Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
File: 34352e3233302e38352e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier: KneknHxp2U9XLYOfTALcSP44psOuxhgdPD/E9F0osSY=
Subject key identifier: 53:1A:EE:2B:00:55:BA:2A:0D:E0:63:64:0C:EA:4D:C5:EA:80:E2:34
Certificate issuer: /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial: 2B505FDE0A06FC16CF549E2798F81817BE34C02A
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
Signing time: Wed 03 Sep 2025 16:41:13 +0000
ROA not before: Wed 03 Sep 2025 16:36:13 +0000
ROA not after: Wed 02 Sep 2026 16:41:13 +0000
asID: 269359
IP address blocks: 45.230.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Sep 2025 20:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:50:5f:de:0a:06:fc:16:cf:54:9e:27:98:f8:18:17:be:34:c0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Validity
Not Before: Sep 3 16:36:13 2025 GMT
Not After : Sep 2 16:41:13 2026 GMT
Subject: CN=531AEE2B0055BA2A0DE063640CEA4DC5EA80E234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:ff:76:b8:10:7c:49:8c:cb:7e:ad:9e:55:
9d:a4:44:e2:d3:c0:85:9b:f3:a5:31:fe:50:3b:d6:
0a:8d:f4:9f:1a:f0:27:3e:99:93:2d:c5:7c:3e:7d:
7e:90:c6:32:95:cb:84:30:c0:06:8d:e7:51:c9:e8:
cd:c9:04:36:30:36:09:eb:c6:1a:fa:2a:94:c8:62:
13:d6:16:44:e9:27:47:08:ac:20:28:85:47:96:47:
e6:9d:b0:43:67:1f:44:46:2d:b6:f8:c7:94:7b:6a:
a8:ef:8d:31:21:74:28:d8:81:ce:c3:dd:ae:8b:b6:
80:28:bb:ba:73:38:e5:5a:ec:87:2c:b9:71:ac:41:
8a:8c:cc:88:43:6c:6a:56:64:57:5b:ab:41:9c:93:
c1:8c:bc:83:20:e6:e8:d1:f9:6f:f9:25:de:c0:7d:
ef:cd:2f:1f:f4:73:3a:fb:48:61:68:e4:8a:fb:b5:
fe:81:d4:28:92:15:e1:23:76:29:e4:5b:87:2f:ad:
5d:24:df:04:bb:36:91:94:dc:0a:bd:81:13:25:cd:
d5:5d:e8:31:3c:07:2b:16:09:fe:c7:ab:2b:33:ca:
a9:26:f2:05:fa:16:33:61:86:48:2d:87:bc:56:66:
9f:cf:c4:9f:b3:7f:3f:3a:ad:f4:40:fc:bb:a4:34:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:EE:2B:00:55:BA:2A:0D:E0:63:64:0C:EA:4D:C5:EA:80:E2:34
X509v3 Authority Key Identifier:
keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:82:1d:0d:78:75:27:a1:5f:8f:1c:23:76:4c:a3:9a:4c:2a:
d4:4b:8b:f0:9b:49:6d:33:75:07:4e:74:c2:de:a4:c5:b7:5e:
23:0c:f4:39:92:1c:08:75:8c:87:86:0f:32:90:e2:9c:ec:c3:
0b:05:af:3a:ec:94:70:2b:37:26:5d:22:9a:13:ed:a0:aa:aa:
0d:49:de:24:dc:b8:87:76:21:77:e8:61:8a:25:bd:14:64:86:
01:38:39:eb:7b:9a:15:72:60:0c:25:e6:24:26:19:09:17:94:
91:49:08:52:f0:77:8d:ec:fb:cb:37:50:6a:8d:39:f1:ab:f5:
d1:39:31:1f:bf:6b:75:54:fd:33:c2:a4:d9:4f:74:d3:cb:a9:
e7:1c:fb:9a:d9:e7:57:84:88:31:f3:b5:66:81:27:95:41:a1:
d7:10:e2:e6:09:46:6a:88:44:53:6c:96:84:47:22:0b:c6:cc:
77:36:a9:c2:8b:16:65:04:b2:15:ba:3a:c0:51:9c:f6:b7:1b:
0b:82:1f:5e:1c:cb:c6:32:f5:e2:2c:d5:d9:fa:8b:c8:75:a7:
44:ce:86:0c:92:48:c3:05:3b:2a:a8:fe:03:cd:97:86:98:d1:
d7:51:b4:3f:ff:8b:12:9d:a1:ab:a1:f1:39:16:0d:f7:9f:e5:
1a:09:cc:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK1Bf3goG/BbPVJ4nmPgYF740wCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4RTJBQTNFN0NDMTJCNzc2Mzg1MjhBNzBDMjM0NUYz
QURENjVENjAeFw0yNTA5MDMxNjM2MTNaFw0yNjA5MDIxNjQxMTNaMDMxMTAvBgNV
BAMTKDUzMUFFRTJCMDA1NUJBMkEwREUwNjM2NDBDRUE0REM1RUE4MEUyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoI/92uBB8SYzLfq2eVZ2kROLT
wIWb86Ux/lA71gqN9J8a8Cc+mZMtxXw+fX6QxjKVy4QwwAaN51HJ6M3JBDYwNgnr
xhr6KpTIYhPWFkTpJ0cIrCAohUeWR+adsENnH0RGLbb4x5R7aqjvjTEhdCjYgc7D
3a6LtoAou7pzOOVa7IcsuXGsQYqMzIhDbGpWZFdbq0Gck8GMvIMg5ujR+W/5Jd7A
fe/NLx/0czr7SGFo5Ir7tf6B1CiSFeEjdinkW4cvrV0k3wS7NpGU3Aq9gRMlzdVd
6DE8BysWCf7Hqyszyqkm8gX6FjNhhkgth7xWZp/PxJ+zfz86rfRA/LukNF7zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUxruKwBVuioN4GNkDOpNxeqA4jQwHwYDVR0j
BBgwFoAUg44qo+fMErd2OFKKcMI0XzrdZdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC84MzhFMkFBM0U3Q0MxMkI3NzYzODUyOEE3MEMyMzQ1RjNBREQ2NUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzOEUyQUEzRTdDQzEyQjc3
NjM4NTI4QTcwQzIzNDVGM0FERDY1RDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzQzNTJlMzIzMzMwMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeZVMA0GCSqGSIb3DQEBCwUAA4IBAQDLgh0NeHUn
oV+PHCN2TKOaTCrUS4vwm0ltM3UHTnTC3qTFt14jDPQ5khwIdYyHhg8ykOKc7MML
Ba867JRwKzcmXSKaE+2gqqoNSd4k3LiHdiF36GGKJb0UZIYBODnre5oVcmAMJeYk
JhkJF5SRSQhS8HeN7PvLN1BqjTnxq/XROTEfv2t1VP0zwqTZT3TTy6nnHPua2edX
hIgx87VmgSeVQaHXEOLmCUZqiERTbJaERyILxsx3NqnCixZlBLIVujrAUZz2txsL
gh9eHMvGMvXiLNXZ+ovIdadEzoYMkkjDBTsqqP4DzZeGmNHXUbQ//4sSnaGrofE5
Fg33n+UaCcwl
-----END CERTIFICATE-----
Generated at Fri Sep 19 22:54:39 2025 by rpki-client