Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32342d3234203d3e20323639333539.roa
File: 3136382e3139342e3235302e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: tabUg8vo4XJMnt9Vb19AagYHXmTfjVZxsuOO6XEbnc4=
Subject key identifier: 45:4A:3A:52:81:03:AF:B3:CE:37:62:1E:94:F9:A0:9B:9B:C6:28:F8
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 32671BA6B0A0E84E373623BAB66472A6503F30FB
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:41:13 +0000
ROA not before: Wed 03 Sep 2025 16:36:13 +0000
ROA not after: Wed 02 Sep 2026 16:41:13 +0000
asID: 269359
IP address blocks: 168.194.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:67:1b:a6:b0:a0:e8:4e:37:36:23:ba:b6:64:72:a6:50:3f:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:36:13 2025 GMT
Not After : Sep 2 16:41:13 2026 GMT
Subject: CN=454A3A528103AFB3CE37621E94F9A09B9BC628F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:d3:1a:14:af:b9:61:63:75:bb:f9:fc:c4:
12:30:9b:17:e3:25:61:dc:b0:15:d8:9f:a1:fa:10:
17:12:59:f0:63:86:3e:96:f7:c9:d3:76:21:b9:d8:
2f:a3:b6:33:f2:de:ae:30:d5:7b:42:be:d1:c6:2a:
da:f8:13:06:7b:88:02:8d:70:75:be:93:34:49:82:
ff:0b:75:6c:98:c0:01:61:b9:1a:86:d1:50:0f:74:
83:52:ad:50:53:39:25:31:ff:be:77:e7:32:65:9d:
b0:e7:bb:0a:93:37:55:53:c9:a7:46:ae:2c:64:1a:
2b:8a:0f:5b:4e:63:da:cd:8f:6b:7e:0b:0e:5a:3f:
48:16:47:cf:08:6d:08:44:62:98:63:f2:30:01:78:
25:d1:5a:1f:3d:04:20:a8:0f:c3:66:b7:0c:5e:49:
37:85:d8:9b:7a:03:eb:58:11:54:f6:6f:e9:f5:4d:
39:b4:ad:c3:aa:36:c7:a3:07:9c:d2:db:25:66:03:
f2:61:bc:f8:61:7c:1e:23:6c:fd:4f:66:12:88:82:
5e:9b:66:f4:6f:fa:3e:8c:47:38:48:23:55:bc:36:
79:6d:21:bd:df:8b:30:9d:ff:47:3f:69:0f:d4:b2:
e6:1c:cb:af:ae:6e:f2:22:78:21:e8:2e:4b:57:2e:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4A:3A:52:81:03:AF:B3:CE:37:62:1E:94:F9:A0:9B:9B:C6:28:F8
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:23:cc:ed:6c:3b:f3:17:f7:7e:ac:4a:ea:77:39:8b:18:5b:
85:28:d9:c8:ea:7d:c4:5a:15:09:31:18:bc:4d:10:de:3e:9c:
63:df:ad:47:33:36:c6:f6:60:43:c8:6d:06:0b:c0:18:a5:58:
0e:9b:7b:4e:6f:38:a4:f6:c0:8e:99:ed:ea:40:23:12:61:bd:
7e:db:2c:43:3a:62:14:79:76:3f:d7:8f:4e:21:de:d7:19:77:
75:a2:54:8f:62:e5:1f:17:45:e4:47:02:3e:5e:1b:53:05:d3:
5f:d6:4c:0f:39:ee:99:a9:6b:4c:11:15:92:9d:ec:0a:7c:e5:
b0:13:67:69:3e:77:05:9a:b3:8d:66:fc:54:72:a4:54:38:ae:
f0:56:a3:1a:fc:84:59:7d:aa:f4:8e:6c:22:a5:be:d1:bc:ab:
83:b2:4d:df:46:44:11:bc:fb:71:8d:b0:e6:85:23:bd:59:96:
e8:7c:32:de:63:d6:11:f9:32:da:f8:d3:6e:b1:76:ef:d0:fd:
72:91:5d:6e:9a:e7:9c:ae:68:e6:f3:38:a4:fb:f5:96:96:19:
89:7a:8a:a3:20:c1:ca:ae:7a:db:bd:75:90:b8:98:e3:29:cb:
33:fb:7e:73:59:14:af:de:c5:6f:4e:d3:4c:99:4f:51:5d:1b:
95:fe:59:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMmcbprCg6E43NiO6tmRyplA/MPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4RTJBQTNFN0NDMTJCNzc2Mzg1MjhBNzBDMjM0NUYz
QURENjVENjAeFw0yNTA5MDMxNjM2MTNaFw0yNjA5MDIxNjQxMTNaMDMxMTAvBgNV
BAMTKDQ1NEEzQTUyODEwM0FGQjNDRTM3NjIxRTk0RjlBMDlCOUJDNjI4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolNMaFK+5YWN1u/n8xBIwmxfj
JWHcsBXYn6H6EBcSWfBjhj6W98nTdiG52C+jtjPy3q4w1XtCvtHGKtr4EwZ7iAKN
cHW+kzRJgv8LdWyYwAFhuRqG0VAPdINSrVBTOSUx/7535zJlnbDnuwqTN1VTyadG
rixkGiuKD1tOY9rNj2t+Cw5aP0gWR88IbQhEYphj8jABeCXRWh89BCCoD8Nmtwxe
STeF2Jt6A+tYEVT2b+n1TTm0rcOqNsejB5zS2yVmA/JhvPhhfB4jbP1PZhKIgl6b
ZvRv+j6MRzhII1W8NnltIb3fizCd/0c/aQ/UsuYcy6+ubvIieCHoLktXLuQPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURUo6UoEDr7PON2IelPmgm5vGKPgwHwYDVR0j
BBgwFoAUg44qo+fMErd2OFKKcMI0XzrdZdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC84MzhFMkFBM0U3Q0MxMkI3NzYzODUyOEE3MEMyMzQ1RjNBREQ2NUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzOEUyQUEzRTdDQzEyQjc3
NjM4NTI4QTcwQzIzNDVGM0FERDY1RDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzOTMzMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjC+jANBgkqhkiG9w0BAQsFAAOCAQEAWiPM
7Ww78xf3fqxK6nc5ixhbhSjZyOp9xFoVCTEYvE0Q3j6cY9+tRzM2xvZgQ8htBgvA
GKVYDpt7Tm84pPbAjpnt6kAjEmG9ftssQzpiFHl2P9ePTiHe1xl3daJUj2LlHxdF
5EcCPl4bUwXTX9ZMDznumalrTBEVkp3sCnzlsBNnaT53BZqzjWb8VHKkVDiu8Faj
GvyEWX2q9I5sIqW+0byrg7JN30ZEEbz7cY2w5oUjvVmW6Hwy3mPWEfky2vjTbrF2
79D9cpFdbprnnK5o5vM4pPv1lpYZiXqKoyDByq562711kLiY4ynLM/t+c1kUr97F
b07TTJlPUV0blf5ZNQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 22:52:59 2025 by rpki-client