Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: XFEycarbMZtSQ1gLs0qrkxvrNCkHXA51RiTrhzv3mBk=
Subject key identifier: F4:A2:FC:A6:A5:FD:B7:F6:41:FC:F8:4A:CC:59:A8:98:E4:99:F0:C8
Certificate issuer: /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial: 1F6F57B43D3914D27823A095B22F3EA974243323
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
Signing time: Thu 04 Apr 2024 09:29:33 +0000
ROA not before: Thu 04 Apr 2024 09:24:33 +0000
ROA not after: Thu 03 Apr 2025 09:29:33 +0000
asID: 266528
IP address blocks: 45.65.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6f:57:b4:3d:39:14:d2:78:23:a0:95:b2:2f:3e:a9:74:24:33:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Validity
Not Before: Apr 4 09:24:33 2024 GMT
Not After : Apr 3 09:29:33 2025 GMT
Subject: CN=F4A2FCA6A5FDB7F641FCF84ACC59A898E499F0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:d6:a7:05:ef:73:64:bc:41:6f:d9:7f:8a:
13:f2:5d:a5:b2:c1:ea:30:05:53:4b:9f:b2:ce:b4:
d8:3d:37:fc:20:b9:43:be:69:95:1a:31:76:0f:84:
43:29:a1:c1:a3:b9:5b:18:54:f3:d7:e0:74:32:21:
25:25:97:4b:36:0d:1f:be:de:95:d7:4d:7a:4b:db:
30:e9:b9:82:e5:54:0f:cc:73:5a:53:2f:5b:51:f4:
1a:e7:fd:04:b5:75:99:9f:bb:9b:78:5a:af:c6:6a:
75:39:7c:3d:4a:3f:18:1f:49:e8:1b:8a:dc:94:d7:
f9:59:1d:b0:5f:6e:86:96:a5:f8:3e:ff:18:1f:6c:
6a:5a:96:23:20:ab:82:9e:fa:10:61:c4:85:c6:1c:
ba:92:02:71:a8:8b:3b:5d:f3:bd:d7:df:f9:06:92:
76:28:8a:de:ee:bc:cb:0e:17:f8:68:75:09:80:f3:
34:13:ce:08:fa:92:bc:04:5f:f3:6d:e1:ba:93:05:
12:2b:6d:e4:fd:af:fb:9b:b5:f9:39:6f:2e:26:67:
72:c9:b1:69:45:34:70:35:b6:62:45:bd:d2:46:0b:
26:e9:d2:33:79:8d:5c:ac:b4:48:17:32:08:1a:4f:
ef:ad:5b:e0:31:62:4a:c5:9e:41:3c:16:e5:df:a1:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:FC:A6:A5:FD:B7:F6:41:FC:F8:4A:CC:59:A8:98:E4:99:F0:C8
X509v3 Authority Key Identifier:
keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:45:63:77:a2:1d:34:23:de:af:fd:b4:61:7f:da:d6:39:5f:
01:d0:7c:b2:55:64:06:40:3d:81:86:9f:d8:b6:a6:23:6e:40:
c8:fc:76:54:b8:78:0e:47:df:d6:85:20:ae:cf:2a:d6:64:90:
da:ff:6c:58:ee:ae:5a:2b:cc:a6:69:54:7e:e9:a0:cd:41:83:
a5:21:f8:93:5b:8b:ea:65:11:fd:b0:eb:4e:05:44:5f:96:0b:
b1:90:75:04:b7:37:1b:92:c4:b7:bc:18:a6:fc:5a:35:ca:0c:
d3:eb:e9:97:44:fc:c8:cb:c8:5f:81:04:87:2e:46:a8:83:62:
36:11:8e:b3:43:25:2b:1c:35:8a:25:46:cb:e7:6b:69:eb:11:
0b:e8:8b:3e:73:c3:8b:0c:d9:f7:d8:71:8f:47:e1:63:fc:8d:
1f:67:b3:8a:5c:0b:7d:71:18:97:46:4d:fa:14:16:22:0f:32:
cb:c5:35:e4:87:96:1d:3f:20:e1:e6:1b:88:56:bd:f5:c3:01:
34:64:3b:c8:18:de:8c:e2:9c:af:60:40:5d:fe:2c:f0:b9:83:
29:53:66:00:52:40:08:4f:eb:7f:75:48:96:ec:e9:11:da:b3:
98:c3:fc:42:0d:9c:58:a4:2f:5a:75:f1:8f:21:0f:10:93:59:
60:d8:6c:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH29XtD05FNJ4I6CVsi8+qXQkMyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I1MTk1MDg5MTg2RjQ1QjdEQjZCRjBBRkU0NkRGQzVB
RkI0NzcwOTAeFw0yNDA0MDQwOTI0MzNaFw0yNTA0MDMwOTI5MzNaMDMxMTAvBgNV
BAMTKEY0QTJGQ0E2QTVGREI3RjY0MUZDRjg0QUNDNTlBODk4RTQ5OUYwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllNanBe9zZLxBb9l/ihPyXaWy
weowBVNLn7LOtNg9N/wguUO+aZUaMXYPhEMpocGjuVsYVPPX4HQyISUll0s2DR++
3pXXTXpL2zDpuYLlVA/Mc1pTL1tR9Brn/QS1dZmfu5t4Wq/GanU5fD1KPxgfSegb
ityU1/lZHbBfboaWpfg+/xgfbGpaliMgq4Ke+hBhxIXGHLqSAnGoiztd873X3/kG
knYoit7uvMsOF/hodQmA8zQTzgj6krwEX/Nt4bqTBRIrbeT9r/ubtfk5by4mZ3LJ
sWlFNHA1tmJFvdJGCybp0jN5jVystEgXMggaT++tW+AxYkrFnkE8FuXfoeVvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9KL8pqX9t/ZB/PhKzFmomOSZ8MgwHwYDVR0j
BBgwFoAUy1GVCJGG9Ft9tr8K/kbfxa+0dwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy
dzIvMS9DQjUxOTUwODkxODZGNDVCN0RCNkJGMEFGRTQ2REZDNUFGQjQ3NzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNTE5NTA4OTE4NkY0NUI3
REI2QkYwQUZFNDZERkM1QUZCNDc3MDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyTjVlWFQyTVVGNUZ2TW1oQmNuQ0RqSHZQbWJGYmtta1d4TUFTbzd1MncyLzEv
MzQzNTJlMzYzNTJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUGBMA0GCSqGSIb3DQEBCwUAA4IBAQCrRWN3oh00
I96v/bRhf9rWOV8B0HyyVWQGQD2Bhp/YtqYjbkDI/HZUuHgOR9/WhSCuzyrWZJDa
/2xY7q5aK8ymaVR+6aDNQYOlIfiTW4vqZRH9sOtOBURflguxkHUEtzcbksS3vBim
/Fo1ygzT6+mXRPzIy8hfgQSHLkaog2I2EY6zQyUrHDWKJUbL52tp6xEL6Is+c8OL
DNn32HGPR+Fj/I0fZ7OKXAt9cRiXRk36FBYiDzLLxTXkh5YdPyDh5huIVr31wwE0
ZDvIGN6M4pyvYEBd/izwuYMpU2YAUkAIT+t/dUiW7OkR2rOYw/xCDZxYpC9adfGP
IQ8Qk1lg2Gzy
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:51 2025 by rpki-client