Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
File: 3137302e3234352e39372e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier: kG6orEyrkw+nron5DknLbsnqfFGHpWRZbYcxwTcXq/A=
Subject key identifier: DB:78:C3:A8:5F:58:A4:AC:E6:FD:6D:1E:A6:A5:C2:17:6C:60:A6:04
Certificate issuer: /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial: 27FF040C3FA0E20B25EAF89FD264540DA0E0322F
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
Signing time: Wed 10 Apr 2024 19:20:04 +0000
ROA not before: Wed 10 Apr 2024 19:15:04 +0000
ROA not after: Wed 09 Apr 2025 19:20:04 +0000
asID: 61748
IP address blocks: 170.245.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Apr 2025 19:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ff:04:0c:3f:a0:e2:0b:25:ea:f8:9f:d2:64:54:0d:a0:e0:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Validity
Not Before: Apr 10 19:15:04 2024 GMT
Not After : Apr 9 19:20:04 2025 GMT
Subject: CN=DB78C3A85F58A4ACE6FD6D1EA6A5C2176C60A604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:55:67:c4:1d:85:c1:a3:e3:c3:77:21:f5:e2:
05:36:a6:53:2e:bd:81:96:f0:31:53:7a:30:4d:53:
c3:dd:d7:f2:01:6c:b8:09:28:4f:32:15:c8:5f:cb:
98:0a:0b:5c:e4:44:66:9c:80:63:72:bc:58:fc:dd:
9e:87:e7:4e:86:f1:65:89:df:18:3b:09:a0:5f:b8:
a1:2a:1f:9d:7f:73:41:32:c1:5d:ff:f5:37:eb:22:
d2:06:d1:bc:c8:82:d1:ac:2b:aa:8a:dc:bd:5c:a9:
05:f4:1a:44:65:04:91:6b:af:df:1a:c9:15:55:d4:
6d:43:b4:ef:ac:0b:ab:c8:f1:5a:a3:77:06:4d:0b:
72:0f:9a:cc:28:d3:31:bc:9e:77:6c:dc:36:55:ff:
2d:f1:19:f6:6f:7b:30:df:bc:b2:82:3e:ec:d6:c6:
db:53:cf:e7:30:bc:bb:ff:c3:4a:c0:ef:f6:68:ce:
3c:07:b6:af:cb:93:d2:15:3a:12:70:4e:5d:1b:fb:
6a:de:18:53:68:ff:65:8f:79:88:f0:71:6f:77:db:
b2:bb:66:af:b3:70:ab:f9:88:4e:e8:91:5d:3e:7b:
af:2a:11:a5:03:71:18:9f:2f:41:28:ee:95:3d:d7:
1e:ef:ff:df:a9:53:bf:a3:80:22:b6:47:d4:c1:b9:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:C3:A8:5F:58:A4:AC:E6:FD:6D:1E:A6:A5:C2:17:6C:60:A6:04
X509v3 Authority Key Identifier:
keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3137302e3234352e39372e302f32342d3234203d3e203631373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.97.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e3:6f:2e:d3:f2:8d:14:64:fc:06:02:fa:c3:bf:00:98:77:
98:46:dd:15:5c:93:0d:68:44:16:8c:f9:19:32:f0:c1:36:26:
95:97:74:aa:25:ea:6c:84:ce:41:21:8d:94:cd:7d:8a:04:db:
00:68:0b:1e:60:7d:d7:66:b6:9d:06:8d:be:47:11:81:14:fc:
29:71:37:7f:2e:ec:f5:b6:83:34:d7:0c:cb:d9:f7:7c:3b:a6:
5c:5f:c0:13:5c:66:7f:83:e8:ff:6c:30:45:55:e6:a1:5a:de:
8b:1d:fb:cb:a8:3b:76:1b:73:44:6e:02:f8:05:73:a6:6a:9c:
4e:e1:24:f4:ef:b3:8f:1e:30:b2:b3:83:0a:f7:cc:56:7b:11:
16:52:98:51:62:98:d3:33:8c:d2:b6:0c:f0:01:7d:04:61:fe:
0e:c7:93:8d:31:80:b6:9e:c3:19:dc:0d:51:a6:fa:a6:19:e2:
7b:46:0b:e2:5b:c2:ed:d9:d0:d5:1a:3e:41:aa:17:7b:95:9c:
8e:f4:b2:e3:82:88:75:b8:75:21:1e:66:65:2f:99:2f:81:4e:
7d:99:77:51:f7:6a:e8:3a:4c:48:00:9f:f4:fd:44:1b:96:23:
03:8d:7b:51:c7:9f:d3:b5:41:e8:9a:ef:23:30:91:fe:58:4a:
52:43:4d:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJ/8EDD+g4gsl6vif0mRUDaDgMi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzQTg3Q0RFMkU5MkFERkQ0NDQyMzI4Q0UyREI3MzQ5
Q0VDRUE0MjAeFw0yNDA0MTAxOTE1MDRaFw0yNTA0MDkxOTIwMDRaMDMxMTAvBgNV
BAMTKERCNzhDM0E4NUY1OEE0QUNFNkZENkQxRUE2QTVDMjE3NkM2MEE2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0VWfEHYXBo+PDdyH14gU2plMu
vYGW8DFTejBNU8Pd1/IBbLgJKE8yFchfy5gKC1zkRGacgGNyvFj83Z6H506G8WWJ
3xg7CaBfuKEqH51/c0EywV3/9TfrItIG0bzIgtGsK6qK3L1cqQX0GkRlBJFrr98a
yRVV1G1DtO+sC6vI8VqjdwZNC3IPmswo0zG8nnds3DZV/y3xGfZvezDfvLKCPuzW
xttTz+cwvLv/w0rA7/ZozjwHtq/Lk9IVOhJwTl0b+2reGFNo/2WPeYjwcW9327K7
Zq+zcKv5iE7okV0+e68qEaUDcRifL0Eo7pU91x7v/9+pU7+jgCK2R9TBudczAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU23jDqF9YpKzm/W0epqXCF2xgpgQwHwYDVR0j
BBgwFoAUVTqHzeLpKt/URCMozi23NJzs6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh
aEMvMC81NTNBODdDREUyRTkyQURGRDQ0NDIzMjhDRTJEQjczNDlDRUNFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1M0E4N0NERTJFOTJBREZE
NDQ0MjMyOENFMkRCNzM0OUNFQ0VBNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAv
MzEzNzMwMmUzMjM0MzUyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqvVhMA0GCSqGSIb3DQEBCwUAA4IBAQCX428u0/KN
FGT8BgL6w78AmHeYRt0VXJMNaEQWjPkZMvDBNiaVl3SqJepshM5BIY2UzX2KBNsA
aAseYH3XZradBo2+RxGBFPwpcTd/Luz1toM01wzL2fd8O6ZcX8ATXGZ/g+j/bDBF
VeahWt6LHfvLqDt2G3NEbgL4BXOmapxO4ST077OPHjCys4MK98xWexEWUphRYpjT
M4zStgzwAX0EYf4Ox5ONMYC2nsMZ3A1RpvqmGeJ7RgviW8Lt2dDVGj5Bqhd7lZyO
9LLjgoh1uHUhHmZlL5kvgU59mXdR92roOkxIAJ/0/UQbliMDjXtRx5/TtUHomu8j
MJH+WEpSQ02y
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:10:20 2025 by rpki-client