Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa
File: 3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa (raw, json)
Hash identifier: jIoqFYIdlDmWRxd44IFi9baI+Wmb5JoLU/Qr0Mlkdqc=
Subject key identifier: C1:4F:55:51:BE:F4:21:A0:8F:DF:56:CC:8A:C6:37:06:52:93:68:2F
Certificate issuer: /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial: 48466B3B2EA56B351F7DB2B3AF55B4279817FC57
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa
Signing time: Mon 19 May 2025 21:00:50 +0000
ROA not before: Mon 19 May 2025 20:55:50 +0000
ROA not after: Mon 18 May 2026 21:00:50 +0000
asID: 265465
IP address blocks: 168.196.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 11:53:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:46:6b:3b:2e:a5:6b:35:1f:7d:b2:b3:af:55:b4:27:98:17:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Validity
Not Before: May 19 20:55:50 2025 GMT
Not After : May 18 21:00:50 2026 GMT
Subject: CN=C14F5551BEF421A08FDF56CC8AC637065293682F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:6a:b4:fb:88:9a:d8:5c:d6:93:8b:2c:2b:
a4:74:61:8f:93:5a:bb:c5:83:8e:b9:f5:fc:eb:a9:
a7:38:79:6a:dd:5a:64:13:48:47:2d:d0:dd:ee:3d:
3f:7a:c2:01:c4:30:91:d0:90:cc:74:72:94:e7:a5:
9f:b2:79:64:a4:0f:b4:19:89:76:4c:21:9c:97:1e:
06:24:63:7e:38:e5:e7:cb:78:81:5e:5f:61:c6:e2:
24:2a:a7:d4:3e:a8:60:93:47:da:66:9b:86:8d:7c:
67:55:ba:6d:f0:a8:e8:4d:65:56:02:a6:98:e4:90:
84:f0:90:bb:80:fe:af:10:ce:8e:7f:ce:90:ae:46:
83:48:dc:60:03:a6:36:1e:f5:ba:06:44:96:bb:8c:
f0:70:89:35:21:f1:53:e3:05:22:ad:50:e5:78:2f:
8f:88:52:81:2a:b7:e3:58:c8:a1:12:ce:96:75:55:
2e:b1:c1:a7:ec:46:b4:50:e5:8b:08:38:a9:a6:a6:
b0:7d:69:25:33:09:db:2b:c8:07:98:e3:cd:b2:05:
4e:7a:74:67:bf:1a:17:6d:3f:aa:92:a0:9e:68:44:
4a:d1:02:cc:6c:ee:21:67:7b:a2:1f:ce:c4:21:79:
2a:d1:a9:1b:4d:6b:0b:42:d6:5a:28:a3:98:8d:e6:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:55:51:BE:F4:21:A0:8F:DF:56:CC:8A:C6:37:06:52:93:68:2F
X509v3 Authority Key Identifier:
keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3234203d3e20323635343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:73:ec:f6:67:60:98:d9:15:f6:34:f4:a9:0d:6b:f3:52:c3:
5d:a6:54:b9:cc:6c:79:38:10:e3:5e:0e:05:61:91:7c:9c:71:
eb:60:3f:7e:b1:43:76:4a:58:13:20:4b:12:1a:65:09:9c:0e:
81:05:ad:41:15:81:52:2f:2e:d4:28:ea:59:c4:1a:e0:16:9c:
6a:d4:52:ff:f1:9b:db:06:f2:da:d5:7a:75:44:7e:7d:c5:ad:
38:ee:42:ae:f7:5e:ad:b7:e4:b1:40:14:75:88:e2:93:cf:75:
d9:ef:79:73:f6:22:9f:6c:4a:7a:e7:15:f3:ac:c2:4a:30:20:
bc:e7:5b:b6:e1:fc:c6:43:1f:32:5e:c2:90:b8:46:33:02:f6:
48:c0:7a:6a:0c:55:96:77:48:97:a5:99:a0:9e:a9:cd:43:c7:
96:e1:b7:14:4b:90:ad:ca:64:27:49:0c:1e:f7:9d:73:47:87:
2a:47:30:6d:6e:53:8b:bc:23:92:ba:b4:8a:ec:94:15:ff:72:
be:bd:83:c7:c9:a5:d7:90:9c:8e:69:5c:a8:62:ab:d3:0b:2d:
ab:08:b5:ae:82:93:83:99:ec:53:b6:3f:b6:6f:19:37:33:21:
84:6d:2d:cc:3f:9b:01:ca:c1:83:43:ba:d1:7c:2c:73:db:c1:
5d:2c:d4:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSEZrOy6lazUffbKzr1W0J5gX/FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0MjQ5MjY1NDlFNEU1MUM1RDYwNDA1MzJCMzRGNjMw
M0FBQzlCNjAeFw0yNTA1MTkyMDU1NTBaFw0yNjA1MTgyMTAwNTBaMDMxMTAvBgNV
BAMTKEMxNEY1NTUxQkVGNDIxQTA4RkRGNTZDQzhBQzYzNzA2NTI5MzY4MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFWq0+4ia2FzWk4ssK6R0YY+T
WrvFg4659fzrqac4eWrdWmQTSEct0N3uPT96wgHEMJHQkMx0cpTnpZ+yeWSkD7QZ
iXZMIZyXHgYkY3445efLeIFeX2HG4iQqp9Q+qGCTR9pmm4aNfGdVum3wqOhNZVYC
ppjkkITwkLuA/q8Qzo5/zpCuRoNI3GADpjYe9boGRJa7jPBwiTUh8VPjBSKtUOV4
L4+IUoEqt+NYyKESzpZ1VS6xwafsRrRQ5YsIOKmmprB9aSUzCdsryAeY482yBU56
dGe/GhdtP6qSoJ5oRErRAsxs7iFne6IfzsQheSrRqRtNawtC1looo5iN5lxfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwU9VUb70IaCP31bMisY3BlKTaC8wHwYDVR0j
BBgwFoAU9kJJJlSeTlHF1gQFMrNPYwOqybYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJLdHFXVFczNXpnZkZQblA4NHl0MnZyTHhEa0oxem9WV0p2Zm9QQTdZ
ZG4vMC9GNjQyNDkyNjU0OUU0RTUxQzVENjA0MDUzMkIzNEY2MzAzQUFDOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDI0OTI2NTQ5RTRFNTFD
NUQ2MDQwNTMyQjM0RjYzMDNBQUM5QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiS3RxV1RXMzV6Z2ZGUG5QODR5dDJ2ckx4RGtKMXpvVldKdmZvUEE3WWRuLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjEoDANBgkqhkiG9w0BAQsFAAOCAQEAHXPs
9mdgmNkV9jT0qQ1r81LDXaZUucxseTgQ414OBWGRfJxx62A/frFDdkpYEyBLEhpl
CZwOgQWtQRWBUi8u1CjqWcQa4BacatRS//Gb2wby2tV6dUR+fcWtOO5Crvderbfk
sUAUdYjik8912e95c/Yin2xKeucV86zCSjAgvOdbtuH8xkMfMl7CkLhGMwL2SMB6
agxVlndIl6WZoJ6pzUPHluG3FEuQrcpkJ0kMHvedc0eHKkcwbW5Ti7wjkrq0iuyU
Ff9yvr2Dx8ml15CcjmlcqGKr0wstqwi1roKTg5nsU7Y/tm8ZNzMhhG0tzD+bAcrB
g0O60Xwsc9vBXSzUBA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:26 2025 by rpki-client