Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa
File: 3139312e33372e342e302f32332d3234203d3e20323633333436.roa (raw, json)
Hash identifier: A8GL+XV+3oq8Dc3Uuf2U8R30/+hmXZIZoCIZXfRAvbI=
Subject key identifier: 8D:31:E7:D2:3F:18:C8:E0:1A:94:2A:3B:C9:62:CF:03:F9:B0:AD:35
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 3B14F64CE622865D1A9EFBC76572B7F6C6BD5CD4
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa
Signing time: Wed 05 Jun 2024 18:41:33 +0000
ROA not before: Wed 05 Jun 2024 18:36:33 +0000
ROA not after: Wed 04 Jun 2025 18:41:33 +0000
asID: 263346
IP address blocks: 191.37.4.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 13:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:14:f6:4c:e6:22:86:5d:1a:9e:fb:c7:65:72:b7:f6:c6:bd:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Jun 5 18:36:33 2024 GMT
Not After : Jun 4 18:41:33 2025 GMT
Subject: CN=8D31E7D23F18C8E01A942A3BC962CF03F9B0AD35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:5e:a6:37:06:5e:58:00:2d:67:a3:66:0c:
8c:b6:47:08:eb:84:d9:05:c3:14:68:03:f9:ef:91:
68:54:23:d2:1a:60:25:4b:3d:af:4f:34:0a:f1:d6:
66:93:35:e1:54:e9:69:7d:10:4f:95:16:72:d0:4b:
18:a9:0f:92:ac:f0:18:97:6c:18:0e:22:14:72:d7:
b7:ef:44:f5:60:cf:e8:3d:3b:07:79:f2:fa:15:45:
da:66:03:0d:0c:9e:98:9d:71:b4:17:f0:65:ab:cb:
ef:3e:51:a0:14:49:b7:bb:b2:ab:72:e6:4e:d9:a0:
e5:af:9d:a7:21:07:62:17:29:1e:f2:d5:0e:f0:61:
bd:93:ba:a5:18:38:1b:65:40:e5:fe:19:a5:22:19:
fc:04:e8:71:fe:4a:8b:5d:9a:d8:55:ea:c7:5c:3d:
f7:11:4f:1e:39:f0:6a:04:e5:d1:31:45:e3:8a:fd:
ed:92:38:31:a5:af:d9:8c:cb:63:ce:7c:61:16:54:
62:f6:b4:6a:39:13:60:c5:41:4c:88:8d:44:01:c9:
69:fb:5e:9a:f1:bc:88:da:14:12:15:1f:cb:f7:7e:
a1:c3:bf:ba:e3:cb:7d:74:72:d4:4c:48:67:c0:9b:
ee:3b:59:50:29:b3:90:e5:b1:14:b8:42:83:35:f1:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:E7:D2:3F:18:C8:E0:1A:94:2A:3B:C9:62:CF:03:F9:B0:AD:35
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/3139312e33372e342e302f32332d3234203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.4.0/23
Signature Algorithm: sha256WithRSAEncryption
54:99:86:26:30:ba:57:91:4c:06:f5:d1:1a:aa:9c:87:83:0f:
cf:9b:56:bf:4d:b2:7c:ca:b6:ac:02:f7:d6:38:3f:f3:25:b7:
68:bc:72:32:7e:b3:80:cd:67:22:d7:1e:de:f5:ef:f2:c7:d5:
75:2f:64:10:15:ea:e9:35:ff:1b:5b:13:a1:49:6e:44:34:0c:
08:d2:1a:fb:b7:c3:d0:4f:33:f0:f1:a3:3c:3a:64:c0:63:5c:
fc:e1:ed:57:80:51:c2:68:e3:d8:ab:19:a3:7a:26:b8:8e:d2:
0e:44:65:53:f1:b8:c7:2b:84:49:56:28:d3:7f:b2:4f:79:42:
70:e4:46:66:7d:6b:88:e7:40:3d:d8:b8:11:03:5b:8e:79:d0:
80:f6:9b:27:4f:ef:e6:e7:39:bb:e9:95:0c:5f:d0:bf:f7:6d:
6f:7d:ac:e8:af:8f:e0:2d:01:0e:ea:6b:07:70:87:f2:26:88:
89:5f:71:5d:9d:84:b9:2d:48:f5:0c:dd:55:43:cf:5d:87:6c:
11:e9:0a:80:77:ab:b2:25:1b:a3:ec:38:73:d2:0d:b8:7c:bb:
32:dd:05:bc:4d:ce:8d:10:0d:9a:e9:95:0a:b8:49:38:cb:5c:
5a:53:10:b4:0c:63:27:55:dd:1b:83:43:03:4b:0e:cc:c5:2c:
29:73:a0:af
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOxT2TOYihl0anvvHZXK39sa9XNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA2MDUxODM2MzNaFw0yNTA2MDQxODQxMzNaMDMxMTAvBgNV
BAMTKDhEMzFFN0QyM0YxOEM4RTAxQTk0MkEzQkM5NjJDRjAzRjlCMEFEMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrF6mNwZeWAAtZ6NmDIy2Rwjr
hNkFwxRoA/nvkWhUI9IaYCVLPa9PNArx1maTNeFU6Wl9EE+VFnLQSxipD5Ks8BiX
bBgOIhRy17fvRPVgz+g9Owd58voVRdpmAw0MnpidcbQX8GWry+8+UaAUSbe7sqty
5k7ZoOWvnachB2IXKR7y1Q7wYb2TuqUYOBtlQOX+GaUiGfwE6HH+SotdmthV6sdc
PfcRTx458GoE5dExReOK/e2SODGlr9mMy2POfGEWVGL2tGo5E2DFQUyIjUQByWn7
XprxvIjaFBIVH8v3fqHDv7rjy310ctRMSGfAm+47WVAps5DlsRS4QoM18Xa9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUjTHn0j8YyOAalCo7yWLPA/mwrTUwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzEzOTMxMmUzMzM3MmUzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzMzMz
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb8lBDANBgkqhkiG9w0BAQsFAAOCAQEAVJmGJjC6V5FM
BvXRGqqch4MPz5tWv02yfMq2rAL31jg/8yW3aLxyMn6zgM1nItce3vXv8sfVdS9k
EBXq6TX/G1sToUluRDQMCNIa+7fD0E8z8PGjPDpkwGNc/OHtV4BRwmjj2KsZo3om
uI7SDkRlU/G4xyuESVYo03+yT3lCcORGZn1riOdAPdi4EQNbjnnQgPabJ0/v5uc5
u+mVDF/Qv/dtb32s6K+P4C0BDuprB3CH8iaIiV9xXZ2EuS1I9QzdVUPPXYdsEekK
gHersiUbo+w4c9INuHy7Mt0FvE3OjRANmumVCrhJOMtcWlMQtAxjJ1XdG4NDA0sO
zMUsKXOgrw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:15 2025 by rpki-client