Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32342d3332203d3e20323731323936.roa
File: 3139322e3134352e3232302e302f32342d3332203d3e20323731323936.roa (raw, json)
Hash identifier: 1/xIghvU9ozdKZES5UPi89Gb1Q4aQMRPCjbXgyUlp8Y=
Subject key identifier: 08:56:2E:A3:86:04:5B:E0:D9:3F:8A:2A:57:52:1B:81:B0:1E:7C:07
Certificate issuer: /CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Certificate serial: 2CA509ABA0132000CC08D5C6D6D27AFAC41E30E7
Authority key identifier: 29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32342d3332203d3e20323731323936.roa
Signing time: Fri 16 Aug 2024 15:08:50 +0000
ROA not before: Fri 16 Aug 2024 15:03:50 +0000
ROA not after: Fri 15 Aug 2025 15:08:50 +0000
asID: 271296
IP address blocks: 192.145.220.0/24 maxlen: 32
Validation: Failed, certificate revoked on Sat 17 Aug 2024 00:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a5:09:ab:a0:13:20:00:cc:08:d5:c6:d6:d2:7a:fa:c4:1e:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Validity
Not Before: Aug 16 15:03:50 2024 GMT
Not After : Aug 15 15:08:50 2025 GMT
Subject: CN=08562EA386045BE0D93F8A2A57521B81B01E7C07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:2f:e8:8a:2a:af:45:41:a8:69:93:9f:bb:
71:8b:0c:8c:21:cb:29:d4:04:c4:89:ef:59:3b:0b:
f0:7b:2c:d9:5b:40:82:50:57:73:ea:af:a3:3f:be:
6d:77:df:e9:74:5b:7e:05:56:93:97:57:3d:31:64:
79:e4:19:54:6e:ab:63:0a:bf:90:1d:bc:7d:be:fa:
15:e5:92:19:a9:0f:e0:f8:23:b1:f9:18:97:53:7f:
f6:14:c7:f3:52:8c:82:3c:d2:0e:f7:00:b6:02:e9:
b1:a6:9f:1c:9b:59:f2:c8:5b:94:a3:cf:26:1c:1a:
14:a6:5b:b3:b2:24:77:9a:9d:d0:f6:3e:98:02:3e:
e0:5c:3d:69:bf:94:da:ad:e0:84:c9:10:bd:cd:f9:
b2:f6:da:d1:50:3b:b2:3f:e2:3c:28:34:20:cf:4a:
72:9c:3c:77:62:3c:bc:d6:dc:f2:c2:23:b1:3e:ea:
19:a8:43:86:37:16:e6:19:03:d8:67:b0:e2:46:b5:
eb:fd:04:53:69:15:c2:2f:9a:39:53:f2:ec:11:28:
8f:be:46:db:01:22:e2:4e:02:f0:23:8c:98:ff:c5:
cb:a2:65:47:6f:2d:9a:58:ad:24:bc:8b:ca:8f:a0:
3d:92:93:2e:12:97:1a:c3:23:0a:05:51:46:ee:f3:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:2E:A3:86:04:5B:E0:D9:3F:8A:2A:57:52:1B:81:B0:1E:7C:07
X509v3 Authority Key Identifier:
keyid:29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32342d3332203d3e20323731323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.220.0/24
Signature Algorithm: sha256WithRSAEncryption
57:90:7d:ee:36:f5:6d:80:a5:00:ab:e3:9e:21:a0:ab:44:52:
08:7c:28:e9:0e:9f:75:b5:98:6d:77:b0:16:1b:59:44:5a:11:
5f:09:02:9f:2d:ef:ee:6f:5a:29:98:c4:2d:53:61:67:19:5b:
22:e3:43:1d:4a:59:0d:4a:47:68:d5:db:ff:f3:ce:75:e6:c2:
1d:5c:68:27:87:d8:fd:fb:aa:c2:47:ef:7b:f3:1b:a1:34:f1:
ef:9c:a2:ee:e2:7d:e5:82:e1:4c:49:b2:e2:e0:10:62:5f:6d:
44:85:6e:4a:fd:59:b0:be:5c:f4:6c:9c:02:c5:ab:30:d4:8a:
a5:ae:8f:f2:42:b1:ef:cb:0e:7a:63:01:b1:88:6c:30:1b:30:
d5:17:9e:b2:a1:cd:64:24:84:11:4b:9c:04:d0:95:bc:0c:27:
22:d2:b7:26:8f:82:a6:c9:95:fa:d0:a0:06:5c:b5:63:8f:38:
bb:49:6c:8d:ab:f7:e0:dd:c3:30:cc:a9:43:bb:20:ad:ad:d0:
69:0d:7d:ed:39:33:b6:b8:fe:19:23:bb:99:b3:28:75:14:31:
98:46:2a:cf:33:ef:22:82:08:4e:00:98:21:3c:86:7e:69:d0:
ba:33:06:78:e2:0c:f6:df:4c:f8:e4:57:c6:a4:b4:31:46:45:
03:e1:46:1e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULKUJq6ATIADMCNXG1tJ6+sQeMOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlFMEMxQzZCRUY0N0I5QUNBMkFGMTNCOEFDOEY3NEZF
NEQ0QTI1ODAeFw0yNDA4MTYxNTAzNTBaFw0yNTA4MTUxNTA4NTBaMDMxMTAvBgNV
BAMTKDA4NTYyRUEzODYwNDVCRTBEOTNGOEEyQTU3NTIxQjgxQjAxRTdDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJS/oiiqvRUGoaZOfu3GLDIwh
yynUBMSJ71k7C/B7LNlbQIJQV3Pqr6M/vm133+l0W34FVpOXVz0xZHnkGVRuq2MK
v5AdvH2++hXlkhmpD+D4I7H5GJdTf/YUx/NSjII80g73ALYC6bGmnxybWfLIW5Sj
zyYcGhSmW7OyJHeandD2PpgCPuBcPWm/lNqt4ITJEL3N+bL22tFQO7I/4jwoNCDP
SnKcPHdiPLzW3PLCI7E+6hmoQ4Y3FuYZA9hnsOJGtev9BFNpFcIvmjlT8uwRKI++
RtsBIuJOAvAjjJj/xcuiZUdvLZpYrSS8i8qPoD2Sky4SlxrDIwoFUUbu84oBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCFYuo4YEW+DZP4oqV1IbgbAefAcwHwYDVR0j
BBgwFoAUKeDBxr70e5rKKvE7isj3T+TUolgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3gyNzZZOHNXa045WkVyWWcxSHRzWm9jbkx3bVZnS3ROa1IxV3EyUzht
OW8vMC8yOUUwQzFDNkJFRjQ3QjlBQ0EyQUYxM0I4QUM4Rjc0RkU0RDRBMjU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RTBDMUM2QkVGNDdCOUFD
QTJBRjEzQjhBQzhGNzRGRTRENEEyNTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4Mjc2WThzV2tOOVpFcllnMUh0c1pvY25Md21WZ0t0TmtSMVdxMlM4bTlvLzAv
MzEzOTMyMmUzMTM0MzUyZTMyMzIzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzczMTMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCR3DANBgkqhkiG9w0BAQsFAAOCAQEAV5B9
7jb1bYClAKvjniGgq0RSCHwo6Q6fdbWYbXewFhtZRFoRXwkCny3v7m9aKZjELVNh
ZxlbIuNDHUpZDUpHaNXb//POdebCHVxoJ4fY/fuqwkfve/MboTTx75yi7uJ95YLh
TEmy4uAQYl9tRIVuSv1ZsL5c9GycAsWrMNSKpa6P8kKx78sOemMBsYhsMBsw1Ree
sqHNZCSEEUucBNCVvAwnItK3Jo+CpsmV+tCgBly1Y484u0lsjav34N3DMMypQ7sg
ra3QaQ197Tkztrj+GSO7mbModRQxmEYqzzPvIoIITgCYITyGfmnQujMGeOIM9t9M
+ORXxqS0MUZFA+FGHg==
-----END CERTIFICATE-----
Generated at Sat Aug 17 02:54:54 2024 by rpki-client on console-fra.rpki-client.org