Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
File: 323830343a3161343a3a2f33322d3333203d3e203238313430.roa (raw, json)
Hash identifier: 4etB1iRPUWdnBEktGWGIuwwZPYhuMyHZRQAtLXij7wY=
Subject key identifier: B2:BA:FB:4A:BD:AF:14:7E:53:6C:4D:6F:0C:32:AC:7E:42:08:5C:40
Certificate issuer: /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial: 349AD2C8A5A698E2DAD29471F7A96299273AFA89
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
Signing time: Wed 03 Apr 2024 20:51:00 +0000
ROA not before: Wed 03 Apr 2024 20:46:00 +0000
ROA not after: Wed 02 Apr 2025 20:51:00 +0000
asID: 28140
IP address blocks: 2804:1a4::/32 maxlen: 33
Validation: Failed, certificate revoked on Thu 01 Aug 2024 20:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9a:d2:c8:a5:a6:98:e2:da:d2:94:71:f7:a9:62:99:27:3a:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Validity
Not Before: Apr 3 20:46:00 2024 GMT
Not After : Apr 2 20:51:00 2025 GMT
Subject: CN=B2BAFB4ABDAF147E536C4D6F0C32AC7E42085C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:b7:8f:81:0a:19:20:23:d1:78:fb:b3:fd:
66:14:b5:62:cb:b8:a1:46:3f:40:91:6b:01:e0:3b:
60:72:28:32:44:46:98:ab:51:76:75:ca:0f:2e:5d:
69:8c:04:f0:8f:54:0c:ac:a9:7e:96:5f:4f:89:4c:
b2:d6:15:99:89:4c:e6:04:64:98:2c:24:5f:5b:36:
05:6d:7b:a3:b4:bb:79:38:f5:6a:4a:dc:e2:de:45:
df:19:bf:3f:e8:36:01:84:8e:2c:78:02:86:cb:bb:
3e:f5:52:cd:6b:7d:29:ad:2d:6b:57:91:0d:6a:d5:
00:d7:f8:00:a1:65:20:16:5a:b8:29:d5:bc:9e:57:
5a:51:8d:6c:36:83:bb:0c:b0:e5:4c:71:ab:35:d8:
2d:d8:b7:4a:9c:13:34:80:50:58:5e:ae:36:e3:cd:
b1:29:7b:68:dc:c1:3d:9f:c8:6c:69:c1:69:41:94:
55:65:fd:11:c6:b8:27:84:59:46:a6:f9:39:cd:54:
0b:83:e4:db:50:4e:84:97:a3:12:ce:91:23:49:1e:
56:5e:e0:16:5b:3a:df:fa:a5:6c:97:68:ca:ed:14:
2f:0f:d6:11:3f:c0:84:ef:57:1e:ac:a2:d8:42:a5:
af:01:12:cd:26:c8:81:07:73:7f:d4:cb:3f:e9:b4:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:FB:4A:BD:AF:14:7E:53:6C:4D:6F:0C:32:AC:7E:42:08:5C:40
X509v3 Authority Key Identifier:
keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d3333203d3e203238313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a4::/32
Signature Algorithm: sha256WithRSAEncryption
3d:bd:f4:c9:cf:45:de:7b:79:dc:f2:07:06:71:30:2a:14:03:
a2:0e:a4:c8:3f:76:65:c2:18:58:e0:97:68:04:30:a4:b8:3a:
14:24:22:e1:11:67:f4:a3:7d:3a:b6:6c:7c:99:d7:7e:78:4a:
04:e1:dd:25:a2:77:9b:10:a6:07:aa:e3:0f:9b:80:e4:36:78:
b2:22:68:36:b6:2f:53:b1:0c:87:7e:c6:1c:ea:68:3f:f9:f3:
4d:d4:a1:a6:17:f5:d9:c0:7b:9d:18:50:bc:9d:d9:d9:e7:c3:
b9:b1:16:1a:b2:31:6e:e9:cb:b2:e2:73:55:ee:45:c7:93:b4:
5e:14:d7:53:9e:3f:fd:1c:dc:cb:d8:ad:65:f7:ef:4b:c4:ba:
ba:88:1f:98:35:0d:9b:fa:3b:3c:10:9c:30:85:db:94:42:77:
b0:8b:d9:b6:67:04:c3:e2:a0:fe:72:1a:bf:ab:1b:19:f6:d6:
d1:08:0a:ef:db:87:c1:07:60:af:b1:e7:e9:3a:65:ed:a8:3a:
ee:e1:67:4b:2d:1e:1f:df:95:c9:a5:8a:cf:4d:d9:d5:6f:b1:
92:1d:15:2f:d5:6f:6d:85:81:e1:72:68:e3:d0:84:63:74:41:
54:b8:e6:50:c6:1c:85:08:6c:21:dc:a9:68:d4:9b:91:3c:4c:
6f:3f:56:0c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUNJrSyKWmmOLa0pRx96limSc6+okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5RjczNDQ4Njk0NjQ5QzRGOTg4RDk4QTBGMTI3NTdB
NjkxM0MyRDAeFw0yNDA0MDMyMDQ2MDBaFw0yNTA0MDIyMDUxMDBaMDMxMTAvBgNV
BAMTKEIyQkFGQjRBQkRBRjE0N0U1MzZDNEQ2RjBDMzJBQzdFNDIwODVDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJbePgQoZICPRePuz/WYUtWLL
uKFGP0CRawHgO2ByKDJERpirUXZ1yg8uXWmMBPCPVAysqX6WX0+JTLLWFZmJTOYE
ZJgsJF9bNgVte6O0u3k49WpK3OLeRd8Zvz/oNgGEjix4AobLuz71Us1rfSmtLWtX
kQ1q1QDX+AChZSAWWrgp1byeV1pRjWw2g7sMsOVMcas12C3Yt0qcEzSAUFherjbj
zbEpe2jcwT2fyGxpwWlBlFVl/RHGuCeEWUam+TnNVAuD5NtQToSXoxLOkSNJHlZe
4BZbOt/6pWyXaMrtFC8P1hE/wITvVx6sothCpa8BEs0myIEHc3/Uyz/ptFA7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUsrr7Sr2vFH5TbE1vDDKsfkIIXEAwHwYDVR0j
BBgwFoAUnZ9zRIaUZJxPmI2YoPEnV6aRPC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjhVd3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3
aUovMS85RDlGNzM0NDg2OTQ2NDlDNEY5ODhEOThBMEYxMjc1N0E2OTEzQzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEOUY3MzQ0ODY5NDY0OUM0
Rjk4OEQ5OEEwRjEyNzU3QTY5MTNDMkQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzEv
MzIzODMwMzQzYTMxNjEzNDNhM2EyZjMzMzIyZDMzMzMyMDNkM2UyMDMyMzgzMTM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAGkMA0GCSqGSIb3DQEBCwUAA4IBAQA9vfTJz0Xee3nc
8gcGcTAqFAOiDqTIP3ZlwhhY4JdoBDCkuDoUJCLhEWf0o306tmx8mdd+eEoE4d0l
onebEKYHquMPm4DkNniyImg2ti9TsQyHfsYc6mg/+fNN1KGmF/XZwHudGFC8ndnZ
58O5sRYasjFu6cuy4nNV7kXHk7ReFNdTnj/9HNzL2K1l9+9LxLq6iB+YNQ2b+js8
EJwwhduUQnewi9m2ZwTD4qD+chq/qxsZ9tbRCArv24fBB2CvsefpOmXtqDru4WdL
LR4f35XJpYrPTdnVb7GSHRUv1W9thYHhcmjj0IRjdEFUuOZQxhyFCGwh3Klo1JuR
PExvP1YM
-----END CERTIFICATE-----
Generated at Thu Aug 1 21:00:55 2024 by rpki-client on console-fra.rpki-client.org