Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
File: 323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier: 5bmlcKh3CP7BIpCGpMiZwG+U7IBkzhGtkWDOOWXsQLY=
Subject key identifier: 5A:F7:D0:69:14:4B:30:82:22:67:B5:8E:5A:A9:7D:04:28:19:87:D1
Certificate issuer: /CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Certificate serial: 38CAB78DF47A7470C21601DDD77314D152226D6B
Authority key identifier: 82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
Signing time: Thu 04 Apr 2024 15:10:32 +0000
ROA not before: Thu 04 Apr 2024 15:05:32 +0000
ROA not after: Thu 03 Apr 2025 15:10:32 +0000
asID: 263026
IP address blocks: 2804:a28:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Thu 06 Jun 2024 04:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ca:b7:8d:f4:7a:74:70:c2:16:01:dd:d7:73:14:d1:52:22:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821AC0BDAABCCE21B27B6CE051E84B3B40DBA348
Validity
Not Before: Apr 4 15:05:32 2024 GMT
Not After : Apr 3 15:10:32 2025 GMT
Subject: CN=5AF7D069144B30822267B58E5AA97D04281987D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:36:82:49:14:f7:2b:9e:95:a2:9b:f4:33:
c9:44:7a:06:7e:e1:48:1e:c3:9e:96:95:c8:1b:f0:
1d:e3:49:d0:1e:7c:65:58:78:f0:a7:e4:53:e7:c3:
90:8a:2b:0d:3d:77:e8:9c:78:6f:45:e9:b8:7a:83:
5f:8f:af:e7:22:61:d8:aa:12:ee:b2:0f:a5:27:89:
5a:5b:3e:09:48:0c:b2:bb:26:18:9b:57:61:f3:cd:
76:6a:e6:a6:b3:2e:df:d1:fa:83:3e:bd:cf:70:2d:
f1:b0:9a:69:91:ff:98:69:e7:f1:34:65:4b:87:6b:
e9:ea:9a:1e:6c:25:3a:ae:5a:af:5e:75:7d:d9:2a:
9a:4f:70:3a:a7:d9:11:58:27:a5:a2:1e:cd:07:38:
da:2f:00:50:48:d9:0c:4e:f9:b9:1c:cf:61:7d:bc:
58:4e:c7:3d:47:89:e6:14:94:af:ea:f8:bf:16:b2:
d8:64:44:bb:95:4f:e5:02:13:cb:ed:d2:f6:0e:89:
db:a0:13:cb:af:97:13:ee:fd:bf:63:e2:9b:5f:8a:
f2:7e:c5:77:5e:dc:42:47:ab:9c:1b:d0:01:61:23:
99:d0:58:ae:ed:d1:b2:e6:b7:4f:c6:fd:53:ee:c3:
0b:ee:9b:65:ae:b8:68:2f:b3:ec:87:bd:6e:33:e1:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:D0:69:14:4B:30:82:22:67:B5:8E:5A:A9:7D:04:28:19:87:D1
X509v3 Authority Key Identifier:
keyid:82:1A:C0:BD:AA:BC:CE:21:B2:7B:6C:E0:51:E8:4B:3B:40:DB:A3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/821AC0BDAABCCE21B27B6CE051E84B3B40DBA348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/1/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a28:c000::/34
Signature Algorithm: sha256WithRSAEncryption
a7:26:d7:bf:c0:74:c7:f1:01:08:17:c9:ae:44:8c:7f:e1:6e:
98:48:e8:aa:e4:b9:45:8a:a8:c6:80:f1:3a:1c:8b:1a:af:ac:
f0:1b:df:d3:e5:bd:b5:98:82:78:7e:4c:a3:73:49:3a:f9:81:
0f:54:b8:63:8f:bb:35:71:fe:ce:d7:78:fa:b7:1d:67:46:fc:
9a:c9:95:6c:b6:e0:13:a6:c7:be:81:1d:fe:14:87:ab:d3:4f:
c7:4b:01:98:d2:54:d8:d2:d6:2e:a3:7a:cd:af:ac:e6:92:3f:
8e:d0:7e:f9:54:09:b1:c5:5d:3c:b9:c6:77:c9:03:16:09:49:
f9:5d:7f:d7:ff:3a:c5:57:ea:22:ff:3b:d8:9a:b6:33:62:03:
32:dd:74:b5:c0:58:89:b8:e8:43:2b:cf:a1:8a:46:01:9d:5f:
7b:d0:c7:84:52:28:1d:87:23:34:a6:f5:15:fc:cc:ce:98:08:
c6:cc:f8:3f:5e:1d:4e:a1:78:5e:80:2e:da:f4:f7:fa:1c:97:
05:d1:67:6b:57:16:28:82:da:6f:aa:4e:4a:9e:81:35:84:fe:
ff:5e:e3:c0:c6:cc:e6:8c:e8:64:d3:c4:17:d3:ca:0f:27:fa:
34:9b:49:64:81:55:c2:b8:c7:53:14:22:5d:2f:45:54:19:5f:
93:9a:89:fd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUOMq3jfR6dHDCFgHd13MU0VIibWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0
MERCQTM0ODAeFw0yNDA0MDQxNTA1MzJaFw0yNTA0MDMxNTEwMzJaMDMxMTAvBgNV
BAMTKDVBRjdEMDY5MTQ0QjMwODIyMjY3QjU4RTVBQTk3RDA0MjgxOTg3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUDaCSRT3K56Vopv0M8lEegZ+
4Ugew56Wlcgb8B3jSdAefGVYePCn5FPnw5CKKw09d+iceG9F6bh6g1+Pr+ciYdiq
Eu6yD6UniVpbPglIDLK7JhibV2HzzXZq5qazLt/R+oM+vc9wLfGwmmmR/5hp5/E0
ZUuHa+nqmh5sJTquWq9edX3ZKppPcDqn2RFYJ6WiHs0HONovAFBI2QxO+bkcz2F9
vFhOxz1HieYUlK/q+L8WsthkRLuVT+UCE8vt0vYOidugE8uvlxPu/b9j4ptfivJ+
xXde3EJHq5wb0AFhI5nQWK7t0bLmt0/G/VPuwwvum2WuuGgvs+yHvW4z4RyrAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUWvfQaRRLMIIiZ7WOWql9BCgZh9EwHwYDVR0j
BBgwFoAUghrAvaq8ziGye2zgUehLO0Dbo0gwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzEvODIxQUMwQkRBQUJDQ0UyMUIyN0I2Q0UwNTFFODRCM0I0MERCQTM0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MjFBQzBCREFBQkNDRTIxQjI3
QjZDRTA1MUU4NEIzQjQwREJBMzQ4LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzEvMzIz
ODMwMzQzYTYxMzIzODNhNjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAz
MjM2MzMzMDMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAoowDANBgkqhkiG9w0BAQsFAAOCAQEA
pybXv8B0x/EBCBfJrkSMf+FumEjoquS5RYqoxoDxOhyLGq+s8Bvf0+W9tZiCeH5M
o3NJOvmBD1S4Y4+7NXH+ztd4+rcdZ0b8msmVbLbgE6bHvoEd/hSHq9NPx0sBmNJU
2NLWLqN6za+s5pI/jtB++VQJscVdPLnGd8kDFglJ+V1/1/86xVfqIv872Jq2M2ID
Mt10tcBYibjoQyvPoYpGAZ1fe9DHhFIoHYcjNKb1FfzMzpgIxsz4P14dTqF4XoAu
2vT3+hyXBdFna1cWKILab6pOSp6BNYT+/17jwMbM5ozoZNPEF9PKDyf6NJtJZIFV
wrjHUxQiXS9FVBlfk5qJ/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org