Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32332d3233203d3e20323730343934.roa
File: 32342e3135322e362e302f32332d3233203d3e20323730343934.roa (raw, json)
Hash identifier: BsoQUQvQQCyQGp2bz7M88qSsodhHmwtrSfFwEpezG0A=
Subject key identifier: F4:30:C4:52:3D:DF:6C:62:71:4C:12:7F:03:6C:9F:96:96:DF:C5:01
Certificate issuer: /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial: 194CA8D4C31C7A844636B8E65ECB39D802DBB46F
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32332d3233203d3e20323730343934.roa
Signing time: Fri 21 Feb 2025 21:50:48 +0000
ROA not before: Fri 21 Feb 2025 21:45:48 +0000
ROA not after: Fri 20 Feb 2026 21:50:48 +0000
asID: 270494
IP address blocks: 24.152.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 25 Feb 2025 19:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4c:a8:d4:c3:1c:7a:84:46:36:b8:e6:5e:cb:39:d8:02:db:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
Validity
Not Before: Feb 21 21:45:48 2025 GMT
Not After : Feb 20 21:50:48 2026 GMT
Subject: CN=F430C4523DDF6C62714C127F036C9F9696DFC501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:43:24:20:d8:35:98:dd:87:10:db:a7:4c:
a2:04:97:95:a0:d2:0d:9d:bb:57:b1:81:ff:ad:ce:
4e:be:cb:10:04:ff:be:2f:e1:26:7c:ae:6d:0f:75:
b8:81:93:3a:02:b2:d0:67:d7:4b:60:cd:39:77:40:
67:a8:48:7b:4e:3b:5d:79:7d:67:c8:ce:a8:4b:f0:
05:05:7c:bb:ab:24:a5:ea:eb:53:ba:f2:fb:a8:92:
96:fa:73:00:0e:e3:90:17:ca:61:0f:c0:b7:c0:e6:
e8:d7:7e:89:80:31:93:2a:09:f1:26:91:5c:8c:5c:
04:38:ed:31:8f:90:d0:6e:cc:3f:64:d9:fc:50:04:
ff:9c:51:d6:39:ef:ef:96:02:a5:11:8a:62:5c:91:
63:72:62:d9:da:35:85:46:55:bf:c9:a6:4d:45:49:
4d:59:a5:c2:3e:97:1e:ed:52:1c:71:35:7f:0d:ca:
93:9c:93:b9:75:a3:a0:84:61:29:63:b1:36:4c:d9:
86:1e:a7:3a:96:d7:89:7c:1a:89:7c:11:f5:55:97:
64:db:16:c7:5a:ae:77:3e:7f:56:62:b4:d0:e8:da:
aa:69:73:8a:12:d9:d0:ca:9e:1e:63:95:74:0d:38:
48:be:f5:16:62:93:68:f3:51:43:05:ac:f3:0e:76:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:C4:52:3D:DF:6C:62:71:4C:12:7F:03:6C:9F:96:96:DF:C5:01
X509v3 Authority Key Identifier:
keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e362e302f32332d3233203d3e20323730343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.6.0/23
Signature Algorithm: sha256WithRSAEncryption
88:8b:0d:66:bd:4d:13:f8:80:d2:96:74:ac:35:6d:dd:83:84:
2f:b0:be:c2:cc:fc:93:ae:a8:4a:65:7c:d1:be:c1:03:1a:6e:
e6:5e:d1:66:1d:30:70:59:70:35:79:27:cf:32:7b:8b:68:22:
13:6e:f6:d3:b7:45:fe:22:6a:7a:58:b9:88:b2:5c:6f:15:15:
66:46:b6:32:ec:46:40:d3:d9:8f:26:79:d8:7f:94:9f:cd:9a:
7f:60:af:41:09:66:6d:3c:bb:c4:b6:a2:39:ff:5c:f7:5b:58:
08:69:ef:87:f5:97:43:4a:c9:86:75:cb:8b:f6:2c:9b:6c:d3:
81:a7:f8:4c:4f:0d:da:f4:2d:b7:06:86:83:a7:c7:79:72:9d:
db:23:63:80:20:0e:b9:2f:1e:4c:c5:19:6a:2f:d4:ce:11:cc:
5e:e4:d6:81:58:02:70:d7:24:c0:0c:7b:5e:3d:a9:d0:4e:e7:
b3:a8:4b:72:3b:1b:38:f5:44:d5:a9:bf:d8:2d:99:a6:6f:54:
ca:fd:03:33:55:06:86:4c:86:4c:16:94:63:96:88:6c:0c:be:
d8:0b:32:2e:c8:34:3f:a0:70:ee:bf:a8:80:62:24:99:f6:59:
2a:2b:1b:8b:b5:f4:14:d0:59:81:7f:eb:3c:70:f7:e1:87:c8:
73:ba:2e:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGUyo1MMceoRGNrjmXss52ALbtG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4N0E2QjRBODY3RkIyNDZBRjNGMzA3ODA4REM5OTU5
MjEyOTIzMjAeFw0yNTAyMjEyMTQ1NDhaFw0yNjAyMjAyMTUwNDhaMDMxMTAvBgNV
BAMTKEY0MzBDNDUyM0RERjZDNjI3MTRDMTI3RjAzNkM5Rjk2OTZERkM1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUiUMkINg1mN2HENunTKIEl5Wg
0g2du1exgf+tzk6+yxAE/74v4SZ8rm0PdbiBkzoCstBn10tgzTl3QGeoSHtOO115
fWfIzqhL8AUFfLurJKXq61O68vuokpb6cwAO45AXymEPwLfA5ujXfomAMZMqCfEm
kVyMXAQ47TGPkNBuzD9k2fxQBP+cUdY57++WAqURimJckWNyYtnaNYVGVb/Jpk1F
SU1ZpcI+lx7tUhxxNX8NypOck7l1o6CEYSljsTZM2YYepzqW14l8Gol8EfVVl2Tb
Fsdarnc+f1ZitNDo2qppc4oS2dDKnh5jlXQNOEi+9RZik2jzUUMFrPMOdkrxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9DDEUj3fbGJxTBJ/A2yflpbfxQEwHwYDVR0j
BBgwFoAU/oemtKhn+yRq8/MHgI3JlZISkjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0Z1dkJLZ0FBU0ZrdDZSTjF4QTJDNko0Tkx2cGF1YkZGRnJGNXd1bmpY
akEvMC9GRTg3QTZCNEE4NjdGQjI0NkFGM0YzMDc4MDhEQzk5NTkyMTI5MjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFODdBNkI0QTg2N0ZCMjQ2
QUYzRjMwNzgwOERDOTk1OTIxMjkyMzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGdXZCS2dBQVNGa3Q2Uk4xeEEyQzZKNE5MdnBhdWJGRkZyRjV3dW5qWGpBLzAv
MzIzNDJlMzEzNTMyMmUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDM0
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEARiYBjANBgkqhkiG9w0BAQsFAAOCAQEAiIsNZr1NE/iA
0pZ0rDVt3YOEL7C+wsz8k66oSmV80b7BAxpu5l7RZh0wcFlwNXknzzJ7i2giE272
07dF/iJqeli5iLJcbxUVZka2MuxGQNPZjyZ52H+Un82af2CvQQlmbTy7xLaiOf9c
91tYCGnvh/WXQ0rJhnXLi/Ysm2zTgaf4TE8N2vQttwaGg6fHeXKd2yNjgCAOuS8e
TMUZai/UzhHMXuTWgVgCcNckwAx7Xj2p0E7ns6hLcjsbOPVE1am/2C2Zpm9Uyv0D
M1UGhkyGTBaUY5aIbAy+2AsyLsg0P6Bw7r+ogGIkmfZZKisbi7X0FNBZgX/rPHD3
4YfIc7ouXA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:23:47 2025 by rpki-client