Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa
File: 3230302e3233332e37362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier: FvGsAoKrflIHvUG4tvlX30wOJZ0BOfxQjgrfut9zdf4=
Subject key identifier: A1:9F:E7:AA:42:F9:4F:1A:A3:E3:28:62:48:7B:11:2F:D2:B6:77:C2
Certificate issuer: /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial: 2C4FD437302C7FFC2EA9430DBEC0B9D2E490C344
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa
Signing time: Tue 06 Aug 2024 21:38:04 +0000
ROA not before: Tue 06 Aug 2024 21:33:04 +0000
ROA not after: Tue 05 Aug 2025 21:38:04 +0000
asID: 11921
IP address blocks: 200.233.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 17 Aug 2024 21:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4f:d4:37:30:2c:7f:fc:2e:a9:43:0d:be:c0:b9:d2:e4:90:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Validity
Not Before: Aug 6 21:33:04 2024 GMT
Not After : Aug 5 21:38:04 2025 GMT
Subject: CN=A19FE7AA42F94F1AA3E32862487B112FD2B677C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:98:59:90:f8:ad:0a:b4:fd:0d:5e:84:32:
d0:f6:e6:82:26:87:e1:1a:43:85:f5:9b:4c:77:05:
2e:a3:a1:ca:d8:35:fc:ce:65:7d:bb:51:b0:77:da:
fa:b6:43:fc:ed:15:fb:33:16:82:e6:fd:fc:37:bd:
b7:46:e7:29:f2:bb:78:32:5e:1c:dd:fb:86:21:06:
d7:4b:93:19:09:07:ef:3c:9d:f9:9b:a0:fd:1b:6b:
0b:b5:5f:e6:c6:e2:d1:a3:44:d1:3e:eb:b7:a7:c6:
77:9e:1d:82:a3:1b:22:f5:25:88:8c:2c:bb:e1:cc:
6e:35:18:cd:d7:cc:90:6b:80:d6:cc:b5:19:77:c9:
af:9e:32:76:93:6a:43:72:ff:85:68:c6:80:77:d6:
28:fa:12:0d:d3:dc:e5:51:99:94:f9:25:85:dc:ec:
4c:2f:48:50:21:e0:9f:6a:89:10:fd:71:21:35:6e:
75:4e:ec:27:81:62:11:c3:16:aa:83:b8:f9:e9:2b:
4a:12:fe:1f:c2:54:96:3e:dd:93:e0:e1:08:83:06:
3b:22:0f:e2:c8:6e:f2:11:d6:ae:42:13:49:b0:de:
8b:99:bb:0a:a2:c2:84:f8:5a:49:c1:8c:14:e2:8b:
1f:8e:bf:a5:c7:3f:5c:8a:7a:e0:b9:fc:84:17:5d:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9F:E7:AA:42:F9:4F:1A:A3:E3:28:62:48:7B:11:2F:D2:B6:77:C2
X509v3 Authority Key Identifier:
keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.233.76.0/22
Signature Algorithm: sha256WithRSAEncryption
04:27:7a:10:38:98:3f:5f:8b:67:9d:0d:a1:14:87:74:09:9d:
2c:d8:cf:5d:0f:04:1d:8b:52:98:c4:d4:74:11:27:cb:05:5e:
db:90:24:5d:f9:0c:13:64:24:cf:cf:28:9e:c2:85:10:0e:8e:
75:f3:75:7f:16:cc:20:c0:b1:aa:ed:6b:2a:1d:ef:5a:7c:b6:
b9:dc:f0:74:1f:5d:fd:33:6d:a9:0e:1b:ae:8e:8c:22:88:b4:
3e:a3:aa:56:12:a2:be:b4:68:6f:5b:26:ef:86:a0:24:5e:ee:
79:0e:08:a4:dc:2a:d5:94:98:aa:bc:df:4b:d5:2d:92:36:19:
9b:3f:6a:94:0a:cc:d9:f6:02:bc:02:02:5d:2a:8e:c0:29:45:
f8:57:04:55:21:5d:c8:06:47:b7:08:42:60:62:6f:83:b1:0b:
94:22:16:3d:3c:99:8f:cd:55:78:10:2e:c6:83:d1:22:df:f7:
c5:ea:13:14:56:26:1e:9c:6d:80:d6:3e:0e:ef:65:e1:35:fc:
da:11:a7:fc:58:09:76:99:13:1c:d8:a8:57:09:f4:4b:f3:ba:
15:9d:aa:7e:01:2b:37:e5:57:7c:c1:81:95:f5:98:66:3c:32:
5d:5f:3e:b4:b1:a0:73:e5:81:cb:ce:43:e0:71:86:1f:21:4b:
81:83:4e:f6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULE/UNzAsf/wuqUMNvsC50uSQw0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA4MDYyMTMzMDRaFw0yNTA4MDUyMTM4MDRaMDMxMTAvBgNV
BAMTKEExOUZFN0FBNDJGOTRGMUFBM0UzMjg2MjQ4N0IxMTJGRDJCNjc3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiJhZkPitCrT9DV6EMtD25oIm
h+EaQ4X1m0x3BS6jocrYNfzOZX27UbB32vq2Q/ztFfszFoLm/fw3vbdG5ynyu3gy
Xhzd+4YhBtdLkxkJB+88nfmboP0bawu1X+bG4tGjRNE+67enxneeHYKjGyL1JYiM
LLvhzG41GM3XzJBrgNbMtRl3ya+eMnaTakNy/4VoxoB31ij6Eg3T3OVRmZT5JYXc
7EwvSFAh4J9qiRD9cSE1bnVO7CeBYhHDFqqDuPnpK0oS/h/CVJY+3ZPg4QiDBjsi
D+LIbvIR1q5CE0mw3ouZuwqiwoT4WknBjBTiix+Ov6XHP1yKeuC5/IQXXRpBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoZ/nqkL5Txqj4yhiSHsRL9K2d8IwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMjMzMzMyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyOlMMA0GCSqGSIb3DQEBCwUAA4IBAQAEJ3oQOJg/
X4tnnQ2hFId0CZ0s2M9dDwQdi1KYxNR0ESfLBV7bkCRd+QwTZCTPzyiewoUQDo51
83V/FswgwLGq7WsqHe9afLa53PB0H139M22pDhuujowiiLQ+o6pWEqK+tGhvWybv
hqAkXu55Dgik3CrVlJiqvN9L1S2SNhmbP2qUCszZ9gK8AgJdKo7AKUX4VwRVIV3I
Bke3CEJgYm+DsQuUIhY9PJmPzVV4EC7Gg9Ei3/fF6hMUViYenG2A1j4O72XhNfza
Eaf8WAl2mRMc2KhXCfRL87oVnap+ASs35Vd8wYGV9ZhmPDJdXz60saBz5YHLzkPg
cYYfIUuBg072
-----END CERTIFICATE-----
Generated at Sat Aug 17 22:52:08 2024 by rpki-client on console-fra.rpki-client.org