Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa
File: 323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier: 2OTRDsqI4Q5sU/SPCuEdlHq20vWKAlHTFfTWryB/SFE=
Subject key identifier: 11:7F:29:09:9D:96:5E:D4:16:14:46:29:6E:BD:89:2A:B2:FB:B1:45
Certificate issuer: /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial: 3A439A58584FE2EB5D3E9744821F764569600C15
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa
Signing time: Wed 03 Apr 2024 18:31:24 +0000
ROA not before: Wed 03 Apr 2024 18:26:24 +0000
ROA not after: Wed 02 Apr 2025 18:31:24 +0000
asID: 264247
IP address blocks: 2804:24e4:7000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 02 Apr 2025 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:43:9a:58:58:4f:e2:eb:5d:3e:97:44:82:1f:76:45:69:60:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Validity
Not Before: Apr 3 18:26:24 2024 GMT
Not After : Apr 2 18:31:24 2025 GMT
Subject: CN=117F29099D965ED4161446296EBD892AB2FBB145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:86:32:00:c8:f3:78:7e:48:63:f3:c9:18:
1f:77:bd:31:89:47:4c:fc:a1:12:21:e6:a1:0c:a1:
a8:ca:e2:38:50:0b:45:2a:e4:0e:e5:26:fb:f1:6a:
4c:db:58:76:87:0d:49:74:20:0f:64:7b:79:ee:c6:
48:01:c7:c9:af:ce:a2:02:2b:54:9b:61:2c:43:e4:
89:3b:97:82:75:ff:ce:a1:dc:95:cc:00:ee:6a:20:
f0:d4:cb:40:8b:cd:65:8e:c3:4e:0a:5e:10:be:6f:
cf:1d:a6:68:6e:19:92:d7:28:1a:86:19:af:f2:68:
54:13:6a:59:70:9e:ff:dd:a0:eb:96:e3:0c:f1:54:
c2:7c:64:8a:e0:b8:0d:45:94:a1:37:49:b3:39:42:
73:4a:85:63:36:ee:6c:de:db:48:4d:39:df:0f:52:
ce:ca:4e:88:43:84:1b:d2:67:81:6c:fd:82:9e:eb:
1c:e6:af:6f:d7:eb:5b:de:6d:9b:55:77:3c:28:72:
e1:b4:4d:72:d5:17:a4:9a:a8:4c:d0:c0:ea:ac:33:
3a:8b:52:60:a1:aa:a1:a6:f1:6e:bc:88:b7:79:8a:
48:50:ab:46:58:1b:84:17:e0:fe:69:5b:96:96:96:
2e:bf:bc:4f:d2:ae:12:e5:90:36:cf:33:93:cf:ba:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:29:09:9D:96:5E:D4:16:14:46:29:6E:BD:89:2A:B2:FB:B1:45
X509v3 Authority Key Identifier:
keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a373030303a3a2f33362d3336203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:24e4:7000::/36
Signature Algorithm: sha256WithRSAEncryption
c0:eb:77:ef:21:d5:b3:c1:dd:c8:39:dd:b8:1d:1d:19:33:b4:
85:ce:93:fc:17:9b:67:d7:a1:51:df:38:5e:f7:90:4a:4f:06:
03:00:e2:37:3b:44:eb:ca:78:48:99:c8:cf:30:66:fd:26:fe:
20:0d:4d:ab:53:5b:84:ac:3f:6b:15:4e:e3:56:2b:23:00:85:
52:6e:e8:65:31:98:31:b3:fc:78:81:a5:17:0f:67:0d:bc:dc:
4c:9c:c9:09:e0:18:29:ea:29:bd:dc:04:d9:d5:85:9c:d4:47:
38:61:47:c2:fb:a9:a8:f5:16:5f:c7:77:33:65:ca:40:67:e0:
84:ec:52:5f:ff:18:16:a9:35:7a:d4:0c:8e:38:3d:12:dc:eb:
31:2e:1e:44:e9:9f:6d:92:1b:fa:20:aa:95:c3:79:90:b0:23:
12:8d:fa:a7:73:9b:ef:ca:40:76:89:b1:97:be:39:c9:4c:b2:
fb:c4:6c:61:6a:9c:1a:1a:3b:d1:04:a4:61:22:24:f5:19:ca:
4c:85:ba:b9:77:86:4d:38:1b:ad:3e:26:08:a2:8d:2b:b3:08:
8f:18:23:62:15:bc:d7:e6:ae:28:91:39:37:ff:17:fe:3f:4f:
2d:e0:72:5f:ef:8a:ce:4e:ec:4b:6d:0a:8c:b8:7d:ff:52:48:
92:1a:cd:f3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUOkOaWFhP4utdPpdEgh92RWlgDBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MjRaFw0yNTA0MDIxODMxMjRaMDMxMTAvBgNV
BAMTKDExN0YyOTA5OUQ5NjVFRDQxNjE0NDYyOTZFQkQ4OTJBQjJGQkIxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aIYyAMjzeH5IY/PJGB93vTGJ
R0z8oRIh5qEMoajK4jhQC0Uq5A7lJvvxakzbWHaHDUl0IA9ke3nuxkgBx8mvzqIC
K1SbYSxD5Ik7l4J1/86h3JXMAO5qIPDUy0CLzWWOw04KXhC+b88dpmhuGZLXKBqG
Ga/yaFQTallwnv/doOuW4wzxVMJ8ZIrguA1FlKE3SbM5QnNKhWM27mze20hNOd8P
Us7KTohDhBvSZ4Fs/YKe6xzmr2/X61vebZtVdzwocuG0TXLVF6SaqEzQwOqsMzqL
UmChqqGm8W68iLd5ikhQq0ZYG4QX4P5pW5aWli6/vE/SrhLlkDbPM5PPupXzAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEX8pCZ2WXtQWFEYpbr2JKrL7sUUwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzIzODMwMzQzYTMyMzQ2NTM0M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNDMyMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEJORwMA0GCSqGSIb3DQEBCwUA
A4IBAQDA63fvIdWzwd3IOd24HR0ZM7SFzpP8F5tn16FR3zhe95BKTwYDAOI3O0Tr
ynhImcjPMGb9Jv4gDU2rU1uErD9rFU7jVisjAIVSbuhlMZgxs/x4gaUXD2cNvNxM
nMkJ4Bgp6im93ATZ1YWc1Ec4YUfC+6mo9RZfx3czZcpAZ+CE7FJf/xgWqTV61AyO
OD0S3OsxLh5E6Z9tkhv6IKqVw3mQsCMSjfqnc5vvykB2ibGXvjnJTLL7xGxhapwa
GjvRBKRhIiT1GcpMhbq5d4ZNOButPiYIoo0rswiPGCNiFbzX5q4okTk3/xf+P08t
4HJf74rOTuxLbQqMuH3/UkiSGs3z
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:22 2025 by rpki-client