Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a383030303a3a2f33332d3333203d3e20323733333436.roa
File: 323830343a386434343a383030303a3a2f33332d3333203d3e20323733333436.roa (raw, json)
Hash identifier: XwcRwPsWjH04cmmRXEnTqPqsySvNGeEYvJ37UgTjZic=
Subject key identifier: 72:3D:7F:FC:81:7D:08:58:CF:5C:81:08:A6:91:A8:C1:AA:D1:08:5C
Certificate issuer: /CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Certificate serial: 3E47FEC9F3E3602674DB21CE69B1650821C9234D
Authority key identifier: 36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a383030303a3a2f33332d3333203d3e20323733333436.roa
Signing time: Wed 12 Feb 2025 20:00:26 +0000
ROA not before: Wed 12 Feb 2025 19:55:26 +0000
ROA not after: Wed 11 Feb 2026 20:00:26 +0000
asID: 273346
IP address blocks: 2804:8d44:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Sat 22 Feb 2025 14:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:47:fe:c9:f3:e3:60:26:74:db:21:ce:69:b1:65:08:21:c9:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Validity
Not Before: Feb 12 19:55:26 2025 GMT
Not After : Feb 11 20:00:26 2026 GMT
Subject: CN=723D7FFC817D0858CF5C8108A691A8C1AAD1085C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:ad:f0:00:95:ba:89:b2:8e:a4:8a:de:0a:
52:ca:93:e2:e9:67:00:64:90:bb:2a:a4:ad:4b:bf:
e4:c3:51:80:fb:73:45:dc:08:33:e8:d5:66:3e:01:
dc:c2:e4:05:d7:c5:d1:07:17:a4:1c:54:36:7c:f7:
21:ec:2d:01:ff:ba:69:43:7c:b8:e0:cf:21:1d:55:
45:9c:7c:e6:86:88:fb:b0:05:51:ee:c4:a9:85:a2:
ec:e0:30:d7:d9:1e:22:3e:aa:9e:26:65:92:b1:41:
ac:ed:f0:75:3c:c8:d1:69:d0:50:40:ff:eb:71:6a:
c3:04:ec:cc:2c:2c:29:5f:6c:1e:cd:e2:a1:8c:dd:
14:99:e6:53:62:fa:39:73:ac:36:3c:46:e1:ce:da:
8d:5a:c4:2f:d9:df:c5:ed:ba:2c:e9:ab:0d:1d:b2:
5f:9a:ce:b9:b1:5a:69:1b:2d:be:e4:87:d2:ec:26:
3f:6f:35:78:b5:62:a0:f5:2b:dd:a0:fe:a5:14:d4:
1b:2c:0f:08:2b:16:ae:8e:75:dc:0e:fd:6a:2f:d9:
06:e3:50:d5:3c:c1:a3:77:35:79:80:60:7e:21:0a:
da:da:46:7f:b7:f7:c4:49:68:7c:94:a2:0d:4b:25:
d9:d2:65:80:73:fe:5c:0a:d5:a8:b7:8d:18:c8:8e:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:7F:FC:81:7D:08:58:CF:5C:81:08:A6:91:A8:C1:AA:D1:08:5C
X509v3 Authority Key Identifier:
keyid:36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a383030303a3a2f33332d3333203d3e20323733333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d44:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5a:3a:7f:c8:d9:cc:04:97:bd:10:ea:55:69:3c:1e:23:99:96:
43:1e:76:7a:e3:1a:e4:8f:9b:82:5b:c1:20:5f:3e:43:db:38:
ad:04:82:a5:0d:51:58:40:cf:ff:19:f4:c4:f0:28:65:7a:d6:
0d:d3:b6:ae:01:90:1d:b4:75:51:d3:3f:86:05:0e:39:c5:ed:
29:23:68:6c:04:f8:e1:1e:2b:1b:60:ed:96:2d:ce:ec:a9:08:
00:4b:75:3d:3c:09:b0:96:ab:cc:63:01:6a:dd:f1:4a:8e:c8:
67:3e:a4:01:ff:d2:fd:a6:63:c9:62:35:15:fe:94:39:f4:95:
ce:23:88:fc:95:90:92:53:62:0a:50:ce:6b:2c:8d:ad:73:d9:
56:4c:3a:e0:68:fe:81:5e:a6:8c:4f:27:5c:59:13:c1:c8:89:
6e:45:5c:f0:ca:c7:a3:bf:61:04:79:1d:e6:b7:8d:d3:33:64:
7b:3d:03:d3:48:38:3f:04:0d:72:b2:07:76:54:7f:8a:a7:ed:
4e:b7:64:96:6d:a4:e8:d8:c6:35:19:b0:02:be:27:6e:e1:99:
ae:d3:a2:56:fe:1e:7b:7a:1d:82:ea:b0:5d:f8:52:2c:3f:4c:
82:7c:a8:8d:3f:9c:1b:12:6b:03:94:29:12:e6:54:05:ff:88:
19:bd:6d:b7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUPkf+yfPjYCZ02yHOabFlCCHJI00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDNzBENTREREFDQ0NFMzg1MTk4QjNCODJDNjdGQ0VF
MzY5QjZEMDAeFw0yNTAyMTIxOTU1MjZaFw0yNjAyMTEyMDAwMjZaMDMxMTAvBgNV
BAMTKDcyM0Q3RkZDODE3RDA4NThDRjVDODEwOEE2OTFBOEMxQUFEMTA4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCq3wAJW6ibKOpIreClLKk+Lp
ZwBkkLsqpK1Lv+TDUYD7c0XcCDPo1WY+AdzC5AXXxdEHF6QcVDZ89yHsLQH/umlD
fLjgzyEdVUWcfOaGiPuwBVHuxKmFouzgMNfZHiI+qp4mZZKxQazt8HU8yNFp0FBA
/+txasME7MwsLClfbB7N4qGM3RSZ5lNi+jlzrDY8RuHO2o1axC/Z38Xtuizpqw0d
sl+azrmxWmkbLb7kh9LsJj9vNXi1YqD1K92g/qUU1BssDwgrFq6OddwO/Wov2Qbj
UNU8waN3NXmAYH4hCtraRn+398RJaHyUog1LJdnSZYBz/lwK1ai3jRjIjlpxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUcj1//IF9CFjPXIEIppGowarRCFwwHwYDVR0j
BBgwFoAUNscNVN2szOOFGYs7gsZ/zuNpttAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlR4MmRCNVBpVE5XeEJvNVk2R3NndjVEQjVnUnkzaThESlFZSld3TFAx
QlovMC8zNkM3MEQ1NEREQUNDQ0UzODUxOThCM0I4MkM2N0ZDRUUzNjlCNkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QzcwRDU0RERBQ0NDRTM4
NTE5OEIzQjgyQzY3RkNFRTM2OUI2RDAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUeDJkQjVQaVROV3hCbzVZNkdzZ3Y1REI1Z1J5M2k4REpRWUpXd0xQMUJaLzAv
MzIzODMwMzQzYTM4NjQzNDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEjUSAMA0GCSqGSIb3DQEBCwUA
A4IBAQBaOn/I2cwEl70Q6lVpPB4jmZZDHnZ64xrkj5uCW8EgXz5D2zitBIKlDVFY
QM//GfTE8ChletYN07auAZAdtHVR0z+GBQ45xe0pI2hsBPjhHisbYO2WLc7sqQgA
S3U9PAmwlqvMYwFq3fFKjshnPqQB/9L9pmPJYjUV/pQ59JXOI4j8lZCSU2IKUM5r
LI2tc9lWTDrgaP6BXqaMTydcWRPByIluRVzwysejv2EEeR3mt43TM2R7PQPTSDg/
BA1ysgd2VH+Kp+1Ot2SWbaTo2MY1GbACvidu4Zmu06JW/h57eh2C6rBd+FIsP0yC
fKiNP5wbEmsDlCkS5lQF/4gZvW23
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:50:30 2025 by rpki-client