Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa
File: 323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa (raw, json)
Hash identifier: 7l6aYr+0Wecd3GhCbRNTT+oCG1r2XOXl8rQBfuRgMD8=
Subject key identifier: 35:46:B0:B1:2D:6B:E3:A2:DF:03:DE:1A:DD:B7:64:40:BF:73:45:20
Certificate issuer: /CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Certificate serial: 56810FFD508AC1433FAF6D3E9E66B7A7D2EBA501
Authority key identifier: 04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa
Signing time: Mon 12 May 2025 13:48:57 +0000
ROA not before: Mon 12 May 2025 13:43:57 +0000
ROA not after: Mon 11 May 2026 13:48:57 +0000
asID: 269194
IP address blocks: 2804:91e0:fd00::/40 maxlen: 44
Validation: Failed, certificate revoked on Thu 29 May 2025 17:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:81:0f:fd:50:8a:c1:43:3f:af:6d:3e:9e:66:b7:a7:d2:eb:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048F5080A314D580279F12113E7EC9BCA443B4B7
Validity
Not Before: May 12 13:43:57 2025 GMT
Not After : May 11 13:48:57 2026 GMT
Subject: CN=3546B0B12D6BE3A2DF03DE1ADDB76440BF734520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:ad:db:73:fa:1f:0f:84:d1:8f:b3:3a:00:
69:e5:4f:4c:b1:65:93:d3:70:43:8b:79:b4:86:44:
eb:10:d3:79:0e:41:da:b4:67:77:e5:04:73:6f:1e:
55:8a:36:29:f9:55:de:ee:4b:d5:5b:ab:35:68:ac:
cf:7b:97:54:23:15:5f:6d:7d:d6:84:08:90:48:f3:
93:6c:50:90:93:ed:34:61:4c:55:ba:91:eb:2f:38:
cc:81:71:16:cc:4c:b5:3e:a7:4c:25:f9:b5:a2:49:
1a:4c:fd:59:65:38:3c:de:a8:5e:62:ba:5e:95:36:
ee:65:07:72:e1:a7:a0:31:2b:19:5d:0e:98:88:4d:
bd:b1:1b:89:ac:f5:59:26:ac:2c:c2:6a:67:7a:ec:
d9:0a:f2:98:a0:83:71:90:46:3b:b8:17:05:49:e6:
70:b9:ac:21:7b:5c:e4:93:25:5b:82:25:08:bb:6b:
25:2b:a0:bf:11:dd:b3:0c:d7:b2:81:a3:e4:84:4f:
24:d5:7c:35:aa:b3:85:7a:a3:f5:d1:3e:59:c1:00:
67:37:6a:12:df:05:34:74:e8:64:6b:07:89:40:9b:
7d:cc:5d:44:1a:a8:11:63:30:74:35:90:8c:18:2f:
9c:a3:cb:da:27:bf:84:79:ee:1e:92:2a:b4:ee:ba:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:B0:B1:2D:6B:E3:A2:DF:03:DE:1A:DD:B7:64:40:BF:73:45:20
X509v3 Authority Key Identifier:
keyid:04:8F:50:80:A3:14:D5:80:27:9F:12:11:3E:7E:C9:BC:A4:43:B4:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/048F5080A314D580279F12113E7EC9BCA443B4B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048F5080A314D580279F12113E7EC9BCA443B4B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/323830343a393165303a666430303a3a2f34302d3434203d3e20323639313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:91e0:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
7c:c8:df:f3:15:bb:ad:79:5a:24:68:09:f3:36:62:a5:e4:89:
64:ff:96:ca:34:0e:82:8a:cf:ae:0f:23:ba:f3:68:ab:a3:ea:
47:9c:72:d2:04:1b:20:31:95:f8:a7:58:62:20:ba:0c:a6:c6:
36:47:e5:9e:e3:18:f1:43:8c:51:df:45:22:3d:0d:f9:06:07:
ac:6a:57:24:4b:1d:6d:92:30:03:74:7d:1f:b2:43:fa:84:5c:
c1:96:36:b3:9d:23:ed:77:d6:17:8f:47:26:91:8b:4c:84:27:
8e:e2:20:49:5c:9a:ba:d5:75:2d:b4:28:d5:6d:a5:dd:96:4d:
8b:dd:56:6f:c6:7f:74:6f:9d:2f:ea:08:3d:3e:6f:d5:ca:4b:
bf:ce:9e:a5:fb:90:e1:f2:14:73:d8:c2:73:5a:b5:34:24:42:
55:e9:68:5b:8d:fc:7d:26:4f:1a:d2:7d:6b:2d:96:d9:3e:f4:
f3:38:f6:ba:7f:6f:53:58:70:88:c1:66:54:b0:e1:59:56:53:
89:0e:14:04:0e:a3:bb:f9:73:7e:a0:5f:62:9e:9a:10:55:2e:
ee:ec:8d:28:07:c4:7b:82:76:5c:1e:a2:ba:26:f6:f8:31:43:
95:4c:db:45:c9:f4:25:21:20:00:c7:e7:56:24:cf:ff:e8:3d:
9e:92:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:01:23 2025 by rpki-client