Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e2035.roa
File: 3230312e34392e3233322e302f32322d3232203d3e2035.roa (raw, json)
Hash identifier: Th733cSpMhlr7V0fqeEJyFT1WG46K9gurxEXENo2n2k=
Subject key identifier: A3:E6:59:01:0F:D2:44:A9:3E:29:B9:67:5D:66:9B:78:D0:8C:BF:08
Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial: 791AC9E9F5C272DDC072F17C5E1BB8276902E16B
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e2035.roa
Signing time: Mon 13 Jan 2025 14:16:29 +0000
ROA not before: Mon 13 Jan 2025 14:11:29 +0000
ROA not after: Mon 12 Jan 2026 14:16:29 +0000
asID: 5
IP address blocks: 201.49.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 12 Feb 2025 12:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1a:c9:e9:f5:c2:72:dd:c0:72:f1:7c:5e:1b:b8:27:69:02:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Validity
Not Before: Jan 13 14:11:29 2025 GMT
Not After : Jan 12 14:16:29 2026 GMT
Subject: CN=A3E659010FD244A93E29B9675D669B78D08CBF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:94:61:6e:6d:0e:fd:83:7e:a3:a4:87:cf:
ab:78:c3:4e:b3:43:68:67:a1:74:3c:7a:7b:7f:00:
56:79:25:3f:b4:48:75:03:e0:31:1d:53:ef:6c:d2:
f2:97:ba:ff:fc:15:84:bc:31:c3:e8:29:99:26:92:
9c:64:50:a4:25:47:68:a2:1b:46:26:87:76:a7:7c:
ca:79:ec:91:e1:50:a9:e5:ce:de:59:a8:14:6e:a8:
e7:28:07:0d:80:00:10:ee:2a:87:e2:8a:5c:fd:01:
68:d9:cf:59:e6:41:a8:c2:99:c8:89:64:f0:e9:3d:
00:bf:50:db:9e:6c:18:2b:97:90:9e:f9:4a:ae:cd:
51:94:49:c4:37:e3:fe:01:38:61:f1:fa:be:24:52:
b2:75:c5:31:45:f3:32:aa:a2:f9:78:c1:b3:a4:34:
57:cb:a7:7a:5b:e7:12:5c:34:bc:c9:da:a8:54:d7:
77:86:73:ee:a3:55:72:22:eb:df:61:3b:c7:8a:89:
a4:0b:14:ff:2c:53:af:e0:54:32:04:63:bd:a3:6a:
2c:28:8d:b3:29:69:28:f1:f3:89:d6:c8:04:55:3c:
27:51:9a:ae:c0:45:ef:bd:61:dd:6f:7a:a7:38:e2:
69:e7:a4:d7:e3:ec:e6:06:a0:d4:80:61:a9:41:9a:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E6:59:01:0F:D2:44:A9:3E:29:B9:67:5D:66:9B:78:D0:8C:BF:08
X509v3 Authority Key Identifier:
keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3232203d3e2035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.232.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0e:1a:2d:77:f2:3b:26:55:f7:e1:d2:12:e8:23:ee:6e:be:
ee:4e:fc:a3:cc:da:06:35:52:17:6b:83:a2:17:7e:31:1d:f2:
b7:a5:58:f2:c1:1c:6a:20:59:9f:8e:cb:6b:f7:8a:05:d8:6d:
78:1e:c8:c9:a9:64:1c:fa:ab:de:25:d0:0b:2f:11:7a:02:6a:
84:9a:8e:56:ea:71:3d:8e:72:22:5e:19:7a:b9:8d:62:16:67:
20:4b:f5:7a:5a:3b:5f:16:45:ae:43:71:9e:48:a7:e6:f6:22:
98:89:e4:57:d2:f1:52:fb:89:59:ec:dd:6d:25:5f:e1:aa:5d:
a4:6b:8c:67:01:a8:56:d1:af:fc:97:6c:98:00:6c:8f:ac:38:
0b:8d:53:b5:d2:54:ac:6f:1d:d8:2e:e1:e7:eb:6f:ad:7c:90:
99:b1:5c:0f:6f:35:d3:d2:46:01:3c:9f:a8:ef:48:57:ba:ea:
62:6b:09:08:ac:79:da:dc:0f:0b:e2:dd:c1:a3:04:31:d2:25:
6a:6e:d1:45:a0:b7:e9:c6:67:16:8d:d0:db:f8:98:cc:52:a6:
7b:9d:40:25:9c:12:3a:38:16:b1:a7:74:56:c1:f6:ac:b3:16:
53:e7:88:71:fa:bd:57:cb:03:ba:cf:4c:10:87:c9:75:68:90:
d4:64:98:9a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUeRrJ6fXCct3AcvF8Xhu4J2kC4WswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTAxMTMxNDExMjlaFw0yNjAxMTIxNDE2MjlaMDMxMTAvBgNV
BAMTKEEzRTY1OTAxMEZEMjQ0QTkzRTI5Qjk2NzVENjY5Qjc4RDA4Q0JGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYJRhbm0O/YN+o6SHz6t4w06z
Q2hnoXQ8ent/AFZ5JT+0SHUD4DEdU+9s0vKXuv/8FYS8McPoKZkmkpxkUKQlR2ii
G0Ymh3anfMp57JHhUKnlzt5ZqBRuqOcoBw2AABDuKofiilz9AWjZz1nmQajCmciJ
ZPDpPQC/UNuebBgrl5Ce+UquzVGUScQ34/4BOGHx+r4kUrJ1xTFF8zKqovl4wbOk
NFfLp3pb5xJcNLzJ2qhU13eGc+6jVXIi699hO8eKiaQLFP8sU6/gVDIEY72jaiwo
jbMpaSjx84nWyARVPCdRmq7ARe+9Yd1veqc44mnnpNfj7OYGoNSAYalBmrXdAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUo+ZZAQ/SRKk+KblnXWabeNCMvwgwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAG
CCsGAQUFBzALhoGDcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAskx6DANBgkqhkiG9w0BAQsFAAOCAQEAgw4aLXfyOyZV9+HSEugj7m6+
7k78o8zaBjVSF2uDohd+MR3yt6VY8sEcaiBZn47La/eKBdhteB7IyalkHPqr3iXQ
Cy8RegJqhJqOVupxPY5yIl4ZermNYhZnIEv1elo7XxZFrkNxnkin5vYimInkV9Lx
UvuJWezdbSVf4apdpGuMZwGoVtGv/JdsmABsj6w4C41TtdJUrG8d2C7h5+tvrXyQ
mbFcD28109JGATyfqO9IV7rqYmsJCKx52twPC+LdwaMEMdIlam7RRaC36cZnFo3Q
2/iYzFKme51AJZwSOjgWsad0VsH2rLMWU+eIcfq9V8sDus9MEIfJdWiQ1GSYmg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:33:49 2025 by rpki-client