Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3232203d3e203238353834.roa
File: 3133312e37322e38302e302f32322d3232203d3e203238353834.roa (raw, json)
Hash identifier: 9jqVMr/oKpZiQcdS85n5q8wd3kCy/BID5xVgX4ZG8vQ=
Subject key identifier: 49:0B:0D:40:83:73:9E:AE:8A:09:D2:61:1A:3F:C3:31:A6:BB:0B:61
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 8883AF013AF14ED7487072AA0F5A7F9FA5B6FD
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3232203d3e203238353834.roa
Signing time: Tue 08 Apr 2025 16:22:11 +0000
ROA not before: Tue 08 Apr 2025 16:17:11 +0000
ROA not after: Tue 07 Apr 2026 16:22:11 +0000
asID: 28584
IP address blocks: 131.72.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
88:83:af:01:3a:f1:4e:d7:48:70:72:aa:0f:5a:7f:9f:a5:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Apr 8 16:17:11 2025 GMT
Not After : Apr 7 16:22:11 2026 GMT
Subject: CN=490B0D4083739EAE8A09D2611A3FC331A6BB0B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:9a:bf:9a:52:00:b6:39:d8:ed:c4:f0:7e:
7c:96:85:0e:aa:96:97:4a:80:07:d3:e0:55:fa:cf:
93:6e:9b:78:4f:69:df:a0:3c:4d:68:65:be:65:84:
08:5f:ad:fe:a2:9e:fb:03:17:e5:d6:03:62:85:86:
4b:2f:d6:ae:40:fc:9d:b0:be:d1:c7:c8:57:99:48:
28:c4:4f:dc:1f:33:10:1e:c4:9a:08:e5:92:a8:67:
b1:a5:33:0a:c1:55:51:4b:b7:d2:37:24:ab:0f:02:
93:ef:47:b1:a4:83:65:12:1e:68:bd:5e:6e:78:88:
4f:49:e0:f5:45:ef:1a:3a:ab:85:1a:ca:ec:f8:95:
3f:a6:50:48:d2:6a:33:52:d3:90:b4:1a:95:21:75:
c8:12:d4:fc:ef:e1:ff:23:6c:0b:18:1a:b6:0f:36:
1e:ca:24:c7:e4:ed:81:81:b0:13:3d:0c:25:bd:fb:
7b:ad:47:d3:69:c7:a9:11:e8:d4:f3:de:c7:ca:98:
30:05:14:e4:85:25:11:b3:b0:dc:88:7b:5c:e0:c9:
e4:1a:f5:5f:4b:a9:54:46:9e:45:a1:34:ee:ce:ef:
91:1a:e6:01:83:da:94:c0:d3:14:f4:90:28:1a:35:
2b:74:32:9f:3d:67:4e:b1:ec:11:4a:ee:9f:f1:0e:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:0D:40:83:73:9E:AE:8A:09:D2:61:1A:3F:C3:31:A6:BB:0B:61
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3232203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.80.0/22
Signature Algorithm: sha256WithRSAEncryption
87:aa:a9:14:ce:8b:cb:50:1b:d5:60:57:79:95:eb:71:1e:05:
32:2d:2e:72:b6:31:88:9c:ce:c6:dc:30:d6:59:8b:3d:51:c5:
fc:cb:13:14:e9:89:c6:cd:f7:4f:55:f6:5d:f3:68:18:bf:fb:
b3:e1:34:dc:dc:4a:44:43:42:20:d2:b0:80:b2:f6:0c:bf:71:
88:4d:1c:c4:92:40:2b:30:83:9d:87:dd:69:1f:cd:95:b6:ab:
ae:b8:9f:10:51:ba:3c:dd:04:0a:eb:f8:8a:66:3f:36:63:6a:
3c:22:59:2b:4b:43:64:20:28:55:5c:65:e6:c4:75:5e:a4:19:
85:fa:9d:9a:b1:a7:f1:a2:13:19:63:19:c0:cd:1a:81:25:31:
67:64:78:e6:3b:e1:f6:47:ac:4e:53:20:20:64:39:dd:d8:0c:
df:95:8d:90:8f:c0:10:e0:dc:41:6c:94:5d:3b:80:43:e4:c4:
30:62:b2:f4:c2:48:eb:9c:76:7c:6f:20:65:9b:03:f9:03:b1:
85:d5:36:c7:0e:b7:50:96:f7:ed:56:08:f6:4c:27:f9:e3:a5:
f7:46:ec:5d:a1:d5:23:a6:54:92:5c:23:3d:73:24:70:49:aa:
b9:57:92:6c:41:70:7e:56:c0:83:eb:01:ea:0b:bd:cf:26:51:
25:b1:22:70
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAIiDrwE68U7XSHByqg9af5+ltv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzMzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4
MzdEQzVFMzAeFw0yNTA0MDgxNjE3MTFaFw0yNjA0MDcxNjIyMTFaMDMxMTAvBgNV
BAMTKDQ5MEIwRDQwODM3MzlFQUU4QTA5RDI2MTFBM0ZDMzMxQTZCQjBCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLypq/mlIAtjnY7cTwfnyWhQ6q
lpdKgAfT4FX6z5Num3hPad+gPE1oZb5lhAhfrf6invsDF+XWA2KFhksv1q5A/J2w
vtHHyFeZSCjET9wfMxAexJoI5ZKoZ7GlMwrBVVFLt9I3JKsPApPvR7Gkg2USHmi9
Xm54iE9J4PVF7xo6q4Uayuz4lT+mUEjSajNS05C0GpUhdcgS1Pzv4f8jbAsYGrYP
Nh7KJMfk7YGBsBM9DCW9+3utR9Npx6kR6NTz3sfKmDAFFOSFJRGzsNyIe1zgyeQa
9V9LqVRGnkWhNO7O75Ea5gGD2pTA0xT0kCgaNSt0Mp89Z06x7BFK7p/xDh3rAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSQsNQINznq6KCdJhGj/DMaa7C2EwHwYDVR0j
BBgwFoAUEjOWHgVZ8jmu1PUENwh+9oN9xeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC8xMjMzOTYxRTA1NTlGMjM5QUVENEY1MDQzNzA4N0VGNjgzN0RDNUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMzM5NjFFMDU1OUYyMzlB
RUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzEzMzMxMmUzNzMyMmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODM1
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoNIUDANBgkqhkiG9w0BAQsFAAOCAQEAh6qpFM6Ly1Ab
1WBXeZXrcR4FMi0ucrYxiJzOxtww1lmLPVHF/MsTFOmJxs33T1X2XfNoGL/7s+E0
3NxKRENCINKwgLL2DL9xiE0cxJJAKzCDnYfdaR/NlbarrrifEFG6PN0ECuv4imY/
NmNqPCJZK0tDZCAoVVxl5sR1XqQZhfqdmrGn8aITGWMZwM0agSUxZ2R45jvh9kes
TlMgIGQ53dgM35WNkI/AEODcQWyUXTuAQ+TEMGKy9MJI65x2fG8gZZsD+QOxhdU2
xw63UJb37VYI9kwn+eOl90bsXaHVI6ZUklwjPXMkcEmquVeSbEFwflbAg+sB6gu9
zyZRJbEicA==
-----END CERTIFICATE-----
Generated at Mon Jun 23 04:49:35 2025 by rpki-client