Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa
File: 3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa (raw, json)
Hash identifier: wjFESsqMzZj99/x9hDwQuojYU6+kLkdKQm/dCUhCQ0U=
Subject key identifier: 81:5C:76:A1:7B:2F:2D:73:28:8C:13:37:B3:C9:6B:A2:73:F7:B1:00
Certificate issuer: /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial: 6A06BCF592F3D9E5E2C2FDBD022F9F91FA10EEB9
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa
Signing time: Fri 07 Mar 2025 14:41:01 +0000
ROA not before: Fri 07 Mar 2025 14:36:01 +0000
ROA not after: Fri 06 Mar 2026 14:41:01 +0000
asID: 52758
IP address blocks: 201.131.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:06:bc:f5:92:f3:d9:e5:e2:c2:fd:bd:02:2f:9f:91:fa:10:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Validity
Not Before: Mar 7 14:36:01 2025 GMT
Not After : Mar 6 14:41:01 2026 GMT
Subject: CN=815C76A17B2F2D73288C1337B3C96BA273F7B100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:64:f3:82:89:46:40:34:2c:a7:2e:32:1e:
13:76:46:3a:44:18:98:07:bc:70:0e:18:1c:e5:f9:
dc:1e:21:50:4c:bf:21:e1:e8:18:22:70:7f:20:ba:
22:65:a3:97:1e:66:f4:58:3a:0b:e4:70:d0:e6:c3:
ed:8e:dc:aa:66:eb:b6:e5:1d:7c:8e:25:7f:a5:ff:
97:ff:1f:ed:f1:70:90:3a:5e:d7:81:64:21:88:5a:
2f:9f:1a:2c:15:fe:7c:39:cb:ba:5a:a7:aa:72:bc:
47:be:9e:9a:dc:2c:49:a6:c5:ef:f9:7c:9b:49:bc:
a4:6a:41:e3:ea:72:43:a1:c5:c1:96:a8:39:8b:64:
d0:3e:c3:90:ea:61:ff:5a:35:1d:4a:63:e8:26:de:
c2:b3:9a:e8:b0:b9:b3:ed:43:24:bc:78:1a:cf:f4:
6d:3d:5b:03:1c:e1:bb:05:c4:7b:25:e5:63:e0:9b:
f9:35:25:1d:7f:bc:22:90:36:c3:c1:93:1e:6a:ba:
f5:8b:fe:d1:e2:71:35:02:f2:6b:48:9c:0f:d0:79:
31:c6:14:9a:e7:bb:ff:d3:40:f1:71:0a:60:0d:5e:
85:ba:ef:de:24:56:bb:fd:46:e7:75:b2:0a:b5:7c:
53:14:52:6a:9d:c4:8d:0c:aa:a8:01:3f:04:81:2d:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:76:A1:7B:2F:2D:73:28:8C:13:37:B3:C9:6B:A2:73:F7:B1:00
X509v3 Authority Key Identifier:
keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32322d3232203d3e203532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:e4:6e:d7:ef:3d:7d:e0:a8:3e:69:da:e8:da:5b:11:cb:82:
81:c8:d9:3b:36:a9:7b:a2:27:6d:37:f6:11:d7:50:93:f8:99:
93:4a:ca:88:2a:25:66:5d:79:29:8b:dd:d0:61:1c:d4:9b:e5:
61:05:52:e3:02:28:de:25:4f:f9:60:7e:b0:8d:68:cf:72:5e:
b6:4b:8e:6e:42:4b:b0:32:8f:8b:c7:aa:b8:70:bb:2e:6b:49:
04:9d:bf:d6:70:ae:75:45:6e:37:0a:96:cd:5b:98:28:e4:21:
52:b0:a0:43:ad:4b:ab:5e:90:bf:b0:98:d8:26:8b:32:bd:a0:
1a:ea:2d:aa:43:30:a7:2b:7f:4b:8f:b2:c3:eb:a0:d2:3a:fe:
6b:5e:f1:e7:9c:44:ea:43:9a:d2:53:f9:0e:24:63:1c:1d:a6:
10:58:dd:03:78:a3:06:97:f4:aa:36:2f:81:1c:57:5e:95:2c:
cc:b0:89:01:02:76:47:a9:36:f2:8d:8c:8a:61:3c:db:19:91:
0a:d6:ba:1b:2f:df:62:28:04:90:5a:2f:b3:61:a2:50:af:71:
b8:33:7e:f2:e9:50:31:de:6b:5b:3e:5f:3e:32:b4:e2:bb:84:
4d:b3:74:23:8b:b5:ce:cb:90:2d:a7:b0:82:b8:46:d8:a4:f1:
e8:78:7a:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaga89ZLz2eXiwv29Ai+fkfoQ7rkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNTAzMDcxNDM2MDFaFw0yNjAzMDYxNDQxMDFaMDMxMTAvBgNV
BAMTKDgxNUM3NkExN0IyRjJENzMyODhDMTMzN0IzQzk2QkEyNzNGN0IxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdImTzgolGQDQspy4yHhN2RjpE
GJgHvHAOGBzl+dweIVBMvyHh6BgicH8guiJlo5ceZvRYOgvkcNDmw+2O3Kpm67bl
HXyOJX+l/5f/H+3xcJA6XteBZCGIWi+fGiwV/nw5y7pap6pyvEe+nprcLEmmxe/5
fJtJvKRqQePqckOhxcGWqDmLZNA+w5DqYf9aNR1KY+gm3sKzmuiwubPtQyS8eBrP
9G09WwMc4bsFxHsl5WPgm/k1JR1/vCKQNsPBkx5quvWL/tHicTUC8mtInA/QeTHG
FJrnu//TQPFxCmANXoW6794kVrv9Rud1sgq1fFMUUmqdxI0MqqgBPwSBLU59AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgVx2oXsvLXMojBM3s8lronP3sQAwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJg/AwDQYJKoZIhvcNAQELBQADggEBAH7kbtfv
PX3gqD5p2ujaWxHLgoHI2Ts2qXuiJ2039hHXUJP4mZNKyogqJWZdeSmL3dBhHNSb
5WEFUuMCKN4lT/lgfrCNaM9yXrZLjm5CS7Ayj4vHqrhwuy5rSQSdv9ZwrnVFbjcK
ls1bmCjkIVKwoEOtS6tekL+wmNgmizK9oBrqLapDMKcrf0uPssProNI6/mte8eec
ROpDmtJT+Q4kYxwdphBY3QN4owaX9Ko2L4EcV16VLMywiQECdkepNvKNjIphPNsZ
kQrWuhsv32IoBJBaL7NholCvcbgzfvLpUDHea1s+Xz4ytOK7hE2zdCOLtc7LkC2n
sIK4Rtik8eh4eqU=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:26 2025 by rpki-client