Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134352e302f32342d3234203d3e20323732353838.roa
File: 34352e3233372e3134352e302f32342d3234203d3e20323732353838.roa (raw, json)
Hash identifier: mHZfdIq4uQAgM28zOAaihwEd1GV2heCHhy4xv63nLOQ=
Subject key identifier: D5:79:32:B1:00:2C:EA:AF:C6:53:50:82:30:41:71:9C:C3:AB:0C:BD
Certificate issuer: /CN=404EF1E548374354D9B828749323416749EF23B4
Certificate serial: 4BAD976C048DD007FC3D4E6D75A1A8C962412EBA
Authority key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134352e302f32342d3234203d3e20323732353838.roa
Signing time: Wed 30 Apr 2025 15:58:10 +0000
ROA not before: Wed 30 Apr 2025 15:53:10 +0000
ROA not after: Wed 29 Apr 2026 15:58:10 +0000
asID: 272588
IP address blocks: 45.237.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 11:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ad:97:6c:04:8d:d0:07:fc:3d:4e:6d:75:a1:a8:c9:62:41:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404EF1E548374354D9B828749323416749EF23B4
Validity
Not Before: Apr 30 15:53:10 2025 GMT
Not After : Apr 29 15:58:10 2026 GMT
Subject: CN=D57932B1002CEAAFC65350823041719CC3AB0CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:7d:d3:fd:91:16:e3:1f:9b:2b:4e:68:24:
07:5d:7a:b9:49:02:7e:5b:40:5a:c5:ca:bc:70:2a:
e7:d6:25:cc:50:23:54:5c:d1:44:80:f0:4d:59:3f:
bb:7b:d0:2d:ab:6e:04:e3:6c:28:c3:ba:a3:ee:b1:
df:bb:d6:88:d7:8a:83:31:a5:6c:26:b0:60:68:c0:
13:48:b6:86:8f:26:f1:c8:c4:42:e8:42:b3:d7:41:
eb:48:3f:bc:ed:5f:da:19:e7:db:94:6c:82:4d:51:
6d:f6:21:d2:fc:f6:16:4d:3a:fb:af:5b:86:3d:74:
07:e3:8b:c4:1a:5b:c2:51:90:25:6e:99:31:5d:7e:
22:ce:b5:09:63:27:e7:d0:42:42:7f:db:f9:ec:9d:
e3:d7:9e:e4:75:d1:c4:14:4c:92:60:f7:00:35:93:
3d:e0:cd:c3:4c:40:e7:dc:c7:80:e9:a4:a4:c4:5d:
8d:41:5b:b1:f5:68:33:e0:17:f1:82:79:3d:8b:a1:
29:6b:36:0a:c9:e3:02:d3:3a:95:3a:b1:ed:c5:c8:
89:cb:0a:59:7c:3d:4a:11:27:1b:3e:3f:13:58:af:
d7:b0:79:00:d7:97:c8:77:cf:02:39:17:63:f3:97:
d7:b8:59:4b:2c:0d:d3:f4:5d:50:33:e4:51:46:24:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:32:B1:00:2C:EA:AF:C6:53:50:82:30:41:71:9C:C3:AB:0C:BD
X509v3 Authority Key Identifier:
keyid:40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/34352e3233372e3134352e302f32342d3234203d3e20323732353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:03:0b:91:d4:d1:06:f8:e1:38:d8:f8:bd:13:1a:e1:63:76:
52:cc:c1:5a:ac:f2:0a:1c:10:b0:40:50:a4:0d:9c:2c:bf:cf:
40:48:de:ce:99:e5:06:3d:57:13:b3:b7:c2:d6:61:d1:c9:53:
71:25:d2:29:7b:05:93:8c:e0:29:dc:a4:49:97:d9:0f:21:e5:
27:84:72:2f:0c:8e:08:fb:57:2c:c6:39:ae:6e:7c:95:d6:e9:
c6:6e:9c:29:ba:27:2f:e5:b9:70:8e:d0:26:11:0c:f5:f4:17:
c4:7a:0a:c8:f2:19:36:3e:39:35:04:c4:b6:77:87:ac:08:22:
e5:71:5b:1d:62:78:de:53:df:3a:12:aa:58:dd:a3:74:7a:c0:
98:0c:f8:a3:10:38:97:4a:5d:30:dc:d7:54:c2:28:ae:9c:8c:
98:f3:da:c2:63:e1:27:d5:4b:86:89:fe:ef:3f:e9:f9:b8:c8:
4a:61:46:89:12:d3:ac:74:85:f2:39:d8:82:34:d6:4b:b7:ab:
2f:47:50:0f:8a:e4:ef:42:ed:66:43:fd:e9:f0:c6:1a:bc:1c:
d0:ca:80:d5:e8:3e:a8:c7:57:1b:46:2a:51:72:79:04:52:f4:
af:92:3b:df:03:55:3a:8c:4b:71:b6:8b:99:95:ab:27:e3:75:
8d:aa:b7:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS62XbASN0Af8PU5tdaGoyWJBLrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA0RUYxRTU0ODM3NDM1NEQ5QjgyODc0OTMyMzQxNjc0
OUVGMjNCNDAeFw0yNTA0MzAxNTUzMTBaFw0yNjA0MjkxNTU4MTBaMDMxMTAvBgNV
BAMTKEQ1NzkzMkIxMDAyQ0VBQUZDNjUzNTA4MjMwNDE3MTlDQzNBQjBDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3H3T/ZEW4x+bK05oJAdderlJ
An5bQFrFyrxwKufWJcxQI1Rc0USA8E1ZP7t70C2rbgTjbCjDuqPusd+71ojXioMx
pWwmsGBowBNItoaPJvHIxELoQrPXQetIP7ztX9oZ59uUbIJNUW32IdL89hZNOvuv
W4Y9dAfji8QaW8JRkCVumTFdfiLOtQljJ+fQQkJ/2/nsnePXnuR10cQUTJJg9wA1
kz3gzcNMQOfcx4DppKTEXY1BW7H1aDPgF/GCeT2LoSlrNgrJ4wLTOpU6se3FyInL
Cll8PUoRJxs+PxNYr9eweQDXl8h3zwI5F2Pzl9e4WUssDdP0XVAz5FFGJA6XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1XkysQAs6q/GU1CCMEFxnMOrDL0wHwYDVR0j
BBgwFoAUQE7x5Ug3Q1TZuCh0kyNBZ0nvI7QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWZiS1dCdUE1d0RlRzhuTVVLQVVva2FoZGpnaGY2RWF6ZlZXaGdMR2Q5
M1YvMC80MDRFRjFFNTQ4Mzc0MzU0RDlCODI4NzQ5MzIzNDE2NzQ5RUYyM0I0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNEVGMUU1NDgzNzQzNTRE
OUI4Mjg3NDkzMjM0MTY3NDlFRjIzQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmYktXQnVBNXdEZUc4bk1VS0FVb2thaGRqZ2hmNkVhemZWV2hnTEdkOTNWLzAv
MzQzNTJlMzIzMzM3MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzIzNTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7ZEwDQYJKoZIhvcNAQELBQADggEBAAoDC5HU
0Qb44TjY+L0TGuFjdlLMwVqs8gocELBAUKQNnCy/z0BI3s6Z5QY9VxOzt8LWYdHJ
U3El0il7BZOM4CncpEmX2Q8h5SeEci8Mjgj7VyzGOa5ufJXW6cZunCm6Jy/luXCO
0CYRDPX0F8R6CsjyGTY+OTUExLZ3h6wIIuVxWx1ieN5T3zoSqljdo3R6wJgM+KMQ
OJdKXTDc11TCKK6cjJjz2sJj4SfVS4aJ/u8/6fm4yEphRokS06x0hfI52II01ku3
qy9HUA+K5O9C7WZD/enwxhq8HNDKgNXoPqjHVxtGKlFyeQRS9K+SO98DVTqMS3G2
i5mVqyfjdY2qt6c=
-----END CERTIFICATE-----
Generated at Mon May 19 08:20:42 2025 by rpki-client