Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3332203d3e20323733333436.roa
File: 323830343a386434343a3a2f33322d3332203d3e20323733333436.roa (raw, json)
Hash identifier: 7ux2mc8qPZBvrb3FBNxaiwmmsyPvFNhqvpUcJK9m3r4=
Subject key identifier: FA:21:6C:C9:93:B6:E5:78:CE:17:D0:62:7C:2B:E3:FA:8E:0C:35:43
Certificate issuer: /CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Certificate serial: 4FFC9638E7C4A059A39CC2C29D38628E9A7E29A2
Authority key identifier: 36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3332203d3e20323733333436.roa
Signing time: Wed 12 Feb 2025 20:00:26 +0000
ROA not before: Wed 12 Feb 2025 19:55:26 +0000
ROA not after: Wed 11 Feb 2026 20:00:26 +0000
asID: 273346
IP address blocks: 2804:8d44::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 22 Feb 2025 14:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fc:96:38:e7:c4:a0:59:a3:9c:c2:c2:9d:38:62:8e:9a:7e:29:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C70D54DDACCCE385198B3B82C67FCEE369B6D0
Validity
Not Before: Feb 12 19:55:26 2025 GMT
Not After : Feb 11 20:00:26 2026 GMT
Subject: CN=FA216CC993B6E578CE17D0627C2BE3FA8E0C3543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:1f:99:06:52:97:14:13:d7:21:27:42:71:
35:33:6b:e0:a5:0c:81:64:6f:88:2c:15:c7:54:ab:
93:ee:2b:7f:f1:03:b0:13:cf:ba:d7:10:99:87:00:
13:81:42:6f:0b:bf:d9:eb:a3:51:e9:d1:5c:50:b9:
bc:74:7d:1a:44:02:38:3c:30:71:b1:03:90:e3:7b:
0f:2f:a9:b9:3c:51:f2:6f:6c:d1:1f:a7:9b:9e:42:
ee:5a:17:84:83:78:f0:04:c5:57:f5:a4:01:11:53:
60:87:46:cc:58:bc:e7:fc:48:a7:c1:f5:80:19:ae:
8d:da:5f:34:f8:8f:8b:4d:ea:ff:55:56:78:eb:29:
1d:3c:af:67:ec:b6:c6:2d:16:d0:aa:d3:e1:b7:ad:
e3:9e:6f:0d:45:22:da:24:70:70:ec:00:70:b1:9e:
d7:f9:36:21:0c:e4:6b:5a:a7:a6:38:e1:7f:8f:ff:
e8:6c:5a:92:f6:49:65:56:79:a1:31:8e:66:0b:a7:
05:84:ef:41:72:2f:28:3b:62:28:ac:f8:ce:ce:83:
6c:d7:ed:2a:f6:8e:ba:ca:ef:de:02:9e:67:93:d3:
24:61:22:2b:44:8f:02:80:ed:2f:71:97:57:af:a2:
3e:af:de:a4:5a:47:66:89:8e:d1:fe:23:d6:ae:67:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:6C:C9:93:B6:E5:78:CE:17:D0:62:7C:2B:E3:FA:8E:0C:35:43
X509v3 Authority Key Identifier:
keyid:36:C7:0D:54:DD:AC:CC:E3:85:19:8B:3B:82:C6:7F:CE:E3:69:B6:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C70D54DDACCCE385198B3B82C67FCEE369B6D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTx2dB5PiTNWxBo5Y6Gsgv5DB5gRy3i8DJQYJWwLP1BZ/0/323830343a386434343a3a2f33322d3332203d3e20323733333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8d44::/32
Signature Algorithm: sha256WithRSAEncryption
3e:e5:64:bb:cc:89:a9:91:24:27:b2:c8:1e:ec:cf:f4:3d:65:
27:4e:8b:36:82:6f:69:ee:b4:35:bc:eb:0b:56:ce:99:84:8c:
d8:3c:b6:d0:9d:99:62:06:52:ae:75:f5:7c:43:5b:51:1e:c9:
e6:42:0a:b7:34:c0:3f:ed:99:e5:7b:fc:15:9a:f2:b3:ad:b4:
5f:a7:8f:2c:aa:8b:ff:cb:2b:4b:59:63:e9:e4:32:c1:86:f3:
f8:e9:93:73:84:74:56:c3:31:85:39:d2:3e:d1:89:9c:88:e9:
b6:b2:5a:d1:b7:aa:39:cf:40:b2:da:d9:09:0e:c4:63:ed:ff:
bc:43:71:a2:08:10:ea:52:e0:b7:85:f7:cb:de:29:d4:89:41:
84:9c:36:88:eb:78:c3:5c:97:b8:8d:a1:c8:17:6c:8e:7a:e2:
54:2d:b5:72:4b:07:5a:77:ed:3a:6b:02:40:60:72:09:98:fe:
af:47:70:d3:26:14:26:4f:7d:71:cd:54:52:a9:af:40:68:b1:
7e:f3:9c:72:b6:1e:24:b4:5f:ce:aa:20:4e:66:69:26:4e:cf:
53:79:74:83:61:61:03:8e:f2:23:49:c8:24:26:9f:12:87:c0:
01:2c:62:3f:9d:65:a1:d7:92:78:ef:8c:ae:39:20:53:22:e4:
10:39:81:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUT/yWOOfEoFmjnMLCnThijpp+KaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDNzBENTREREFDQ0NFMzg1MTk4QjNCODJDNjdGQ0VF
MzY5QjZEMDAeFw0yNTAyMTIxOTU1MjZaFw0yNjAyMTEyMDAwMjZaMDMxMTAvBgNV
BAMTKEZBMjE2Q0M5OTNCNkU1NzhDRTE3RDA2MjdDMkJFM0ZBOEUwQzM1NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tR+ZBlKXFBPXISdCcTUza+Cl
DIFkb4gsFcdUq5PuK3/xA7ATz7rXEJmHABOBQm8Lv9nro1Hp0VxQubx0fRpEAjg8
MHGxA5Djew8vqbk8UfJvbNEfp5ueQu5aF4SDePAExVf1pAERU2CHRsxYvOf8SKfB
9YAZro3aXzT4j4tN6v9VVnjrKR08r2fstsYtFtCq0+G3reOebw1FItokcHDsAHCx
ntf5NiEM5Gtap6Y44X+P/+hsWpL2SWVWeaExjmYLpwWE70FyLyg7Yiis+M7Og2zX
7Sr2jrrK794CnmeT0yRhIitEjwKA7S9xl1evoj6v3qRaR2aJjtH+I9auZ6qxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU+iFsyZO25XjOF9BifCvj+o4MNUMwHwYDVR0j
BBgwFoAUNscNVN2szOOFGYs7gsZ/zuNpttAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlR4MmRCNVBpVE5XeEJvNVk2R3NndjVEQjVnUnkzaThESlFZSld3TFAx
QlovMC8zNkM3MEQ1NEREQUNDQ0UzODUxOThCM0I4MkM2N0ZDRUUzNjlCNkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QzcwRDU0RERBQ0NDRTM4
NTE5OEIzQjgyQzY3RkNFRTM2OUI2RDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUeDJkQjVQaVROV3hCbzVZNkdzZ3Y1REI1Z1J5M2k4REpRWUpXd0xQMUJaLzAv
MzIzODMwMzQzYTM4NjQzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNRDANBgkqhkiG9w0BAQsFAAOCAQEAPuVku8yJ
qZEkJ7LIHuzP9D1lJ06LNoJvae60NbzrC1bOmYSM2Dy20J2ZYgZSrnX1fENbUR7J
5kIKtzTAP+2Z5Xv8FZrys620X6ePLKqL/8srS1lj6eQywYbz+OmTc4R0VsMxhTnS
PtGJnIjptrJa0beqOc9AstrZCQ7EY+3/vENxoggQ6lLgt4X3y94p1IlBhJw2iOt4
w1yXuI2hyBdsjnriVC21cksHWnftOmsCQGByCZj+r0dw0yYUJk99cc1UUqmvQGix
fvOccrYeJLRfzqogTmZpJk7PU3l0g2FhA47yI0nIJCafEofAASxiP51lodeSeO+M
rjkgUyLkEDmBfg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:29 2025 by rpki-client