Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32322d3232203d3e203131393231.roa
File: 3230302e3233332e37322e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier: FIJDf3ugw4KtstYBMDMcDfdXeySmam8QzeJ40HwjPq8=
Subject key identifier: F4:06:3A:F1:1D:5A:3D:CC:3A:B6:77:23:81:14:D0:71:21:88:F0:F3
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 495F6AFF7F139FCA3A2B37E127ADCFD2776AEE39
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32322d3232203d3e203131393231.roa
Signing time: Tue 06 Aug 2024 21:38:09 +0000
ROA not before: Tue 06 Aug 2024 21:33:09 +0000
ROA not after: Tue 05 Aug 2025 21:38:09 +0000
asID: 11921
IP address blocks: 200.233.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5f:6a:ff:7f:13:9f:ca:3a:2b:37:e1:27:ad:cf:d2:77:6a:ee:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Aug 6 21:33:09 2024 GMT
Not After : Aug 5 21:38:09 2025 GMT
Subject: CN=F4063AF11D5A3DCC3AB677238114D0712188F0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:ce:1f:23:e6:f9:42:b3:41:4d:b0:8c:97:
d6:f3:3f:f8:77:2a:c5:2a:84:cb:aa:fb:b1:88:ce:
70:cc:23:c5:fc:d9:34:cd:1f:71:6b:c4:c7:30:21:
fa:b4:64:79:13:61:3f:66:35:b6:31:5e:a2:aa:32:
ff:c0:c8:a1:bf:ea:c2:c2:43:ae:c5:ee:a0:8a:72:
33:62:52:a7:86:c2:18:b9:d4:aa:c6:e8:70:a3:9c:
ad:55:c8:94:5a:45:fa:c9:9e:7a:e7:0b:fb:eb:33:
dc:60:c6:40:9a:a7:17:a5:67:c7:d9:43:cc:cc:c2:
b3:da:96:34:34:84:02:73:b9:0b:ed:23:58:b1:b4:
ad:db:da:88:d7:49:f1:89:18:ea:f5:b5:41:44:55:
cb:61:ed:92:d8:98:c7:32:0a:68:b8:45:f3:89:9d:
f8:df:e9:c2:e7:fe:b0:2f:bc:f6:38:3b:a0:cc:a2:
e2:2c:0f:a4:a3:99:70:db:c9:e2:6e:9d:34:1a:5e:
53:71:7f:d6:ba:41:68:10:46:dd:c0:a4:ad:bd:73:
14:69:7b:9c:f1:23:cb:ad:ef:c5:a2:f3:22:f5:19:
70:00:42:c0:78:fd:0c:d7:62:40:6a:6d:25:54:a0:
9b:44:a3:1c:71:d4:6a:08:59:0d:8b:6a:53:0a:75:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:3A:F1:1D:5A:3D:CC:3A:B6:77:23:81:14:D0:71:21:88:F0:F3
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37322e302f32322d3232203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.233.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:df:fd:d6:ae:53:fb:67:12:a2:b5:36:d8:27:1a:e8:eb:f8:
a2:15:d9:26:d9:69:d0:15:7c:1a:f5:b5:14:49:5a:11:bb:8a:
5a:a0:1a:c5:9b:e2:e4:e9:29:44:2e:92:a1:b2:df:1e:8b:4d:
70:7d:cf:be:ce:99:af:8e:a5:4e:6b:e3:16:f4:53:22:e5:9e:
7d:a6:be:45:e1:cd:b0:d3:94:b7:3a:8e:45:58:92:57:59:b7:
4f:24:31:02:4a:15:dd:9b:11:1f:8a:62:96:fa:2f:94:37:63:
d7:f9:ed:2f:80:82:8d:72:04:3a:35:e2:8c:67:0d:59:55:5d:
1e:6e:5f:ce:11:36:ea:78:9f:23:f5:dc:e4:7b:74:dc:2f:a8:
ea:4f:ec:d2:83:82:30:a0:4f:83:62:c6:f3:8b:de:12:e1:23:
a6:8f:2e:a7:93:fd:15:b5:be:d3:b1:7a:47:e1:ee:4d:0e:1e:
13:f6:09:f7:9b:61:d7:c6:6e:9d:77:46:a8:aa:57:7f:e5:6b:
6a:b2:4a:56:b4:43:35:af:ef:2f:d3:7e:a6:d2:da:dd:42:95:
b4:fe:38:80:a6:e3:b7:51:25:32:e1:03:7d:c3:5f:5c:d9:e6:
79:8f:31:d7:be:ca:fb:21:36:bc:d4:04:84:50:30:6e:1b:93:
d8:1b:e3:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSV9q/38Tn8o6KzfhJ63P0ndq7jkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA4MDYyMTMzMDlaFw0yNTA4MDUyMTM4MDlaMDMxMTAvBgNV
BAMTKEY0MDYzQUYxMUQ1QTNEQ0MzQUI2NzcyMzgxMTREMDcxMjE4OEYwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2c4fI+b5QrNBTbCMl9bzP/h3
KsUqhMuq+7GIznDMI8X82TTNH3FrxMcwIfq0ZHkTYT9mNbYxXqKqMv/AyKG/6sLC
Q67F7qCKcjNiUqeGwhi51KrG6HCjnK1VyJRaRfrJnnrnC/vrM9xgxkCapxelZ8fZ
Q8zMwrPaljQ0hAJzuQvtI1ixtK3b2ojXSfGJGOr1tUFEVcth7ZLYmMcyCmi4RfOJ
nfjf6cLn/rAvvPY4O6DMouIsD6SjmXDbyeJunTQaXlNxf9a6QWgQRt3ApK29cxRp
e5zxI8ut78Wi8yL1GXAAQsB4/QzXYkBqbSVUoJtEoxxx1GoIWQ2LalMKdRE3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9AY68R1aPcw6tncjgRTQcSGI8PMwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMjMzMzMyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyOlIMA0GCSqGSIb3DQEBCwUAA4IBAQBr3/3WrlP7
ZxKitTbYJxro6/iiFdkm2WnQFXwa9bUUSVoRu4paoBrFm+Lk6SlELpKhst8ei01w
fc++zpmvjqVOa+MW9FMi5Z59pr5F4c2w05S3Oo5FWJJXWbdPJDECShXdmxEfimKW
+i+UN2PX+e0vgIKNcgQ6NeKMZw1ZVV0ebl/OETbqeJ8j9dzke3TcL6jqT+zSg4Iw
oE+DYsbzi94S4SOmjy6nk/0Vtb7TsXpH4e5NDh4T9gn3m2HXxm6dd0aoqld/5Wtq
skpWtEM1r+8v036m0trdQpW0/jiApuO3USUy4QN9w19c2eZ5jzHXvsr7ITa81ASE
UDBuG5PYG+NH
-----END CERTIFICATE-----
Generated at Sat Aug 17 22:34:07 2024 by rpki-client on console-ams.rpki-client.org