Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa
File: 3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier: Mg7hS+wRvsXea2pv1iMCIeviKEjTyASPMUl+rLZ7+YQ=
Subject key identifier: C0:FC:76:8A:08:0A:34:42:43:87:49:25:F2:D9:DC:3A:2B:67:BA:1D
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 3254B76296637B8EAC8F3FBB4BB75018838957E4
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa
Signing time: Thu 06 Mar 2025 19:01:12 +0000
ROA not before: Thu 06 Mar 2025 18:56:12 +0000
ROA not after: Thu 05 Mar 2026 19:01:12 +0000
asID: 264197
IP address blocks: 138.97.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 18:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:b7:62:96:63:7b:8e:ac:8f:3f:bb:4b:b7:50:18:83:89:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Mar 6 18:56:12 2025 GMT
Not After : Mar 5 19:01:12 2026 GMT
Subject: CN=C0FC768A080A344243874925F2D9DC3A2B67BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:5c:32:db:e0:bf:6a:c0:d0:6f:0a:65:92:
a1:b7:ab:25:83:75:3b:bf:c7:57:d1:d7:21:f7:f9:
dd:1d:f8:79:2d:ca:76:19:ee:d2:a4:30:94:7f:9c:
52:44:dd:16:b2:d9:62:12:a7:ed:52:1e:a5:66:00:
f0:47:ce:c9:cb:fd:55:18:6c:76:9c:3c:4f:ee:e7:
7e:73:cf:aa:41:05:64:b7:fa:37:19:a8:72:1d:e2:
c4:15:a8:d4:b9:2a:a3:c4:6e:08:55:9c:a8:73:0e:
57:92:b9:79:66:1b:a8:85:b2:77:79:26:e1:6d:a7:
e0:db:5b:af:41:d4:c8:78:f1:03:62:75:d4:d9:82:
11:2f:8d:36:a8:11:42:46:bc:73:66:7e:9d:58:00:
2e:64:cc:fa:f6:b3:2c:31:39:b7:30:61:49:b2:75:
dd:e7:f1:ee:04:03:5c:57:4b:f4:8b:34:a8:3d:92:
aa:50:5a:d9:1f:50:2a:4b:b1:f3:92:1c:cb:7b:7a:
88:9a:53:bd:50:76:77:4e:9e:8a:e0:a5:46:a1:7c:
cb:bc:f1:ed:d5:2d:a7:01:2c:b1:77:b8:54:cf:05:
1e:d9:71:8f:95:c5:9d:60:31:44:a2:bd:db:22:50:
7a:c0:31:bc:ee:d7:f7:05:8a:0a:59:2b:ed:a4:81:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:76:8A:08:0A:34:42:43:87:49:25:F2:D9:DC:3A:2B:67:BA:1D
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32342d3234203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.148.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f1:39:8c:54:79:51:b2:7b:8b:75:af:18:62:fd:15:cd:32:
5f:b8:e4:9d:be:29:45:ea:00:11:bc:60:54:ff:43:bc:53:c7:
f7:98:87:17:1b:15:8d:0d:31:a1:27:80:39:83:7e:15:22:f2:
e2:50:f1:10:ff:49:e3:7e:49:04:7e:9a:9c:1b:a4:f7:63:f8:
b7:f3:e1:b8:f6:a6:07:b0:17:67:54:99:14:17:21:0c:b8:49:
52:0d:02:30:8c:2e:80:7b:82:fa:ac:68:2b:79:d1:42:43:a2:
05:9b:c6:d3:f1:f4:2c:a5:ec:e8:1a:1e:43:7a:7c:c7:ef:9d:
fd:eb:e1:34:52:26:ea:46:f9:4d:ce:9d:62:fb:62:7c:79:28:
49:96:96:19:6b:76:76:f5:5a:e6:87:e6:c5:c9:85:14:b3:41:
a7:86:af:79:a8:82:b0:64:12:72:01:46:87:ba:1d:2c:0f:d9:
b9:3f:e3:a9:42:8b:9b:52:ee:b1:20:5d:73:b6:f1:16:4d:44:
be:d1:5e:63:3b:67:8f:8a:91:ed:77:0b:ba:33:bf:11:bc:46:
27:19:d0:2c:1c:02:93:ca:74:9c:f8:76:52:f2:2f:a8:d4:e2:
92:f0:8e:33:ff:c3:f6:fa:43:8e:fc:e9:3c:c0:14:90:0e:d0:
9b:7c:53:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMlS3YpZje46sjz+7S7dQGIOJV+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFMUYyQzYyMzM1RkYzMzcyNzczREU3MjU0NUU4QjM4
RjBCRkMyMTAeFw0yNTAzMDYxODU2MTJaFw0yNjAzMDUxOTAxMTJaMDMxMTAvBgNV
BAMTKEMwRkM3NjhBMDgwQTM0NDI0Mzg3NDkyNUYyRDlEQzNBMkI2N0JBMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGblwy2+C/asDQbwplkqG3qyWD
dTu/x1fR1yH3+d0d+HktynYZ7tKkMJR/nFJE3Ray2WISp+1SHqVmAPBHzsnL/VUY
bHacPE/u535zz6pBBWS3+jcZqHId4sQVqNS5KqPEbghVnKhzDleSuXlmG6iFsnd5
JuFtp+DbW69B1Mh48QNiddTZghEvjTaoEUJGvHNmfp1YAC5kzPr2sywxObcwYUmy
dd3n8e4EA1xXS/SLNKg9kqpQWtkfUCpLsfOSHMt7eoiaU71QdndOnorgpUahfMu8
8e3VLacBLLF3uFTPBR7ZcY+VxZ1gMUSivdsiUHrAMbzu1/cFigpZK+2kgYfFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwPx2iggKNEJDh0kl8tncOitnuh0wHwYDVR0j
BBgwFoAUruHyxiM1/zNydz3nJUXos48L/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMS9BRUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTFGMkM2MjMzNUZGMzM3
Mjc3M0RFNzI1NDVFOEIzOEYwQkZDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiNU1halU5ZjdwTHlyU2lkVmRaV2JzM0U3RHlucE5UZjNvUWVmRnI5UzVULzEv
MzEzMzM4MmUzOTM3MmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZQwDQYJKoZIhvcNAQELBQADggEBABjxOYxU
eVGye4t1rxhi/RXNMl+45J2+KUXqABG8YFT/Q7xTx/eYhxcbFY0NMaEngDmDfhUi
8uJQ8RD/SeN+SQR+mpwbpPdj+Lfz4bj2pgewF2dUmRQXIQy4SVINAjCMLoB7gvqs
aCt50UJDogWbxtPx9Cyl7OgaHkN6fMfvnf3r4TRSJupG+U3OnWL7Ynx5KEmWlhlr
dnb1WuaH5sXJhRSzQaeGr3mogrBkEnIBRoe6HSwP2bk/46lCi5tS7rEgXXO28RZN
RL7RXmM7Z4+Kke13C7ozvxG8RicZ0CwcApPKdJz4dlLyL6jU4pLwjjP/w/b6Q478
6TzAFJAO0Jt8U60=
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:34 2025 by rpki-client