Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
File: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (raw, json)
Hash identifier: Td3RS0H9bmlUKPyElDAfra3EdHsUFKoCKOR8+b0I05M=
Subject key identifier: BA:D8:21:F5:62:53:31:BE:0B:4E:C2:8B:3F:05:FF:24:87:9D:50:4B
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 3AD20A722057E0832C43830F804053AE73193BB8
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:11:07 +0000
ROA not before: Mon 24 Feb 2025 17:06:07 +0000
ROA not after: Mon 23 Feb 2026 17:11:07 +0000
asID: 269712
IP address blocks: 190.112.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 17:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d2:0a:72:20:57:e0:83:2c:43:83:0f:80:40:53:ae:73:19:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:06:07 2025 GMT
Not After : Feb 23 17:11:07 2026 GMT
Subject: CN=BAD821F5625331BE0B4EC28B3F05FF24879D504B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:d6:25:f0:46:b9:bc:7b:ed:b4:1d:f8:87:
06:75:b8:49:67:1b:90:83:a8:7a:36:28:69:7e:4e:
af:3e:b4:d4:fa:95:05:21:31:45:8b:c8:e1:25:57:
75:37:ce:1e:5a:d8:bc:59:95:c9:d2:6a:af:c5:ae:
f1:6b:42:19:2c:06:6e:b0:a6:d1:6e:56:e6:eb:02:
cf:75:4e:6c:3a:85:2f:7e:1b:4d:15:da:87:bf:99:
e9:80:bc:7f:ae:a3:6a:fb:f5:71:a8:b5:59:ff:83:
90:be:bd:22:f8:57:a0:c8:c2:2f:13:5f:0f:2e:9e:
54:84:f0:59:31:55:62:04:10:3e:09:bc:1a:ba:e2:
aa:45:75:39:cf:6b:f4:38:d1:ca:8f:7a:e5:ed:cc:
37:a6:5d:e4:3d:7d:e2:bf:9a:46:e1:af:c9:01:db:
05:82:65:3c:4d:19:68:19:6b:c1:3a:c9:c0:73:96:
e5:2c:8e:66:77:66:f8:c4:dc:67:b7:e8:c1:e6:15:
c7:41:b7:f0:39:de:ab:f4:80:5f:c0:cd:1f:13:23:
9b:aa:45:32:f2:40:c0:32:ce:88:47:d6:2f:17:84:
76:5e:ac:80:6b:1a:a5:87:82:d1:77:d7:da:58:b2:
9b:fc:9e:57:70:bd:5e:12:3a:97:81:19:9f:10:a6:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:21:F5:62:53:31:BE:0B:4E:C2:8B:3F:05:FF:24:87:9D:50:4B
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.156.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3d:b3:94:8d:05:a6:8c:68:ef:9c:68:03:43:d8:2d:6e:9c:
25:e0:88:a1:66:74:c6:d3:03:9f:69:db:46:03:8f:5a:25:c3:
e6:64:7e:a6:38:55:11:62:8e:2e:d3:20:44:6a:b2:f3:3d:51:
ae:42:80:10:b7:1f:25:99:a0:c0:df:d0:c5:de:ce:b5:0a:ab:
c9:a8:62:87:35:24:25:15:0e:78:64:e5:34:49:31:69:92:33:
4c:04:4a:99:77:e2:72:4e:f6:c6:e1:72:5b:16:a4:d1:de:33:
4e:71:d5:cb:95:0c:2d:7c:43:a5:b5:c3:43:a3:df:35:e2:31:
16:29:3c:2a:c2:8f:00:f2:7d:cb:32:27:78:5d:50:00:42:8e:
6e:83:fb:c0:cb:d1:f3:80:a0:6c:85:63:65:29:bd:b2:af:f0:
4c:0a:92:aa:ea:05:dc:ea:6f:09:ad:21:a5:f7:a6:9b:2f:fe:
7a:cc:08:53:bc:42:d6:bc:42:58:55:80:a3:15:a3:c2:a3:77:
f4:d2:68:71:f1:4a:88:6a:7e:8a:e7:f1:9c:5f:fb:05:0b:ee:
59:42:3f:10:3a:31:34:8f:0e:52:45:b1:cd:14:59:11:9e:59:
a0:e7:3d:c9:0a:97:9f:78:ff:49:fa:24:4d:de:cc:18:a5:f8:
e6:00:41:8f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOtIKciBX4IMsQ4MPgEBTrnMZO7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF
NjBCODVBMjAeFw0yNTAyMjQxNzA2MDdaFw0yNjAyMjMxNzExMDdaMDMxMTAvBgNV
BAMTKEJBRDgyMUY1NjI1MzMxQkUwQjRFQzI4QjNGMDVGRjI0ODc5RDUwNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzNYl8Ea5vHvttB34hwZ1uEln
G5CDqHo2KGl+Tq8+tNT6lQUhMUWLyOElV3U3zh5a2LxZlcnSaq/FrvFrQhksBm6w
ptFuVubrAs91Tmw6hS9+G00V2oe/memAvH+uo2r79XGotVn/g5C+vSL4V6DIwi8T
Xw8unlSE8FkxVWIEED4JvBq64qpFdTnPa/Q40cqPeuXtzDemXeQ9feK/mkbhr8kB
2wWCZTxNGWgZa8E6ycBzluUsjmZ3ZvjE3Ge36MHmFcdBt/A53qv0gF/AzR8TI5uq
RTLyQMAyzohH1i8XhHZerIBrGqWHgtF319pYspv8nldwvV4SOpeBGZ8QprB/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUutgh9WJTMb4LTsKLPwX/JIedUEswHwYDVR0j
BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0
NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wnDANBgkqhkiG9w0BAQsFAAOCAQEAgD2z
lI0Fpoxo75xoA0PYLW6cJeCIoWZ0xtMDn2nbRgOPWiXD5mR+pjhVEWKOLtMgRGqy
8z1RrkKAELcfJZmgwN/Qxd7OtQqryahihzUkJRUOeGTlNEkxaZIzTARKmXfick72
xuFyWxak0d4zTnHVy5UMLXxDpbXDQ6PfNeIxFik8KsKPAPJ9yzIneF1QAEKOboP7
wMvR84CgbIVjZSm9sq/wTAqSquoF3OpvCa0hpfemmy/+eswIU7xC1rxCWFWAoxWj
wqN39NJocfFKiGp+iufxnF/7BQvuWUI/EDoxNI8OUkWxzRRZEZ5ZoOc9yQqXn3j/
SfokTd7MGKX45gBBjw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:42:30 2025 by rpki-client