Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
File: 3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (raw, json)
Hash identifier: PJThCUTZ7moteTily4gt1fT5uRuCbqVT2139H44WgeE=
Subject key identifier: EA:90:81:AF:6F:EA:06:59:F6:CD:63:FB:5B:1A:69:09:DD:A7:D0:39
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 2F605849692A7448DF4B3B7D1AFFBD29D64DDF25
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:20:09 +0000
ROA not before: Mon 24 Feb 2025 17:15:09 +0000
ROA not after: Mon 23 Feb 2026 17:20:09 +0000
asID: 269712
IP address blocks: 190.112.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Jun 2025 13:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:60:58:49:69:2a:74:48:df:4b:3b:7d:1a:ff:bd:29:d6:4d:df:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:15:09 2025 GMT
Not After : Feb 23 17:20:09 2026 GMT
Subject: CN=EA9081AF6FEA0659F6CD63FB5B1A6909DDA7D039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:db:51:32:fc:3a:56:0b:60:e3:1a:ef:66:
d9:8c:93:48:ca:83:e7:bb:60:f7:9d:ac:d1:d5:55:
e9:16:71:fb:fc:2c:e3:f6:f5:0e:53:d0:c3:b3:dc:
d9:7b:08:8f:88:b9:b1:4c:bd:ff:0b:62:5f:13:f6:
36:0a:c2:44:d5:98:8a:8e:0c:3d:f0:cf:6b:a1:4f:
4b:4d:0a:d4:68:27:f0:fb:0e:7b:8e:e5:db:27:e0:
c3:58:7a:96:b5:3c:59:b2:b3:38:a1:02:42:d6:55:
15:74:e8:62:e3:50:67:c6:6f:02:98:ee:8a:11:56:
d4:aa:c1:99:a3:8b:5b:4c:8b:05:a0:de:e0:0d:3f:
f4:5a:70:dd:34:f5:94:a8:0c:11:a5:87:62:c7:49:
1b:83:0b:06:53:9b:de:71:7f:6e:34:70:ac:62:55:
46:70:6d:e5:e5:38:72:cb:4d:ac:4b:03:3d:67:e5:
c5:8f:3e:70:bd:05:39:6e:3a:a0:7d:8a:d3:ae:0e:
4b:55:ee:17:0f:c3:25:c1:bc:ba:1b:70:29:d8:83:
5a:b6:f1:db:81:a8:2a:0f:7b:0a:72:c0:e6:57:41:
c1:b4:90:b0:4c:b8:00:23:cc:70:0a:33:51:2e:5f:
9b:5c:21:59:b2:7d:85:2a:8b:92:42:6d:09:25:cb:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:90:81:AF:6F:EA:06:59:F6:CD:63:FB:5B:1A:69:09:DD:A7:D0:39
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.156.0/22
Signature Algorithm: sha256WithRSAEncryption
45:f7:90:91:d3:dd:52:35:9f:d6:71:b8:ce:31:d6:f4:54:cf:
39:06:0e:a8:9e:37:53:f3:76:ef:f4:99:39:e5:0f:f3:be:50:
69:f8:f7:38:6d:81:4a:c5:53:b7:01:b2:40:cf:07:82:d7:f3:
ab:c9:0b:e7:c8:db:62:4f:46:a5:08:58:e6:10:e4:93:01:80:
12:e4:c4:fd:a4:ee:d3:bc:76:cf:92:2b:ba:11:28:18:29:57:
c8:e9:a1:ef:34:8f:94:7c:53:ea:95:bf:96:5d:5f:e7:b3:c4:
8a:8f:00:04:4e:1d:41:76:0d:47:e5:7f:28:75:2c:bc:1b:6d:
9f:ba:26:f6:00:09:36:a2:c5:4d:d4:52:4e:66:3b:6c:bc:67:
24:74:ac:7f:8a:90:7d:63:71:5e:10:14:26:d0:06:ee:0b:c1:
8b:99:f1:c3:a0:f7:13:4f:43:e9:f9:7c:0f:f5:6c:ee:5e:db:
da:8b:60:54:80:c1:e8:60:f4:c2:eb:55:c1:df:65:31:ce:d6:
5f:2c:2e:8b:4b:3b:a0:36:3c:9d:b8:17:8b:b7:0e:ed:28:5c:
42:8c:9d:24:1d:0e:80:d2:2e:eb:92:27:d7:88:82:fd:31:21:
79:8d:29:f9:eb:83:fa:52:9e:e7:d6:85:96:0c:cc:f4:ee:84:
f6:cf:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:47:40 2025 by rpki-client