CEE97052F
Authority key identifier: 52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
Signing time: Tue 25 Jun 2024 20:44:04 +0000
ROA not before: Tue 25 Jun 2024 20:39:04 +0000
ROA not after: Tue 24 Jun 2025 20:44:04 +0000
asID: 262808
IP address blocks: 2804:1368::/32 maxlen: 33
Validation: Failed, certificate revoked on Tue 02 Jul 2024 13:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:41:c4:ba:48:a6:42:21:8b:cb:04:14:f7:a6:33:1c:ee:97:05:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2
Validity
Not Before: Jun 25 20:39:04 2024 GMT
Not After : Jun 24 20:44:04 2025 GMT
Subject: CN=A8022D5AE0B81DB7D6EA7B91B29DD67169B1B0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7b:2e:58:6d:01:1f:42:85:3e:de:31:9f:8c:
2f:1c:7c:6d:72:e7:bc:ef:5c:57:0a:f6:2e:3e:26:
08:2c:ff:a7:2d:d6:25:14:72:a0:ed:dd:38:55:9d:
4c:f7:09:0b:a1:38:ee:59:ca:a0:d2:86:21:c2:14:
4c:f3:56:dd:60:8d:24:a9:8b:35:b6:c5:49:9e:f1:
fc:cb:08:60:18:d6:3f:42:28:4e:55:ae:fa:7d:4b:
a8:cf:64:18:f5:b7:c4:2e:6e:fd:05:81:cf:7b:f6:
18:e0:83:7f:ea:d9:82:d8:eb:e8:d7:6f:1f:28:72:
e2:0b:28:0c:c5:f7:a1:af:ef:18:3c:f4:fb:10:e3:
ca:05:1e:17:b8:cd:d9:12:e4:b2:00:43:c9:ed:5b:
b5:5e:d4:dc:82:f0:9b:cc:da:14:a4:ab:9e:2a:b8:
e9:07:16:44:59:54:02:f8:f1:8c:96:4c:cc:97:3f:
8d:7e:23:d4:ee:5d:a5:8c:85:a7:80:e4:16:71:d1:
03:7f:51:b8:66:ab:6e:28:93:37:86:5d:9b:8a:d9:
ed:d0:48:e1:ae:9f:1d:68:eb:1a:a2:b2:05:45:a4:
05:ad:de:bf:11:02:fd:ad:ac:23:a0:c9:1d:25:ac:
8f:08:5f:45:07:a9:79:e2:91:db:91:de:66:9c:5d:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:2D:5A:E0:B8:1D:B7:D6:EA:7B:91:B2:9D:D6:71:69:B1:B0:CF
X509v3 Authority Key Identifier:
keyid:52:29:C7:B7:5F:B4:FC:E3:85:3F:8B:9C:79:AE:67:49:16:8F:4D:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5229C7B75FB4FCE3853F8B9C79AE6749168F4DE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3T4ixYQ47sWEzJXijEAZaVUv7GCC1qa8b9zGTx6HVMh/0/323830343a313336383a3a2f33322d3333203d3e20323632383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1368::/32
Signature Algorithm: sha256WithRSAEncryption
b0:7b:ac:3a:7f:80:61:c9:97:2b:68:1d:75:ba:de:b9:2b:6c:
0c:15:5c:c5:87:02:44:52:02:af:65:0c:45:65:35:42:42:9d:
17:c4:46:94:d0:7c:85:84:f2:53:40:a8:0f:56:2b:61:3b:1e:
3a:7f:23:4a:cf:cd:cb:82:f6:60:8b:65:f5:b3:33:31:67:ae:
12:26:74:f4:59:49:97:af:a5:1e:49:04:30:aa:79:8d:54:f3:
78:d1:37:87:34:57:38:f8:8c:be:63:98:61:be:54:21:89:6d:
63:11:b2:3d:4a:a9:3b:e5:4c:a1:b1:71:ce:4c:ba:74:ab:15:
46:62:a9:4b:df:98:68:2c:22:df:2f:64:b2:ef:71:2f:11:e2:
b9:8d:63:9c:9b:27:df:50:5d:f3:15:c1:2a:6b:04:db:5b:37:
79:2a:19:e9:40:f1:8a:c9:a2:e0:c7:c7:b0:b5:d8:74:3f:63:
e1:60:c0:25:ab:0c:22:ef:42:61:29:3a:81:b3:ea:8e:15:bf:
1e:41:a5:63:49:db:2e:85:bf:99:9d:d6:da:ea:a3:0f:3a:5e:
7a:0d:c3:61:83:70:ae:16:e1:69:7a:a4:8d:eb:8d:ad:40:5c:
26:e0:f5:aa:ff:22:67:f7:73:f8:a9:ed:33:e6:8d:db:9e:e3:
3d:54:07:17
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUWkHEukimQiGLywQU96YzHO6XBS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyOUM3Qjc1RkI0RkNFMzg1M0Y4QjlDNzlBRTY3NDkx
NjhGNERFMjAeFw0yNDA2MjUyMDM5MDRaFw0yNTA2MjQyMDQ0MDRaMDMxMTAvBgNV
BAMTKEE4MDIyRDVBRTBCODFEQjdENkVBN0I5MUIyOURENjcxNjlCMUIwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxey5YbQEfQoU+3jGfjC8cfG1y
57zvXFcK9i4+Jggs/6ct1iUUcqDt3ThVnUz3CQuhOO5ZyqDShiHCFEzzVt1gjSSp
izW2xUme8fzLCGAY1j9CKE5Vrvp9S6jPZBj1t8Qubv0Fgc979hjgg3/q2YLY6+jX
bx8ocuILKAzF96Gv7xg89PsQ48oFHhe4zdkS5LIAQ8ntW7Ve1NyC8JvM2hSkq54q
uOkHFkRZVAL48YyWTMyXP41+I9TuXaWMhaeA5BZx0QN/Ubhmq24okzeGXZuK2e3Q
SOGunx1o6xqisgVFpAWt3r8RAv2trCOgyR0lrI8IX0UHqXnikduR3macXVTHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUqAItWuC4HbfW6nuRsp3WcWmxsM8wHwYDVR0j
BBgwFoAUUinHt1+0/OOFP4ucea5nSRaPTeIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTNUNGl4WVE0N3NXRXpKWGlqRUFaYVZVdjdHQ0MxcWE4Yjl6R1R4NkhW
TWgvMC81MjI5QzdCNzVGQjRGQ0UzODUzRjhCOUM3OUFFNjc0OTE2OEY0REUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMjlDN0I3NUZCNEZDRTM4
NTNGOEI5Qzc5QUU2NzQ5MTY4RjRERTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0EzVDRpeFlRNDdzV0V6SlhpakVBWmFWVXY3R0NDMXFhOGI5ekdUeDZIVk1oLzAv
MzIzODMwMzQzYTMxMzMzNjM4M2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjMy
MzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTaDANBgkqhkiG9w0BAQsFAAOCAQEAsHusOn+A
YcmXK2gddbreuStsDBVcxYcCRFICr2UMRWU1QkKdF8RGlNB8hYTyU0CoD1YrYTse
On8jSs/Ny4L2YItl9bMzMWeuEiZ09FlJl6+lHkkEMKp5jVTzeNE3hzRXOPiMvmOY
Yb5UIYltYxGyPUqpO+VMobFxzky6dKsVRmKpS9+YaCwi3y9ksu9xLxHiuY1jnJsn
31Bd8xXBKmsE21s3eSoZ6UDxismi4MfHsLXYdD9j4WDAJasMIu9CYSk6gbPqjhW/
HkGlY0nbLoW/mZ3W2uqjDzpeeg3DYYNwrhbhaXqkjeuNrUBcJuD1qv8iZ/dz+Knt
M+aN257jPVQHFw==
-----END CERTIFICATE-----
Generated at Tue Jul 2 16:18:54 2024 by rpki-client on console-fra.rpki-client.org