![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
File: 3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa (raw, json)
Hash identifier: 2xzyrr9QO9baGCSi+fujwVHjnvY9agktm8mwzFEWoMc=
Subject key identifier: 67:B9:04:4D:9A:F0:DF:B0:8C:95:0B:09:63:D7:47:34:E7:43:9D:9B
Certificate issuer: /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial: 7E751E50A0FA64961E620FB39BF834C712D88490
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
Signing time: Wed 08 May 2024 12:08:22 +0000
ROA not before: Wed 08 May 2024 12:03:22 +0000
ROA not after: Wed 07 May 2025 12:08:22 +0000
asID: 273681
IP address blocks: 201.159.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 22 Jul 2024 13:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:75:1e:50:a0:fa:64:96:1e:62:0f:b3:9b:f8:34:c7:12:d8:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28C772F802942018601488095AA6C547A3694782
Validity
Not Before: May 8 12:03:22 2024 GMT
Not After : May 7 12:08:22 2025 GMT
Subject: CN=67B9044D9AF0DFB08C950B0963D74734E7439D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:03:f2:69:1c:9a:b0:e3:57:67:a3:ef:64:
4f:9f:f2:f4:d0:2e:e0:2d:8d:6a:44:a5:de:0d:ad:
a7:a1:cc:ab:b8:b0:2f:7d:67:dd:d7:e3:83:ea:1b:
6e:d4:05:19:57:b1:46:1b:63:19:bb:a9:69:f2:b5:
95:b5:c8:b0:c9:02:d5:63:f9:f4:29:af:ad:3e:b8:
95:b6:fc:c3:b1:bd:65:2f:d7:65:d8:69:89:64:83:
db:9f:55:40:c6:a5:a6:68:82:7b:41:03:19:1a:75:
9c:c8:da:d5:14:72:2f:ab:f3:c7:bf:25:c3:1a:69:
c1:3c:d6:b2:17:2a:e9:ac:e8:ad:69:1f:89:f8:06:
75:27:08:7a:4e:d9:9a:13:bb:30:4b:53:4a:64:21:
df:8f:6a:12:87:04:8e:e9:28:85:fd:7b:79:61:9f:
58:83:5d:84:c1:12:74:a4:77:48:72:25:d6:3f:12:
c9:02:eb:d9:ae:30:9c:9d:df:62:cd:e4:bc:4c:d2:
fd:b4:7e:38:b4:38:bd:c8:ff:a0:5e:52:29:69:cc:
64:81:32:c8:2d:e6:f0:13:c3:13:e1:db:bc:7e:1c:
4d:8d:1c:82:8a:d8:57:8d:c1:a9:af:cd:d3:65:fa:
2e:d1:ef:fe:2f:09:f0:60:72:3c:f3:48:8a:63:2c:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:04:4D:9A:F0:DF:B0:8C:95:0B:09:63:D7:47:34:E7:43:9D:9B
X509v3 Authority Key Identifier:
keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323733363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ba:a9:d4:d7:45:5f:87:82:d4:3d:4c:68:5c:2b:ed:be:88:
c8:94:4c:ec:a6:50:fc:d5:f1:d2:5b:ca:a9:a8:2c:77:90:ff:
40:b3:d8:e9:5b:e8:ca:27:34:c5:78:cb:b1:58:4a:13:67:de:
5a:9d:f0:3d:41:d2:7f:62:4d:1f:5d:0a:e8:a8:a3:2d:26:fc:
89:bc:05:87:4d:f2:86:f3:79:a8:c7:6d:d4:e9:09:fd:6d:2d:
1c:e3:db:73:dd:da:59:d2:04:e1:1f:25:4e:31:ad:5f:9a:26:
7b:3b:50:53:e0:59:1e:19:04:3b:7d:46:c3:6f:e4:ea:cd:d4:
7b:2e:52:97:d4:08:2f:3c:f0:ec:e7:0e:9a:87:e3:c8:32:d9:
5a:c9:26:f9:35:5e:78:39:ea:be:10:9a:58:f6:37:96:11:ef:
c8:e7:79:9e:a6:91:b0:10:8c:38:33:c8:1f:66:d3:f3:22:9e:
db:a7:16:af:13:b2:36:17:26:33:7b:ba:af:58:8a:20:71:4a:
fc:ca:ba:91:89:2a:f8:6b:d5:13:ec:46:24:6b:cd:20:6d:a4:
68:ec:85:ff:ee:39:17:e5:bf:ac:79:6d:ac:fa:85:d1:ce:99:
85:ed:e6:ba:c7:88:26:62:e7:47:63:b6:1a:25:4a:da:89:5a:
67:bd:ce:15
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfnUeUKD6ZJYeYg+zm/g0xxLYhJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNDA1MDgxMjAzMjJaFw0yNTA1MDcxMjA4MjJaMDMxMTAvBgNV
BAMTKDY3QjkwNDREOUFGMERGQjA4Qzk1MEIwOTYzRDc0NzM0RTc0MzlEOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IgPyaRyasONXZ6PvZE+f8vTQ
LuAtjWpEpd4NraehzKu4sC99Z93X44PqG27UBRlXsUYbYxm7qWnytZW1yLDJAtVj
+fQpr60+uJW2/MOxvWUv12XYaYlkg9ufVUDGpaZogntBAxkadZzI2tUUci+r88e/
JcMaacE81rIXKums6K1pH4n4BnUnCHpO2ZoTuzBLU0pkId+PahKHBI7pKIX9e3lh
n1iDXYTBEnSkd0hyJdY/EskC69muMJyd32LN5LxM0v20fji0OL3I/6BeUilpzGSB
Msgt5vATwxPh27x+HE2NHIKK2FeNwamvzdNl+i7R7/4vCfBgcjzzSIpjLATBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZ7kETZrw37CMlQsJY9dHNOdDnZswHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzIzMDMxMmUzMTM1MzkyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMzM2MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsmfdDANBgkqhkiG9w0BAQsFAAOCAQEAe7qp
1NdFX4eC1D1MaFwr7b6IyJRM7KZQ/NXx0lvKqagsd5D/QLPY6Vvoyic0xXjLsVhK
E2feWp3wPUHSf2JNH10K6KijLSb8ibwFh03yhvN5qMdt1OkJ/W0tHOPbc93aWdIE
4R8lTjGtX5omeztQU+BZHhkEO31Gw2/k6s3Uey5Sl9QILzzw7OcOmofjyDLZWskm
+TVeeDnqvhCaWPY3lhHvyOd5nqaRsBCMODPIH2bT8yKe26cWrxOyNhcmM3u6r1iK
IHFK/Mq6kYkq+GvVE+xGJGvNIG2kaOyF/+45F+W/rHltrPqF0c6Zhe3museIJmLn
R2O2GiVK2olaZ73OFQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:33 2025 by rpki-client