Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3232203d3e203238363035.roa
File: 3137392e3132372e3131322e302f32322d3232203d3e203238363035.roa (raw, json)
Hash identifier: amP100GY0YnVetIiBzbR/i/k4qnlYcZio6yqbz9aIF0=
Subject key identifier: 08:96:65:19:28:DD:2B:29:F2:5C:07:BF:9E:45:B6:CC:83:D9:87:90
Certificate issuer: /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial: 0C5ED013669E7EEBC3A13432A9F057D8C0BAC1CA
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3232203d3e203238363035.roa
Signing time: Tue 08 Apr 2025 16:19:50 +0000
ROA not before: Tue 08 Apr 2025 16:14:50 +0000
ROA not after: Tue 07 Apr 2026 16:19:50 +0000
asID: 28605
IP address blocks: 179.127.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 19:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:5e:d0:13:66:9e:7e:eb:c3:a1:34:32:a9:f0:57:d8:c0:ba:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Validity
Not Before: Apr 8 16:14:50 2025 GMT
Not After : Apr 7 16:19:50 2026 GMT
Subject: CN=0896651928DD2B29F25C07BF9E45B6CC83D98790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:e6:51:68:96:c7:1f:4c:75:c4:36:58:f1:
78:3a:e0:5e:0d:09:88:de:b6:0a:a0:b7:de:64:45:
bb:f7:01:95:c5:2f:e5:8a:7e:be:e9:f3:65:3c:2d:
90:27:47:60:d8:03:11:6f:5f:91:a8:0e:a6:c4:2a:
93:ff:78:22:4f:99:53:02:33:10:be:4a:d6:af:4c:
ba:77:44:8f:de:bb:5c:76:4c:18:38:c0:8b:bc:56:
8a:bf:e3:48:c4:95:95:6f:8b:87:04:f7:0b:09:2f:
58:bb:b6:d8:04:0c:9a:30:ec:c6:87:9e:d2:be:35:
eb:77:ce:72:77:22:9c:2d:3f:7f:ae:d3:60:6c:bd:
e4:a1:ab:d0:6c:a5:7e:6d:06:fa:a5:00:a0:d9:fc:
d3:f9:de:36:7c:59:d4:e5:36:6e:f4:6d:03:cd:e7:
63:62:1a:7b:8c:b2:67:00:a7:66:de:d9:c7:80:8c:
50:76:fc:f0:f1:a1:f2:0b:e5:3a:90:49:7d:66:eb:
af:5d:8c:62:99:e5:a3:c9:f1:44:02:65:f8:0a:6f:
af:dc:65:5d:c3:e3:0c:c0:70:0f:fe:6c:07:b3:e9:
72:0d:48:dc:dc:a6:65:68:5b:61:c5:13:f3:0b:30:
62:fb:eb:ea:7d:48:d4:94:ce:13:a1:bb:87:2d:6c:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:65:19:28:DD:2B:29:F2:5C:07:BF:9E:45:B6:CC:83:D9:87:90
X509v3 Authority Key Identifier:
keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3232203d3e203238363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.127.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:a5:6e:ed:db:97:ff:29:80:c6:39:7a:28:2d:2f:d9:d3:83:
e2:e5:3e:fa:1d:13:0e:b1:73:ae:56:ac:d1:64:c6:fc:25:cc:
86:f2:78:77:c8:46:7f:90:95:00:e9:ff:8b:e4:cb:c8:50:8d:
42:7f:40:fb:8b:68:03:f5:b6:26:8b:f8:44:5e:6a:80:ca:f4:
1b:f7:bb:85:90:db:14:81:51:dd:3c:ea:91:19:87:12:25:f0:
8f:a4:1d:1b:40:e2:2c:92:92:77:99:72:1e:fc:3f:22:ce:bd:
20:d4:8e:87:a5:21:ec:e6:6d:a0:52:28:2d:b3:dd:72:68:b8:
40:e5:5d:07:3b:40:6d:66:15:26:76:3e:eb:4d:01:7a:d4:6c:
42:00:78:83:17:b6:69:e9:f3:ec:27:6e:2c:24:f9:3e:c3:e7:
15:02:72:71:f4:08:76:17:83:0c:1c:d7:a7:22:7d:12:19:fb:
47:d4:20:81:c4:34:d4:e1:1d:6b:13:eb:89:8b:3a:89:e1:ae:
8c:20:c3:9d:dc:30:39:83:6a:c8:22:73:fa:44:16:d7:30:dd:
71:c8:f7:f1:a5:85:8f:2e:cf:df:43:66:95:35:e5:3f:28:89:
86:cf:45:5e:c5:3a:17:32:6a:a6:d8:15:71:a1:35:37:d3:35:
8e:6a:31:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDF7QE2aefuvDoTQyqfBX2MC6wcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE5N0Q5QUI3RUIwQjRBMzdBNjg3REY0ODI0M0E4NkY2
RkVENTk2RDAeFw0yNTA0MDgxNjE0NTBaFw0yNjA0MDcxNjE5NTBaMDMxMTAvBgNV
BAMTKDA4OTY2NTE5MjhERDJCMjlGMjVDMDdCRjlFNDVCNkNDODNEOTg3OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClS+ZRaJbHH0x1xDZY8Xg64F4N
CYjetgqgt95kRbv3AZXFL+WKfr7p82U8LZAnR2DYAxFvX5GoDqbEKpP/eCJPmVMC
MxC+StavTLp3RI/eu1x2TBg4wIu8Voq/40jElZVvi4cE9wsJL1i7ttgEDJow7MaH
ntK+Net3znJ3IpwtP3+u02BsveShq9BspX5tBvqlAKDZ/NP53jZ8WdTlNm70bQPN
52NiGnuMsmcAp2be2ceAjFB2/PDxofIL5TqQSX1m669djGKZ5aPJ8UQCZfgKb6/c
ZV3D4wzAcA/+bAez6XINSNzcpmVoW2HFE/MLMGL76+p9SNSUzhOhu4ctbCzVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCJZlGSjdKynyXAe/nkW2zIPZh5AwHwYDVR0j
BBgwFoAUWpfZq36wtKN6aH30gkOob2/tWW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5OHdVNWk1Y005N0hoaTZVb2JQbWNiZE1IZVhlM0VXeUF2NFAxbVpI
eVMvMC81QTk3RDlBQjdFQjBCNEEzN0E2ODdERjQ4MjQzQTg2RjZGRUQ1OTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBOTdEOUFCN0VCMEI0QTM3
QTY4N0RGNDgyNDNBODZGNkZFRDU5NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOTh3VTVpNWNNOTdIaGk2VW9iUG1jYmRNSGVYZTNFV3lBdjRQMW1aSHlTLzAv
MzEzNzM5MmUzMTMyMzcyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzf3AwDQYJKoZIhvcNAQELBQADggEBAD6lbu3b
l/8pgMY5eigtL9nTg+LlPvodEw6xc65WrNFkxvwlzIbyeHfIRn+QlQDp/4vky8hQ
jUJ/QPuLaAP1tiaL+EReaoDK9Bv3u4WQ2xSBUd086pEZhxIl8I+kHRtA4iySkneZ
ch78PyLOvSDUjoelIezmbaBSKC2z3XJouEDlXQc7QG1mFSZ2PutNAXrUbEIAeIMX
tmnp8+wnbiwk+T7D5xUCcnH0CHYXgwwc16cifRIZ+0fUIIHENNThHWsT64mLOonh
rowgw53cMDmDasgic/pEFtcw3XHI9/GlhY8uz99DZpU15T8oiYbPRV7FOhcyaqbY
FXGhNTfTNY5qMVU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:05:34 2025 by rpki-client