![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33332d3333203d3e20323633333436.roa
File: 323830343a313462383a3a2f33332d3333203d3e20323633333436.roa (raw, json)
Hash identifier: xR8qOxWN6zX3d3R2P3uswYHmV7d0ASLqF0xDpv14zj4=
Subject key identifier: 38:B6:54:98:38:5A:6D:08:44:B2:63:59:20:40:BA:A1:D7:95:38:A2
Certificate issuer: /CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Certificate serial: 471FFD0B28B0524D80A81A57504457BBEFEA8392
Authority key identifier: CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33332d3333203d3e20323633333436.roa
Signing time: Tue 23 Apr 2024 18:48:37 +0000
ROA not before: Tue 23 Apr 2024 18:43:37 +0000
ROA not after: Tue 22 Apr 2025 18:48:37 +0000
asID: 263346
IP address blocks: 2804:14b8::/33 maxlen: 33
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1f:fd:0b:28:b0:52:4d:80:a8:1a:57:50:44:57:bb:ef:ea:83:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA85791A9265E88352E3823611E6D84D6BBBDCC6
Validity
Not Before: Apr 23 18:43:37 2024 GMT
Not After : Apr 22 18:48:37 2025 GMT
Subject: CN=38B65498385A6D0844B263592040BAA1D79538A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:83:bd:ce:3b:57:24:1c:20:01:45:20:1f:
a7:ed:e8:20:89:12:60:e4:a3:78:c8:38:7d:e6:a7:
e9:d1:13:55:af:02:c8:c4:c9:6f:70:f4:bd:d0:50:
b4:b5:83:a7:38:70:bd:71:8a:2d:39:37:75:6b:20:
71:0b:56:31:c5:e3:a7:20:21:43:e1:7b:61:32:bc:
5b:35:f9:1b:a8:7a:41:9d:f0:1d:a9:61:b9:42:b0:
ff:4a:29:12:bf:9b:8c:7c:36:69:42:82:7d:aa:26:
83:e8:5d:de:d0:f1:25:4c:c4:ad:0d:b0:2e:a8:e1:
57:77:34:82:b0:0a:e3:ba:c2:e1:2e:78:d2:cb:56:
bd:50:bd:3f:6c:2a:cd:0b:65:9e:17:57:3e:70:de:
16:cc:28:13:f9:2d:b0:ca:48:6e:86:a8:2b:45:a5:
90:01:b5:7a:24:c6:38:f4:2b:dd:85:bc:4d:4d:0d:
f6:00:44:f3:3d:87:a5:38:af:58:60:1b:a1:c5:c0:
54:d2:7f:0a:3a:ce:38:4e:7e:11:cd:4d:da:af:14:
d1:48:d7:c4:fc:4e:a1:ca:9c:e1:b4:d9:92:c3:c2:
00:37:64:8e:c4:db:c5:9b:ce:9b:dc:35:a6:3b:41:
bc:4f:af:ea:c5:63:e9:64:ac:35:e0:d4:e6:24:23:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:54:98:38:5A:6D:08:44:B2:63:59:20:40:BA:A1:D7:95:38:A2
X509v3 Authority Key Identifier:
keyid:CA:85:79:1A:92:65:E8:83:52:E3:82:36:11:E6:D8:4D:6B:BB:DC:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/CA85791A9265E88352E3823611E6D84D6BBBDCC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA85791A9265E88352E3823611E6D84D6BBBDCC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuoVU4z93Z7Zb59DzXcxcXwdSagRcKVVFSNiGHsZi1kJ/0/323830343a313462383a3a2f33332d3333203d3e20323633333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:14b8::/33
Signature Algorithm: sha256WithRSAEncryption
a8:3f:b5:83:f4:f8:1a:01:35:87:21:f5:8d:af:9d:de:f9:ba:
3e:0d:7c:57:3a:d1:db:48:60:5d:cd:95:8c:82:a0:10:a3:7c:
a2:21:af:39:c2:1f:d6:d9:5f:37:b5:57:7c:5f:b7:54:f5:30:
7b:b5:3f:67:3c:69:ad:5c:9c:e9:a7:a9:a7:df:77:2a:cd:b8:
de:b1:70:24:ba:5b:94:b0:73:9e:b1:ae:11:05:6b:d9:6e:fe:
36:82:2f:ef:78:0e:8f:77:0b:35:6d:6b:b5:7f:82:df:2c:78:
97:af:64:5f:2d:8c:c3:f5:7e:ed:10:66:ea:d6:a1:c8:55:85:
98:0c:70:5b:cb:e4:2c:e0:46:23:4f:24:64:50:4d:e5:6e:e7:
0d:19:64:b4:7f:1a:89:2f:c5:bb:80:09:9d:b5:91:16:9a:4f:
78:32:d1:6a:40:2e:ea:e4:98:d3:d8:b5:b2:2a:2f:77:a3:27:
f6:21:ad:38:22:14:01:e4:b3:d8:c0:a9:22:57:d5:74:b5:df:
b8:66:36:d8:51:e4:2d:67:74:b6:f7:33:42:80:6b:9c:f4:6c:
0b:f5:ac:ec:1d:18:fb:57:25:b1:9d:47:2d:35:51:c6:8d:92:
58:06:89:7b:92:e4:54:16:c3:85:0e:24:5e:4e:5b:07:12:5e:
87:45:2e:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURx/9CyiwUk2AqBpXUERXu+/qg5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E4NTc5MUE5MjY1RTg4MzUyRTM4MjM2MTFFNkQ4NEQ2
QkJCRENDNjAeFw0yNDA0MjMxODQzMzdaFw0yNTA0MjIxODQ4MzdaMDMxMTAvBgNV
BAMTKDM4QjY1NDk4Mzg1QTZEMDg0NEIyNjM1OTIwNDBCQUExRDc5NTM4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+oO9zjtXJBwgAUUgH6ft6CCJ
EmDko3jIOH3mp+nRE1WvAsjEyW9w9L3QULS1g6c4cL1xii05N3VrIHELVjHF46cg
IUPhe2EyvFs1+RuoekGd8B2pYblCsP9KKRK/m4x8NmlCgn2qJoPoXd7Q8SVMxK0N
sC6o4Vd3NIKwCuO6wuEueNLLVr1QvT9sKs0LZZ4XVz5w3hbMKBP5LbDKSG6GqCtF
pZABtXokxjj0K92FvE1NDfYARPM9h6U4r1hgG6HFwFTSfwo6zjhOfhHNTdqvFNFI
18T8TqHKnOG02ZLDwgA3ZI7E28WbzpvcNaY7QbxPr+rFY+lkrDXg1OYkI+xfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOLZUmDhabQhEsmNZIEC6odeVOKIwHwYDVR0j
BBgwFoAUyoV5GpJl6INS44I2EebYTWu73MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VvVlU0ejkzWjdaYjU5RHpYY3hjWHdkU2FnUmNLVlZGU05pR0hzWmkx
a0ovMC9DQTg1NzkxQTkyNjVFODgzNTJFMzgyMzYxMUU2RDg0RDZCQkJEQ0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBODU3OTFBOTI2NUU4ODM1
MkUzODIzNjExRTZEODRENkJCQkRDQzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1b1ZVNHo5M1o3WmI1OUR6WGN4Y1h3ZFNhZ1JjS1ZWRlNOaUdIc1ppMWtKLzAv
MzIzODMwMzQzYTMxMzQ2MjM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQUuAAwDQYJKoZIhvcNAQELBQADggEBAKg/tYP0
+BoBNYch9Y2vnd75uj4NfFc60dtIYF3NlYyCoBCjfKIhrznCH9bZXze1V3xft1T1
MHu1P2c8aa1cnOmnqaffdyrNuN6xcCS6W5Swc56xrhEFa9lu/jaCL+94Do93CzVt
a7V/gt8seJevZF8tjMP1fu0QZurWochVhZgMcFvL5CzgRiNPJGRQTeVu5w0ZZLR/
GokvxbuACZ21kRaaT3gy0WpALurkmNPYtbIqL3ejJ/YhrTgiFAHks9jAqSJX1XS1
37hmNthR5C1ndLb3M0KAa5z0bAv1rOwdGPtXJbGdRy01UcaNklgGiXuS5FQWw4UO
JF5OWwcSXodFLik=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:50 2025 by rpki-client