Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32322d3232203d3e203532373538.roa
File: 3137372e33382e3138342e302f32322d3232203d3e203532373538.roa (raw, json)
Hash identifier: HQmeabXhzp82TPX2RKI+/0vWq957sGAGr0K32NsPcao=
Subject key identifier: 60:3E:1F:98:AE:21:9E:1A:69:F1:86:24:F4:B7:31:C5:8F:21:A3:98
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 54B895B5E63AB0B840264316F0FD031DA3BAF3E5
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32322d3232203d3e203532373538.roa
Signing time: Fri 07 Mar 2025 14:41:00 +0000
ROA not before: Fri 07 Mar 2025 14:36:00 +0000
ROA not after: Fri 06 Mar 2026 14:41:00 +0000
asID: 52758
IP address blocks: 177.38.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b8:95:b5:e6:3a:b0:b8:40:26:43:16:f0:fd:03:1d:a3:ba:f3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Mar 7 14:36:00 2025 GMT
Not After : Mar 6 14:41:00 2026 GMT
Subject: CN=603E1F98AE219E1A69F18624F4B731C58F21A398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:e1:c6:86:53:a7:51:74:de:74:eb:af:44:
30:e1:32:8f:81:00:e3:d7:3c:6f:09:11:75:a1:ee:
43:36:b5:5b:7b:a5:1c:4c:96:ae:88:b2:1c:c3:68:
7f:66:d5:e3:8d:ec:16:74:bc:5b:d7:f5:26:f5:d3:
99:a8:6a:cd:4f:0b:62:12:c9:3a:27:9b:a8:64:45:
d4:0d:5c:8a:26:17:25:80:17:28:25:0e:d0:1e:37:
e5:07:cc:23:76:66:a2:58:84:02:48:80:41:89:10:
ed:a7:f2:e3:9f:aa:79:f8:24:33:ae:d9:12:bc:2a:
d9:83:5f:83:7c:d2:30:cc:62:a6:23:08:b3:14:3d:
f4:fc:ca:1d:88:84:6a:4f:c8:37:a8:d3:b8:c8:88:
3b:85:09:dd:12:50:d9:30:bb:27:c4:4f:5c:2b:f9:
33:b3:5b:7f:41:b9:d4:47:ac:04:13:f4:fa:fd:92:
2b:50:66:b6:eb:02:92:bb:61:69:84:3c:5d:ca:53:
3d:09:3c:01:a7:7f:e5:b7:b3:52:fb:c8:e5:7b:dd:
23:43:fa:10:66:69:28:92:11:88:87:01:9a:41:e6:
40:7c:0e:cf:5f:8f:0b:7a:5b:df:95:3f:be:d8:8d:
f0:0b:cf:63:df:fe:f2:e5:c8:b2:41:46:48:7c:f6:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:1F:98:AE:21:9E:1A:69:F1:86:24:F4:B7:31:C5:8F:21:A3:98
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32322d3232203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:32:9f:4f:e1:d2:6f:da:94:10:ff:bc:fd:88:86:ae:56:11:
dd:c2:3a:76:88:b7:1e:ce:d5:c6:b2:e5:3c:7f:3c:63:06:d3:
ee:1c:4b:d3:11:b3:6e:5b:47:55:3e:8c:22:95:d0:c1:cf:0d:
e8:df:8c:9c:3c:e7:e1:84:5b:33:6f:16:5d:d5:de:b9:2c:49:
70:18:2b:59:01:54:51:49:69:1a:f5:ad:92:7a:76:f5:92:a2:
0f:71:f6:3a:29:4d:dc:40:58:fa:9a:fa:73:17:cc:5e:42:81:
6a:08:90:6d:2c:a1:8e:99:4f:a3:04:8e:e5:ea:e7:69:72:1b:
0f:e4:0a:a1:16:5c:7f:8f:f4:ac:55:eb:0b:b2:d8:ef:3e:d4:
f4:a1:4e:74:58:c7:42:f2:52:37:ef:59:0e:c3:56:17:a4:a2:
75:02:24:20:0e:10:0f:5b:54:59:2d:94:73:1d:38:4d:ea:e1:
a2:72:b9:77:16:7b:76:e2:33:6e:b8:17:40:09:e2:31:81:41:
35:99:44:26:6c:79:6f:f7:ed:6e:a2:f5:bc:d0:6d:7e:ba:5f:
99:5a:f3:3e:0f:1d:f9:37:65:3f:39:17:80:67:80:84:3e:01:
da:36:c4:d7:69:57:b0:f7:af:d2:c0:6d:fa:c3:13:00:aa:1a:
30:ea:77:f7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVLiVteY6sLhAJkMW8P0DHaO68+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNTAzMDcxNDM2MDBaFw0yNjAzMDYxNDQxMDBaMDMxMTAvBgNV
BAMTKDYwM0UxRjk4QUUyMTlFMUE2OUYxODYyNEY0QjczMUM1OEYyMUEzOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5+HGhlOnUXTedOuvRDDhMo+B
AOPXPG8JEXWh7kM2tVt7pRxMlq6IshzDaH9m1eON7BZ0vFvX9Sb105moas1PC2IS
yTonm6hkRdQNXIomFyWAFyglDtAeN+UHzCN2ZqJYhAJIgEGJEO2n8uOfqnn4JDOu
2RK8KtmDX4N80jDMYqYjCLMUPfT8yh2IhGpPyDeo07jIiDuFCd0SUNkwuyfET1wr
+TOzW39BudRHrAQT9Pr9kitQZrbrApK7YWmEPF3KUz0JPAGnf+W3s1L7yOV73SND
+hBmaSiSEYiHAZpB5kB8Ds9fjwt6W9+VP77YjfALz2Pf/vLlyLJBRkh89htvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYD4fmK4hnhpp8YYk9LcxxY8ho5gwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzEzNzM3MmUzMzM4MmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSa4MA0GCSqGSIb3DQEBCwUAA4IBAQAvMp9P4dJv
2pQQ/7z9iIauVhHdwjp2iLceztXGsuU8fzxjBtPuHEvTEbNuW0dVPowildDBzw3o
34ycPOfhhFszbxZd1d65LElwGCtZAVRRSWka9a2Senb1kqIPcfY6KU3cQFj6mvpz
F8xeQoFqCJBtLKGOmU+jBI7l6udpchsP5AqhFlx/j/SsVesLstjvPtT0oU50WMdC
8lI371kOw1YXpKJ1AiQgDhAPW1RZLZRzHThN6uGicrl3Fnt24jNuuBdACeIxgUE1
mUQmbHlv9+1uovW80G1+ul+ZWvM+Dx35N2U/OReAZ4CEPgHaNsTXaVew96/SwG36
wxMAqhow6nf3
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:30 2025 by rpki-client