Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33332d3333203d3e20323634343530.roa
File: 323830343a316564633a3a2f33332d3333203d3e20323634343530.roa (raw, json)
Hash identifier: UVI1TTr85a1QF0gsE2SaGzrtCV62j5Q9Q3AwT9+EYas=
Subject key identifier: D5:2F:37:19:55:61:AB:85:9C:F1:53:27:26:5F:38:7B:E3:83:D0:F7
Certificate issuer: /CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Certificate serial: 796060172E402DB144F0D048C50F52152F5965EE
Authority key identifier: 02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33332d3333203d3e20323634343530.roa
Signing time: Fri 31 Jan 2025 18:08:56 +0000
ROA not before: Fri 31 Jan 2025 18:03:56 +0000
ROA not after: Fri 30 Jan 2026 18:08:56 +0000
asID: 264450
IP address blocks: 2804:1edc::/33 maxlen: 33
Validation: Failed, certificate revoked on Fri 07 Feb 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:60:60:17:2e:40:2d:b1:44:f0:d0:48:c5:0f:52:15:2f:59:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB202EE7C41540BCFD281A5726F4BB2FACE50F
Validity
Not Before: Jan 31 18:03:56 2025 GMT
Not After : Jan 30 18:08:56 2026 GMT
Subject: CN=D52F37195561AB859CF15327265F387BE383D0F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:17:8e:af:ec:78:d8:1d:86:f6:d8:22:8e:
5c:ed:e0:f9:e3:23:c2:54:96:99:a1:3b:56:34:af:
bc:2f:d3:f2:57:bf:a7:7e:ff:9a:71:2c:6b:05:64:
7a:7a:4e:f1:c9:dc:c3:a0:fe:00:86:29:11:28:d9:
6e:60:a3:de:22:1a:7c:ca:72:32:f1:df:11:2d:ee:
94:71:15:37:a7:f4:ad:6a:eb:3b:4e:83:bc:93:9d:
25:f5:d3:00:dc:b3:df:2a:8f:d5:23:7f:e3:f0:57:
04:e3:5a:55:11:04:e1:dc:f8:f6:03:b6:55:e4:3a:
30:da:49:b0:b6:30:3f:02:36:31:e1:9d:76:7c:3d:
fe:c3:f0:4a:db:fe:2c:0c:7a:79:14:56:ea:7e:f6:
dc:e0:67:5d:a9:ff:b5:7d:79:86:d7:32:46:47:44:
01:b3:8d:67:c4:04:ca:fa:d9:70:9d:6a:b4:d1:0d:
b8:3f:d5:0d:c0:f8:c4:04:3c:a7:62:8b:46:8f:51:
cf:44:71:74:6f:bf:3f:ff:2a:de:9e:7e:83:ab:2a:
d3:70:0b:c5:61:fe:b2:7c:b0:04:03:55:6d:25:eb:
9e:0f:8c:61:17:a5:26:e7:44:8f:41:81:41:b1:9d:
9f:17:ca:87:20:c5:86:a0:14:d4:7b:85:2b:37:a4:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2F:37:19:55:61:AB:85:9C:F1:53:27:26:5F:38:7B:E3:83:D0:F7
X509v3 Authority Key Identifier:
keyid:02:CB:20:2E:E7:C4:15:40:BC:FD:28:1A:57:26:F4:BB:2F:AC:E5:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB202EE7C41540BCFD281A5726F4BB2FACE50F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33332d3333203d3e20323634343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1edc::/33
Signature Algorithm: sha256WithRSAEncryption
8f:66:7d:2c:9b:4d:b3:1a:93:64:81:22:3e:98:b1:a5:5c:c1:
bd:47:98:a2:16:22:62:98:4f:40:62:62:85:a0:50:84:14:ca:
f7:f5:0c:a3:4e:4f:e6:35:a7:cf:10:1b:1c:6a:de:7f:2e:7c:
eb:01:92:7a:b4:b1:79:06:d0:f6:6a:3e:26:6b:3f:49:97:c8:
9d:ea:d2:b8:d8:ce:a1:e1:be:68:aa:fb:d1:28:92:d8:2f:2e:
01:1c:cc:75:94:15:b4:c6:3a:91:7b:dc:68:0f:06:08:c6:09:
a5:f1:a7:22:dc:16:3d:94:f0:f8:4b:14:11:0e:83:32:65:13:
4f:67:f0:15:85:81:bb:27:dc:90:80:e0:39:e6:14:d7:bb:49:
dd:31:d7:43:ef:08:9c:c2:11:ed:db:c2:ba:66:da:7d:53:20:
ad:ec:f3:f6:73:9d:9c:83:4b:71:12:52:f2:5a:6e:76:f8:12:
57:74:7c:72:94:4e:07:1a:b8:a5:89:e9:80:c1:50:38:92:80:
d7:21:d1:ce:7a:ea:8a:85:57:10:66:08:e6:11:a9:01:38:3c:
5e:9b:7b:f3:b9:b3:db:12:20:55:e8:a3:c1:b4:0b:05:33:46:
24:5f:81:9a:88:ca:06:92:86:f5:04:ea:ab:10:78:b6:56:32:
d5:f7:60:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeWBgFy5ALbFE8NBIxQ9SFS9ZZe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJDQjIwMkVFN0M0MTU0MEJDRkQyODFBNTcyNkY0QkIy
RkFDRTUwRjAeFw0yNTAxMzExODAzNTZaFw0yNjAxMzAxODA4NTZaMDMxMTAvBgNV
BAMTKEQ1MkYzNzE5NTU2MUFCODU5Q0YxNTMyNzI2NUYzODdCRTM4M0QwRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4ReOr+x42B2G9tgijlzt4Pnj
I8JUlpmhO1Y0r7wv0/JXv6d+/5pxLGsFZHp6TvHJ3MOg/gCGKREo2W5go94iGnzK
cjLx3xEt7pRxFTen9K1q6ztOg7yTnSX10wDcs98qj9Ujf+PwVwTjWlURBOHc+PYD
tlXkOjDaSbC2MD8CNjHhnXZ8Pf7D8Erb/iwMenkUVup+9tzgZ12p/7V9eYbXMkZH
RAGzjWfEBMr62XCdarTRDbg/1Q3A+MQEPKdii0aPUc9EcXRvvz//Kt6efoOrKtNw
C8Vh/rJ8sAQDVW0l654PjGEXpSbnRI9BgUGxnZ8XyocgxYagFNR7hSs3pJcrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1S83GVVhq4Wc8VMnJl84e+OD0PcwHwYDVR0j
BBgwFoAUAssgLufEFUC8/SgaVyb0uy+s5Q8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8wMkNCMjAyRUU3QzQxNTQwQkNGRDI4MUE1NzI2RjRCQjJGQUNFNTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0IyMDJFRTdDNDE1NDBC
Q0ZEMjgxQTU3MjZGNEJCMkZBQ0U1MEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzIzODMwMzQzYTMxNjU2NDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzQzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQe3AAwDQYJKoZIhvcNAQELBQADggEBAI9mfSyb
TbMak2SBIj6YsaVcwb1HmKIWImKYT0BiYoWgUIQUyvf1DKNOT+Y1p88QGxxq3n8u
fOsBknq0sXkG0PZqPiZrP0mXyJ3q0rjYzqHhvmiq+9EoktgvLgEczHWUFbTGOpF7
3GgPBgjGCaXxpyLcFj2U8PhLFBEOgzJlE09n8BWFgbsn3JCA4DnmFNe7Sd0x10Pv
CJzCEe3bwrpm2n1TIK3s8/ZznZyDS3ESUvJabnb4Eld0fHKUTgcauKWJ6YDBUDiS
gNch0c566oqFVxBmCOYRqQE4PF6be/O5s9sSIFXoo8G0CwUzRiRfgZqIygaShvUE
6qsQeLZWMtX3YJ8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:25 2025 by rpki-client