Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d313238203d3e20323638373930.roa
File: 323830343a356162343a3a2f33322d313238203d3e20323638373930.roa (raw, json)
Hash identifier: YjdfQ7DnBpKAqyZOsHRAW49y5My39CHR0HPQoKsAlas=
Subject key identifier: BC:A4:DF:C4:1E:C6:B8:5F:9F:FB:A3:FB:8C:2D:74:01:F6:69:CA:75
Certificate issuer: /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial: 44AB544966555DEE6D1437A683A6F7BAC7CB0EB7
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d313238203d3e20323638373930.roa
Signing time: Tue 15 Apr 2025 20:16:45 +0000
ROA not before: Tue 15 Apr 2025 20:11:45 +0000
ROA not after: Tue 14 Apr 2026 20:16:45 +0000
asID: 268790
IP address blocks: 2804:5ab4::/32 maxlen: 128
Validation: Failed, certificate revoked on Tue 14 Apr 2026 20:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ab:54:49:66:55:5d:ee:6d:14:37:a6:83:a6:f7:ba:c7:cb:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Validity
Not Before: Apr 15 20:11:45 2025 GMT
Not After : Apr 14 20:16:45 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:53:88:da:b1:b6:52:18:b8:89:83:6f:db:
03:64:ac:d4:bf:8b:22:96:fd:47:f1:89:be:06:54:
6f:76:59:6a:5b:91:ec:d3:eb:51:c0:5d:c5:d3:89:
77:23:01:93:2c:83:4e:1b:2a:00:b7:e8:34:c4:54:
20:bb:91:1c:6e:0e:a9:bc:e3:23:d3:f0:a5:df:11:
4f:c8:96:db:cf:1a:be:55:0c:5b:69:86:33:76:01:
dc:5d:89:23:b1:5c:e8:fb:eb:34:9b:30:18:37:e8:
c5:e4:21:61:eb:ad:ca:e6:c2:90:b6:7b:56:7f:1a:
7b:e4:da:04:c1:0d:eb:14:2f:c0:f3:7e:a6:42:54:
d6:76:c0:75:c7:d9:9b:95:b5:af:6d:29:61:65:7a:
42:1d:11:79:bb:43:2d:f7:ba:98:29:2e:ff:b0:c7:
66:f2:a2:5e:ea:42:21:50:08:56:7d:49:88:7d:55:
6e:2f:35:88:5b:3a:51:1f:4e:a4:45:8e:0d:99:8f:
53:98:74:20:db:d8:85:15:cd:75:1a:d8:d5:22:8f:
05:86:ca:b4:fb:c9:78:39:a1:52:02:5e:07:2f:a8:
37:e7:12:ed:19:e4:75:98:45:0b:e3:7e:34:f6:0e:
f3:5f:e1:83:65:25:f6:12:de:df:ba:db:5a:31:c8:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:DF:C4:1E:C6:B8:5F:9F:FB:A3:FB:8C:2D:74:01:F6:69:CA:75
X509v3 Authority Key Identifier:
keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a3a2f33322d313238203d3e20323638373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ab4::/32
Signature Algorithm: sha256WithRSAEncryption
72:3d:bb:a0:5c:f5:40:d0:7c:a3:11:ed:4c:02:25:33:7e:6d:
14:93:49:79:8a:ec:dc:ff:da:fd:ba:8a:06:93:5b:e9:43:54:
44:3d:c0:b7:82:c9:f0:cf:d6:3e:36:2c:39:e8:dd:b8:dd:dd:
4a:bf:73:8d:f5:08:31:ee:de:21:65:1f:d0:1b:89:51:3a:6f:
0d:83:20:46:9a:89:c5:bb:73:75:56:d4:3a:62:fa:ed:67:9e:
3a:67:4f:75:db:14:be:68:35:19:3c:09:49:8e:9f:d5:95:52:
7f:5e:86:8e:1b:b8:e7:27:ed:a9:a3:fd:5a:83:fb:1a:bb:89:
6d:c2:15:83:d7:80:0b:36:59:30:31:ca:e6:e4:e0:3b:cd:f5:
e4:92:6a:15:15:b8:cc:75:d9:98:a7:70:4d:ce:bf:f1:51:a8:
fc:eb:e5:b7:ea:d7:b8:67:f8:50:d3:9d:0c:46:f5:67:5f:02:
09:b1:84:b3:dd:0f:db:88:09:27:17:da:23:9c:df:dd:0b:a3:
b9:19:1b:e9:84:e9:85:ec:19:07:38:dd:9c:12:ef:8c:3c:9f:
1d:2b:37:87:e0:1c:67:b3:c0:5b:49:4a:c9:6f:ac:66:2c:8d:
3b:27:f8:7d:19:59:d1:4a:d1:6e:ac:24:68:c6:2b:fd:34:66:
8d:61:c3:bc
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIURKtUSWZVXe5tFDemg6b3usfLDrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCNEM5MUVCRTA3RDcwN0VFNzc1QTE1N0FBNTgyQkY0
QjUzM0M2MjAeFw0yNTA0MTUyMDExNDVaFw0yNjA0MTQyMDE2NDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUM0NDUzODhEQUIxQjY1MjE4
Qjg4OTgzNkZEQjAzNjRBQ0Q0QkY4QjIyOTZGRDQ3RjE4OUJFMDY1NDZGNzY1OTZB
NUI5MUVDRDNFQjUxQzA1REM1RDM4OTc3MjMwMTkzMkM4MzRFMUIyQTAwQjdFODM0
QzQ1NDIwQkI5MTFDNkUwRUE5QkNFMzIzRDNGMEE1REYxMTRGQzg5NkRCQ0YxQUJF
NTUwQzVCNjk4NjMzNzYwMURDNUQ4OTIzQjE1Q0U4RkJFQjM0OUIzMDE4MzdFOEM1
RTQyMTYxRUJBRENBRTZDMjkwQjY3QjU2N0YxQTdCRTREQTA0QzEwREVCMTQyRkMw
RjM3RUE2NDI1NEQ2NzZDMDc1QzdEOTlCOTVCNUFGNkQyOTYxNjU3QTQyMUQxMTc5
QkI0MzJERjdCQTk4MjkyRUZGQjBDNzY2RjJBMjVFRUE0MjIxNTAwODU2N0Q0OTg4
N0Q1NTZFMkYzNTg4NUIzQTUxMUY0RUE0NDU4RTBEOTk4RjUzOTg3NDIwREJEODg1
MTVDRDc1MUFEOEQ1MjI4RjA1ODZDQUI0RkJDOTc4MzlBMTUyMDI1RTA3MkZBODM3
RTcxMkVEMTlFNDc1OTg0NTBCRTM3RTM0RjYwRUYzNUZFMTgzNjUyNUY2MTJERURG
QkFEQjVBMzFDOEQzNzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnERTiNqxtlIYuImDb9sDZKzUv4silv1H8Ym+BlRvdllqW5Hs0+tR
wF3F04l3IwGTLINOGyoAt+g0xFQgu5Ecbg6pvOMj0/Cl3xFPyJbbzxq+VQxbaYYz
dgHcXYkjsVzo++s0mzAYN+jF5CFh663K5sKQtntWfxp75NoEwQ3rFC/A836mQlTW
dsB1x9mblbWvbSlhZXpCHRF5u0Mt97qYKS7/sMdm8qJe6kIhUAhWfUmIfVVuLzWI
WzpRH06kRY4NmY9TmHQg29iFFc11GtjVIo8Fhsq0+8l4OaFSAl4HL6g35xLtGeR1
mEUL43409g7zX+GDZSX2Et7futtaMcjTcQIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FLyk38Qexrhfn/uj+4wtdAH2acp1MB8GA1UdIwQYMBaAFNK0yR6+B9cH7ndaFXql
gr9LUzxiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRyeW9HU1o0bmNaN01j
OGRoQ1ViczVWaHNBa1RDMm95QzFoNm1OQzhIVlpYLzEvRDJCNEM5MUVCRTA3RDcw
N0VFNzc1QTE1N0FBNTgyQkY0QjUzM0M2Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EMkI0QzkxRUJFMDdENzA3RUU3NzVBMTU3QUE1ODJCRjRCNTMz
QzYyLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cnlvR1NaNG5jWjdNYzhkaENV
YnM1VmhzQWtUQzJveUMxaDZtTkM4SFZaWC8xLzMyMzgzMDM0M2EzNTYxNjIzNDNh
M2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjM4MzczOTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
KARatDANBgkqhkiG9w0BAQsFAAOCAQEAcj27oFz1QNB8oxHtTAIlM35tFJNJeYrs
3P/a/bqKBpNb6UNURD3At4LJ8M/WPjYsOejduN3dSr9zjfUIMe7eIWUf0BuJUTpv
DYMgRpqJxbtzdVbUOmL67WeeOmdPddsUvmg1GTwJSY6f1ZVSf16Gjhu45yftqaP9
WoP7GruJbcIVg9eACzZZMDHK5uTgO8315JJqFRW4zHXZmKdwTc6/8VGo/Ovlt+rX
uGf4UNOdDEb1Z18CCbGEs90P24gJJxfaI5zf3QujuRkb6YTphewZBzjdnBLvjDyf
HSs3h+AcZ7PAW0lKyW+sZiyNOyf4fRlZ0UrRbqwkaMYr/TRmjWHDvA==
-----END CERTIFICATE-----
Generated at Thu May 1 21:56:44 2025 by rpki-client