Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
File: 3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier: j/0FWd6ij/v3tkjAQ5tTbE4AgyZI4SyjInqJmyI9RX0=
Subject key identifier: 7E:8E:31:0F:B8:08:8F:21:AE:9C:83:3A:01:29:41:DE:6C:69:2D:B3
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 7CBE8DF49B6CB555FB9812079E2A9AA1A60B19B7
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:55 +0000
ROA not before: Fri 31 Jan 2025 18:03:55 +0000
ROA not after: Fri 30 Jan 2026 18:08:55 +0000
asID: 264450
IP address blocks: 131.255.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:be:8d:f4:9b:6c:b5:55:fb:98:12:07:9e:2a:9a:a1:a6:0b:19:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:55 2025 GMT
Not After : Jan 30 18:08:55 2026 GMT
Subject: CN=7E8E310FB8088F21AE9C833A012941DE6C692DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:a3:00:aa:a1:6b:42:3e:fa:28:55:0f:54:
a9:30:3c:64:ec:44:8e:5c:f7:50:86:5e:0b:f4:d2:
db:dc:62:44:93:6b:0b:07:d0:e6:44:fd:5a:1f:43:
4a:12:a9:85:f1:9f:53:50:ad:ff:ab:91:53:b7:43:
ce:da:18:d3:7d:a4:ca:5d:41:6b:53:0b:29:d9:e6:
28:9c:2b:a9:c5:de:ba:39:49:17:a2:3f:ba:c7:39:
62:99:cd:8f:60:91:a8:b7:67:09:c9:2f:74:e9:38:
1d:96:ff:cd:bd:d3:d9:89:ac:a0:93:06:8c:ad:c5:
af:5a:08:28:90:c7:56:3c:83:64:be:b2:d8:5b:57:
d3:37:31:c7:01:08:2d:5d:e2:29:84:54:4a:6f:7e:
64:0e:84:f8:67:b7:d4:84:2b:b4:ea:06:af:e5:03:
a8:98:d4:b9:47:7b:29:42:93:de:2c:e8:c4:0b:c2:
20:f4:8a:a5:a4:ae:e5:2d:2d:1d:1b:86:e6:0b:b2:
b4:c9:67:0d:61:5e:88:6d:a6:13:12:03:41:5e:9a:
12:15:60:d0:97:d7:63:42:58:c1:72:88:e7:60:64:
47:ae:6c:05:07:20:fb:36:de:8d:fe:9c:b4:ea:20:
29:29:9a:d3:b2:1d:f0:e9:b0:3d:b8:34:9b:72:e7:
39:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8E:31:0F:B8:08:8F:21:AE:9C:83:3A:01:29:41:DE:6C:69:2D:B3
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:94:c6:37:7a:e6:54:25:5b:f6:80:d3:e6:68:31:b1:5f:71:
3f:2b:fa:48:0e:f3:13:5b:d4:d5:9b:f4:d2:6c:64:e4:d3:6c:
78:56:88:d2:43:8d:08:4c:f7:46:8c:ee:20:0e:67:eb:75:86:
7c:11:cb:b9:7d:a8:63:f9:86:02:fe:84:13:61:55:d0:be:2b:
3c:5a:f6:dc:70:5f:44:10:df:d8:d0:32:ef:31:14:94:9f:1f:
54:07:54:ca:ad:a8:3a:2d:1d:60:51:f4:0f:2d:33:5c:bb:f1:
f6:08:e1:6c:9f:2f:3c:82:16:0a:c0:60:e3:cd:fa:82:86:fa:
90:77:3b:26:9a:df:66:87:40:f3:1e:ac:5d:cc:31:53:58:08:
c0:b0:f9:9a:cb:e1:ac:55:8f:87:f0:86:74:59:72:25:72:c0:
c2:e4:15:ec:cc:59:3c:eb:b0:74:2b:45:9d:d3:9d:f0:0a:15:
64:f7:d9:b2:12:e6:cb:a5:f6:3a:ae:20:91:22:e8:fc:74:dc:
3b:00:90:8f:39:9b:0d:2b:11:76:3b:24:75:54:d6:af:c0:96:
bb:a5:46:a5:d0:56:51:b1:4a:b1:9b:33:29:24:ff:76:fd:cf:
17:d1:58:ef:36:5f:a4:e2:69:73:80:39:e7:ab:06:95:d1:f6:
4d:d1:3d:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfL6N9JtstVX7mBIHniqaoaYLGbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjIwMkVFN0M0MTU0MEJDRkQyODFBNTcyNkY0QkIy
RkFDRTUwRjAeFw0yNTAxMzExODAzNTVaFw0yNjAxMzAxODA4NTVaMDMxMTAvBgNV
BAMTKDdFOEUzMTBGQjgwODhGMjFBRTlDODMzQTAxMjk0MURFNkM2OTJEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY6MAqqFrQj76KFUPVKkwPGTs
RI5c91CGXgv00tvcYkSTawsH0OZE/VofQ0oSqYXxn1NQrf+rkVO3Q87aGNN9pMpd
QWtTCynZ5iicK6nF3ro5SReiP7rHOWKZzY9gkai3ZwnJL3TpOB2W/82909mJrKCT
Boytxa9aCCiQx1Y8g2S+sthbV9M3MccBCC1d4imEVEpvfmQOhPhnt9SEK7TqBq/l
A6iY1LlHeylCk94s6MQLwiD0iqWkruUtLR0bhuYLsrTJZw1hXohtphMSA0FemhIV
YNCX12NCWMFyiOdgZEeubAUHIPs23o3+nLTqICkpmtOyHfDpsD24NJty5zlnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfo4xD7gIjyGunIM6ASlB3mxpLbMwHwYDVR0j
BBgwFoAUAssgLufEFUC8/SgaVyb0uy+s5Q8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8wMkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0IyMDJFRTdDNDE1NDBC
Q0ZEMjgxQTU3MjZGNEJCMkZBQ0U1MEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzEzMzMxMmUzMjM1MzUyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACD/yYwDQYJKoZIhvcNAQELBQADggEBAByUxjd6
5lQlW/aA0+ZoMbFfcT8r+kgO8xNb1NWb9NJsZOTTbHhWiNJDjQhM90aM7iAOZ+t1
hnwRy7l9qGP5hgL+hBNhVdC+Kzxa9txwX0QQ39jQMu8xFJSfH1QHVMqtqDotHWBR
9A8tM1y78fYI4WyfLzyCFgrAYOPN+oKG+pB3Oyaa32aHQPMerF3MMVNYCMCw+ZrL
4axVj4fwhnRZciVywMLkFezMWTzrsHQrRZ3TnfAKFWT32bIS5sul9jquIJEi6Px0
3DsAkI85mw0rEXY7JHVU1q/AlrulRqXQVlGxSrGbMykk/3b9zxfRWO82X6TiaXOA
OeerBpXR9k3RPeU=
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:46 2025 by rpki-client