Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
File: 3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa (raw, json)
Hash identifier: QcrkPhF+k614JNl/KF/tkecREBBi55kEnI5oV6z6+yk=
Subject key identifier: BF:DC:7F:92:E3:BE:B0:FC:B7:C6:CB:9F:2B:80:B0:7E:4E:8E:35:D6
Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial: 674C6E61A76343F1D18D706C3746F49044DD1A34
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
Signing time: Mon 24 Feb 2025 17:21:55 +0000
ROA not before: Mon 24 Feb 2025 17:16:55 +0000
ROA not after: Mon 23 Feb 2026 17:21:55 +0000
asID: 269712
IP address blocks: 190.112.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 13:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4c:6e:61:a7:63:43:f1:d1:8d:70:6c:37:46:f4:90:44:dd:1a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Validity
Not Before: Feb 24 17:16:55 2025 GMT
Not After : Feb 23 17:21:55 2026 GMT
Subject: CN=BFDC7F92E3BEB0FCB7C6CB9F2B80B07E4E8E35D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:43:f0:a4:8a:e7:5b:e5:29:0f:cc:ee:3a:
8d:fd:35:97:77:46:ea:f6:58:6e:d0:d2:c0:77:91:
cf:69:85:0f:76:d5:86:87:3e:bb:60:66:42:3f:64:
0e:6a:66:dd:e9:81:76:b8:12:24:52:8e:7c:dd:71:
1c:48:ac:cb:4e:15:ac:ef:c2:61:8d:10:5e:2d:a5:
48:c2:bf:b3:f7:e5:86:c3:01:f4:a7:95:ab:d3:67:
94:93:a8:02:97:14:cd:38:38:af:d8:01:93:b5:24:
12:b6:fa:6b:c5:ad:15:49:fa:cf:2f:5a:3e:e3:fb:
98:7f:94:05:42:12:64:69:77:62:8d:6f:4e:f2:ee:
50:63:c9:3d:2d:64:a0:33:fd:77:ed:cb:ff:c8:be:
d3:f0:70:c3:64:84:32:87:ad:21:dd:76:12:50:bc:
dc:1a:b1:bc:b6:f3:4f:b1:45:16:3a:29:5b:98:53:
ad:01:c4:c4:4d:90:df:e5:0f:be:0d:8b:79:f0:14:
b1:4f:7d:24:b4:59:fe:f3:5d:4b:e1:65:3a:ac:42:
98:0f:fb:84:f4:b3:e5:90:52:22:7b:86:b0:e6:46:
df:ad:11:a9:f6:ed:ff:a0:ab:ed:e2:5e:79:60:14:
f4:1a:47:a9:3f:6d:58:bb:e0:5c:dc:9e:79:69:46:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:7F:92:E3:BE:B0:FC:B7:C6:CB:9F:2B:80:B0:7E:4E:8E:35:D6
X509v3 Authority Key Identifier:
keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135392e302f32342d3234203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.159.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a1:3b:73:a1:9e:ea:22:13:97:dd:cf:01:50:23:0f:ac:e4:
c7:2d:56:e5:3f:c4:0f:22:6b:90:56:63:76:00:5b:1f:04:5b:
16:4e:61:5f:9c:b7:8c:ad:a3:b8:fd:10:4c:5b:03:ff:a1:1f:
7d:94:08:50:29:a2:cd:e1:86:55:d6:c8:b8:ea:ec:9a:46:39:
ee:da:2a:36:b0:eb:16:a9:b4:40:97:9e:f8:25:dd:5f:4c:db:
5e:bf:5e:9b:4a:4a:50:00:73:03:bb:73:41:e9:4c:dd:f5:e7:
45:02:8f:84:7c:69:a6:3f:3a:98:bf:c1:c9:51:43:78:6f:3a:
96:fd:b3:87:99:dd:93:02:e9:bc:7a:11:5e:eb:a5:2d:27:3c:
4f:84:a7:79:a9:00:b2:80:ed:a3:19:72:76:bf:2b:16:73:9a:
c3:88:cc:c5:2f:18:cf:c6:d9:ea:ee:ce:86:8f:86:e5:ca:ff:
f0:60:79:6b:41:ba:18:76:8b:db:b7:1d:15:a7:3e:45:a2:39:
60:5b:13:6f:e6:af:fe:6d:0a:b4:72:36:af:f6:21:ed:cf:e1:
64:8f:e9:0c:0f:f1:f7:0e:fb:00:8b:fc:29:8c:f7:dc:dc:94:
81:ca:a7:b8:65:98:5f:0b:28:55:7f:bb:fc:e7:6c:42:81:a2:
44:8f:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 10:20:31 2025 by rpki-client