Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
File: 3230302e392e3232302e302f32322d3234203d3e20323632343538.roa (raw, json)
Hash identifier: pVEDZ/A7sGDbU85q4B+8Ww/BdF5ME0JTuSaYtdX1Ga0=
Subject key identifier: 23:C2:BB:B5:D6:90:5D:C9:6E:2F:A9:9E:80:42:88:6D:15:B2:C1:41
Certificate issuer: /CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Certificate serial: 40C2120B6AFBE945DEEA34FBE55CA943B4598FDC
Authority key identifier: FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
Signing time: Thu 05 Sep 2024 17:51:00 +0000
ROA not before: Thu 05 Sep 2024 17:46:00 +0000
ROA not after: Thu 04 Sep 2025 17:51:00 +0000
asID: 262458
IP address blocks: 200.9.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 16:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c2:12:0b:6a:fb:e9:45:de:ea:34:fb:e5:5c:a9:43:b4:59:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDB293D8646ACB35E10785D8B748695F452A1DC2
Validity
Not Before: Sep 5 17:46:00 2024 GMT
Not After : Sep 4 17:51:00 2025 GMT
Subject: CN=23C2BBB5D6905DC96E2FA99E8042886D15B2C141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:bd:99:94:50:c6:bb:f0:4a:2e:cf:34:d0:
ad:eb:36:31:05:78:b1:5e:b7:df:e9:db:44:59:84:
22:51:cf:e9:a6:43:41:94:6e:92:e6:fe:0f:b1:f8:
b2:77:1e:aa:81:ca:9c:0d:0b:e9:84:bc:85:89:0f:
33:f9:f7:f4:e1:ee:64:0a:52:b7:7c:85:71:47:63:
c5:91:57:ac:49:8b:36:fb:f6:ef:2d:44:1f:2e:e4:
22:0f:42:e2:a1:b9:c2:df:5b:68:44:a9:0f:cc:2b:
21:50:0b:ab:7f:4c:4b:59:fe:d1:fb:b3:be:80:fd:
60:3b:1a:2c:41:b0:ea:69:94:09:1d:8b:b5:63:5d:
13:1a:26:bf:c1:7e:fd:5b:2f:1d:25:72:51:7f:f8:
48:99:9f:17:b6:2b:36:30:d5:2a:bf:9a:0d:00:66:
44:87:a6:11:70:a8:1a:99:72:1d:8c:1b:b4:4e:36:
84:07:26:e3:44:7d:33:7d:4b:48:26:30:40:d1:d0:
63:a1:2f:e6:3b:8d:79:9f:b2:3c:bb:fb:b3:1e:4a:
99:21:62:4b:1c:3e:09:49:26:53:79:b2:71:f3:cc:
be:1c:40:2d:e4:8b:9e:98:48:b3:9a:5a:95:f5:72:
ae:da:cd:f8:a1:a3:35:eb:23:54:de:9c:80:99:87:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:BB:B5:D6:90:5D:C9:6E:2F:A9:9E:80:42:88:6D:15:B2:C1:41
X509v3 Authority Key Identifier:
keyid:FD:B2:93:D8:64:6A:CB:35:E1:07:85:D8:B7:48:69:5F:45:2A:1D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/FDB293D8646ACB35E10785D8B748695F452A1DC2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDB293D8646ACB35E10785D8B748695F452A1DC2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjrkJ3wWR2J7ete7E7V5v544yudGxtSu4U3CKruArvPu/0/3230302e392e3232302e302f32322d3234203d3e20323632343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.220.0/22
Signature Algorithm: sha256WithRSAEncryption
81:23:65:67:b7:fa:90:38:6d:fc:d2:8f:de:60:29:3b:2c:28:
1d:28:a7:24:a6:ad:94:3c:46:29:07:5e:09:65:84:19:d0:74:
45:15:d6:b1:32:d8:7d:cb:a1:e6:ad:2f:b4:5e:89:05:35:b6:
e9:e2:3e:33:f6:45:10:fa:79:de:97:fb:7b:18:91:1d:43:e5:
78:6a:0c:c2:f2:5a:d0:ae:17:be:b2:62:2a:03:ec:8b:30:69:
79:f5:44:a5:5a:14:0f:ec:a4:13:b6:69:ec:14:c0:cd:45:3d:
88:c2:17:56:bc:02:83:b1:b9:02:1d:ed:42:0f:e9:76:92:35:
29:e2:2e:b3:e2:6e:85:73:2e:61:96:71:77:f1:8c:fe:f7:75:
f8:e6:30:49:c6:53:d5:80:40:a4:88:36:7b:8f:9e:29:44:91:
ed:92:45:f9:dd:4d:d3:b9:37:af:b7:44:22:1c:c6:d1:c7:70:
81:8b:65:90:4a:18:f0:aa:48:3c:50:1e:3b:8f:e8:a0:55:76:
3d:69:05:ad:9d:4c:7f:60:18:d0:f2:5f:72:92:36:50:b1:a8:
12:d3:2b:15:66:e4:5f:eb:a6:99:cb:d9:f2:e6:d4:b4:31:90:
59:f5:3a:5d:4b:74:b5:66:bf:ec:2c:13:58:7e:3b:ba:8d:be:
5d:92:c9:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQMISC2r76UXe6jT75VypQ7RZj9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRCMjkzRDg2NDZBQ0IzNUUxMDc4NUQ4Qjc0ODY5NUY0
NTJBMURDMjAeFw0yNDA5MDUxNzQ2MDBaFw0yNTA5MDQxNzUxMDBaMDMxMTAvBgNV
BAMTKDIzQzJCQkI1RDY5MDVEQzk2RTJGQTk5RTgwNDI4ODZEMTVCMkMxNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJxb2ZlFDGu/BKLs800K3rNjEF
eLFet9/p20RZhCJRz+mmQ0GUbpLm/g+x+LJ3HqqBypwNC+mEvIWJDzP59/Th7mQK
Urd8hXFHY8WRV6xJizb79u8tRB8u5CIPQuKhucLfW2hEqQ/MKyFQC6t/TEtZ/tH7
s76A/WA7GixBsOpplAkdi7VjXRMaJr/Bfv1bLx0lclF/+EiZnxe2KzYw1Sq/mg0A
ZkSHphFwqBqZch2MG7RONoQHJuNEfTN9S0gmMEDR0GOhL+Y7jXmfsjy7+7MeSpkh
YkscPglJJlN5snHzzL4cQC3ki56YSLOaWpX1cq7azfihozXrI1TenICZhy0lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI8K7tdaQXcluL6megEKIbRWywUEwHwYDVR0j
BBgwFoAU/bKT2GRqyzXhB4XYt0hpX0UqHcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWpya0ozd1dSMko3ZXRlN0U3VjV2NTQ0eXVkR3h0U3U0VTNDS3J1QXJ2
UHUvMC9GREIyOTNEODY0NkFDQjM1RTEwNzg1RDhCNzQ4Njk1RjQ1MkExREMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQjI5M0Q4NjQ2QUNCMzVF
MTA3ODVEOEI3NDg2OTVGNDUyQTFEQzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FqcmtKM3dXUjJKN2V0ZTdFN1Y1djU0NHl1ZEd4dFN1NFUzQ0tydUFydlB1LzAv
MzIzMDMwMmUzOTJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyAncMA0GCSqGSIb3DQEBCwUAA4IBAQCBI2Vnt/qQ
OG380o/eYCk7LCgdKKckpq2UPEYpB14JZYQZ0HRFFdaxMth9y6HmrS+0XokFNbbp
4j4z9kUQ+nnel/t7GJEdQ+V4agzC8lrQrhe+smIqA+yLMGl59USlWhQP7KQTtmns
FMDNRT2IwhdWvAKDsbkCHe1CD+l2kjUp4i6z4m6Fcy5hlnF38Yz+93X45jBJxlPV
gECkiDZ7j54pRJHtkkX53U3TuTevt0QiHMbRx3CBi2WQShjwqkg8UB47j+igVXY9
aQWtnUx/YBjQ8l9ykjZQsagS0ysVZuRf66aZy9ny5tS0MZBZ9TpdS3S1Zr/sLBNY
fju6jb5dksmP
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:51 2024 by rpki-client on console-ams.rpki-client.org