Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3232203d3e20323632373733.roa
File: 34352e3232382e3134342e302f32322d3232203d3e20323632373733.roa (raw, json)
Hash identifier: 5MR7kKJzttHg+PbVLwUArLA7LvohCSQysN11NTTnJXM=
Subject key identifier: EB:4A:B3:17:7B:CD:DA:6E:50:D1:6F:E4:E8:2E:11:24:89:2F:45:DA
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 525BB259B82E409DC8DECE718D41CF06EA37AE36
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3232203d3e20323632373733.roa
Signing time: Wed 14 Aug 2024 12:08:23 +0000
ROA not before: Wed 14 Aug 2024 12:03:23 +0000
ROA not after: Wed 13 Aug 2025 12:08:23 +0000
asID: 262773
IP address blocks: 45.228.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 09 Sep 2024 14:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5b:b2:59:b8:2e:40:9d:c8:de:ce:71:8d:41:cf:06:ea:37:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: Aug 14 12:03:23 2024 GMT
Not After : Aug 13 12:08:23 2025 GMT
Subject: CN=EB4AB3177BCDDA6E50D16FE4E82E1124892F45DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:7a:d0:9d:4e:d5:97:ea:da:1a:a7:27:2d:
57:30:05:cb:82:d2:76:5e:3b:c6:65:37:a5:d7:2f:
85:2c:c0:48:d9:c6:f7:b5:71:19:50:2b:d8:fc:2e:
38:db:56:42:cc:7c:ad:ac:86:5e:bb:ac:25:f1:4b:
c8:cf:b1:49:1a:8f:63:f1:cd:b9:98:a0:59:2a:ac:
b9:34:d1:4a:7a:27:22:b1:a6:d1:1b:f4:11:81:2b:
14:89:51:af:c0:44:4f:85:b4:0b:d1:bf:12:4d:92:
04:dd:15:b9:c7:b4:cb:65:2d:56:63:5e:f1:8b:ce:
f9:a0:96:fc:76:6d:21:3d:98:22:91:e5:e4:44:16:
36:46:fd:b1:24:3f:70:99:21:eb:f9:bb:41:b3:e5:
12:0f:b5:30:0a:a5:e9:0c:91:91:e9:ca:62:d3:8f:
49:80:20:54:97:c2:b4:b6:84:6e:e7:25:f5:f3:c7:
31:d0:be:40:7b:82:5f:c6:1c:dc:af:f5:b4:81:79:
d4:0c:b3:92:1d:bb:5c:2e:4f:fd:08:b8:e6:6a:1b:
a9:34:fc:5b:a7:c0:49:ca:39:7b:d3:37:f0:79:b9:
04:56:9f:db:14:13:aa:05:f2:6e:64:ff:01:6c:aa:
ed:05:07:37:10:b9:cb:66:dd:78:85:05:bf:18:0e:
af:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4A:B3:17:7B:CD:DA:6E:50:D1:6F:E4:E8:2E:11:24:89:2F:45:DA
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/34352e3232382e3134342e302f32322d3232203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:24:a4:0f:09:a0:bf:cc:1c:1a:6a:37:5b:54:c9:4e:db:13:
f0:2e:4e:ea:cc:d9:7a:49:b5:62:55:a5:8e:f9:11:71:98:cb:
a8:23:4b:7c:16:df:43:55:00:20:ac:93:73:40:b1:9e:a5:45:
a4:45:92:fb:20:f0:5c:5d:56:23:ce:6d:bc:39:51:05:b2:89:
a7:cc:db:08:71:7f:46:3d:22:25:3a:7b:bb:b9:26:7b:c9:b4:
2a:ce:68:7d:21:8e:ad:b8:ac:20:82:98:30:7e:89:3c:d3:70:
79:af:15:f1:60:73:3d:5d:b1:03:9a:9d:7b:5c:82:82:df:79:
89:f7:66:4f:b3:48:ad:2e:6a:49:07:1c:2b:c7:97:d1:71:0d:
14:f4:65:63:b7:2f:d3:29:a8:d3:b6:03:68:f9:fe:0c:36:29:
51:40:05:d2:33:b4:04:4c:2a:c5:2e:34:f1:83:27:c5:67:30:
49:dc:2b:8a:8f:4a:1b:b7:40:32:f8:b1:af:de:29:12:1d:b6:
ec:2c:cc:ca:7d:e0:34:31:68:85:1c:02:67:07:27:c4:b7:4f:
af:03:d6:ae:53:74:8c:58:7d:a0:a7:f1:0d:d7:55:85:44:d5:
fc:38:ff:1b:17:6a:5e:75:47:9c:04:69:2c:52:fd:03:8b:22:
23:41:b6:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUluyWbguQJ3I3s5xjUHPBuo3rjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA4MTQxMjAzMjNaFw0yNTA4MTMxMjA4MjNaMDMxMTAvBgNV
BAMTKEVCNEFCMzE3N0JDRERBNkU1MEQxNkZFNEU4MkUxMTI0ODkyRjQ1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ3rQnU7Vl+raGqcnLVcwBcuC
0nZeO8ZlN6XXL4UswEjZxve1cRlQK9j8LjjbVkLMfK2shl67rCXxS8jPsUkaj2Px
zbmYoFkqrLk00Up6JyKxptEb9BGBKxSJUa/ARE+FtAvRvxJNkgTdFbnHtMtlLVZj
XvGLzvmglvx2bSE9mCKR5eREFjZG/bEkP3CZIev5u0Gz5RIPtTAKpekMkZHpymLT
j0mAIFSXwrS2hG7nJfXzxzHQvkB7gl/GHNyv9bSBedQMs5Idu1wuT/0IuOZqG6k0
/FunwEnKOXvTN/B5uQRWn9sUE6oF8m5k/wFsqu0FBzcQuctm3XiFBb8YDq9fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU60qzF3vN2m5Q0W/k6C4RJIkvRdowHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzQzNTJlMzIzMjM4MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5JAwDQYJKoZIhvcNAQELBQADggEBAH0kpA8J
oL/MHBpqN1tUyU7bE/AuTurM2XpJtWJVpY75EXGYy6gjS3wW30NVACCsk3NAsZ6l
RaRFkvsg8FxdViPObbw5UQWyiafM2whxf0Y9IiU6e7u5JnvJtCrOaH0hjq24rCCC
mDB+iTzTcHmvFfFgcz1dsQOanXtcgoLfeYn3Zk+zSK0uakkHHCvHl9FxDRT0ZWO3
L9MpqNO2A2j5/gw2KVFABdIztARMKsUuNPGDJ8VnMEncK4qPShu3QDL4sa/eKRId
tuwszMp94DQxaIUcAmcHJ8S3T68D1q5TdIxYfaCn8Q3XVYVE1fw4/xsXal51R5wE
aSxS/QOLIiNBtns=
-----END CERTIFICATE-----
Generated at Mon Sep 9 16:31:37 2024 by rpki-client on console-fra.rpki-client.org