Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa
File: 3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier: f2q3lTF+APlRRR93aEsxrduT2GP1NpRIYagfZGJmhjs=
Subject key identifier: 05:BA:F1:6E:6E:7D:F3:63:E5:6A:B6:46:A6:CC:51:C9:6B:E2:72:55
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 3FDBD94E10D49C80B2D138B9A9F60D45DE09F544
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa
Signing time: Thu 12 Dec 2024 13:54:16 +0000
ROA not before: Thu 12 Dec 2024 13:49:16 +0000
ROA not after: Thu 11 Dec 2025 13:54:16 +0000
asID: 264886
IP address blocks: 201.49.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 14:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:db:d9:4e:10:d4:9c:80:b2:d1:38:b9:a9:f6:0d:45:de:09:f5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Dec 12 13:49:16 2024 GMT
Not After : Dec 11 13:54:16 2025 GMT
Subject: CN=05BAF16E6E7DF363E56AB646A6CC51C96BE27255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:a6:40:7f:7c:bb:1e:82:d1:86:e4:c6:33:
79:3e:4c:67:1b:bb:9a:6c:7e:ed:40:cd:2d:7e:05:
a9:33:8b:3c:09:86:28:9d:ce:78:bb:c5:16:8e:0a:
74:8e:0c:94:fe:64:1e:90:f0:9e:39:26:31:e0:0e:
4b:19:d9:f7:fb:30:e7:a8:87:05:4e:da:aa:b2:b6:
e5:22:36:97:ba:ae:a0:ac:ad:6c:b7:1f:e3:21:45:
14:9d:d8:ed:92:e5:2e:a6:3e:c3:00:9a:ef:34:c2:
a6:98:ec:db:36:d4:ab:91:9a:dd:eb:3a:3d:a9:20:
0a:41:58:e3:49:ce:1d:09:d8:b3:7c:93:28:0e:43:
ad:82:4c:a4:61:56:39:f2:f8:33:ef:dd:bb:ab:bf:
bf:0d:59:8c:65:ce:a7:dc:9a:33:4e:8f:88:57:16:
2e:83:bb:be:af:09:56:9e:8e:92:4d:c1:10:4f:59:
b0:56:79:0e:59:9c:d5:b4:da:e4:81:bc:1f:5d:4d:
9b:bc:3d:2d:c6:3f:43:91:26:15:72:7c:52:93:f2:
31:80:0e:dc:1c:b1:4f:b8:e7:d9:31:c9:8f:3a:3c:
77:cd:4d:1b:82:c7:34:2d:1c:b6:f9:2e:24:eb:30:
bf:b2:de:0c:ad:3c:10:70:f7:a7:9c:8a:cb:fe:81:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:F1:6E:6E:7D:F3:63:E5:6A:B6:46:A6:CC:51:C9:6B:E2:72:55
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.231.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7c:88:66:55:74:f4:15:23:6e:b4:29:e3:1c:c4:c9:b0:3c:
de:0b:26:69:f7:dd:f4:db:6e:b9:d2:9e:86:35:a2:f2:34:85:
d9:0f:d1:0b:7b:1a:30:8f:b1:c1:7c:10:89:34:68:fc:5c:88:
f7:d5:20:a9:a6:4e:c8:f7:53:cf:87:61:08:ed:97:f6:48:26:
37:31:15:e3:9e:2a:de:74:73:b3:fd:43:80:8b:61:90:31:f5:
7f:a3:b9:59:ae:f5:6a:60:02:36:c7:a2:59:eb:6c:cd:64:41:
9c:c2:64:ac:cf:38:b8:83:b0:da:11:2b:09:86:62:c2:51:c2:
a3:20:9d:7e:d5:46:26:5d:30:bc:cd:75:1f:fb:d2:4a:d0:19:
8e:29:94:02:98:0d:fe:d0:06:1b:fd:1b:ac:c3:ec:9e:09:2f:
ec:7d:cd:89:67:dd:98:12:d8:02:2e:48:3b:5c:59:e8:51:67:
93:2a:19:46:31:d7:65:79:a6:5b:42:cf:e4:8e:ce:f9:00:6f:
26:93:8d:3b:23:4d:ae:94:d5:59:3a:e6:9f:03:60:82:01:59:
6c:16:c8:c9:2b:73:22:25:56:ec:12:8f:bc:c4:59:81:78:74:
88:7f:5d:03:ab:d9:08:55:3f:97:3b:86:74:ce:e8:39:3a:cb:
1e:68:3c:05
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUP9vZThDUnICy0Ti5qfYNRd4J9UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNDEyMTIxMzQ5MTZaFw0yNTEyMTExMzU0MTZaMDMxMTAvBgNV
BAMTKDA1QkFGMTZFNkU3REYzNjNFNTZBQjY0NkE2Q0M1MUM5NkJFMjcyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNKZAf3y7HoLRhuTGM3k+TGcb
u5psfu1AzS1+BakzizwJhiidzni7xRaOCnSODJT+ZB6Q8J45JjHgDksZ2ff7MOeo
hwVO2qqytuUiNpe6rqCsrWy3H+MhRRSd2O2S5S6mPsMAmu80wqaY7Ns21KuRmt3r
Oj2pIApBWONJzh0J2LN8kygOQ62CTKRhVjny+DPv3burv78NWYxlzqfcmjNOj4hX
Fi6Du76vCVaejpJNwRBPWbBWeQ5ZnNW02uSBvB9dTZu8PS3GP0ORJhVyfFKT8jGA
DtwcsU+459kxyY86PHfNTRuCxzQtHLb5LiTrML+y3gytPBBw96ecisv+gZPvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUBbrxbm5982PlarZGpsxRyWviclUwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADJMecwDQYJKoZIhvcNAQELBQADggEBAFZ8iGZVdPQV
I260KeMcxMmwPN4LJmn33fTbbrnSnoY1ovI0hdkP0Qt7GjCPscF8EIk0aPxciPfV
IKmmTsj3U8+HYQjtl/ZIJjcxFeOeKt50c7P9Q4CLYZAx9X+juVmu9WpgAjbHolnr
bM1kQZzCZKzPOLiDsNoRKwmGYsJRwqMgnX7VRiZdMLzNdR/70krQGY4plAKYDf7Q
Bhv9G6zD7J4JL+x9zYln3ZgS2AIuSDtcWehRZ5MqGUYx12V5pltCz+SOzvkAbyaT
jTsjTa6U1Vk65p8DYIIBWWwWyMkrcyIlVuwSj7zEWYF4dIh/XQOr2QhVP5c7hnTO
6Dk6yx5oPAU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:58 2025 by rpki-client