Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3232203d3e203631383035.roa
File: 3133312e3136312e3135362e302f32322d3232203d3e203631383035.roa (raw, json)
Hash identifier: EWgri/T2CeMsfd6EQ1HE8ONJOQlaI2DeKyI68/y6TdE=
Subject key identifier: B8:AD:4F:38:EC:96:5A:61:A8:7C:99:8C:58:FE:BE:80:25:42:2C:60
Certificate issuer: /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial: 1852078C3413CF14E6A75C6A08DF59406E8AB313
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3232203d3e203631383035.roa
Signing time: Thu 27 Mar 2025 11:20:17 +0000
ROA not before: Thu 27 Mar 2025 11:15:17 +0000
ROA not after: Thu 26 Mar 2026 11:20:17 +0000
asID: 61805
IP address blocks: 131.161.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Mar 2025 11:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:52:07:8c:34:13:cf:14:e6:a7:5c:6a:08:df:59:40:6e:8a:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Validity
Not Before: Mar 27 11:15:17 2025 GMT
Not After : Mar 26 11:20:17 2026 GMT
Subject: CN=B8AD4F38EC965A61A87C998C58FEBE8025422C60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:81:06:98:52:ae:c7:1e:61:60:80:e0:d4:
5c:7c:3f:06:91:2c:a3:2e:2e:0a:fd:af:46:a4:77:
67:e7:2a:71:5e:2f:fc:37:5a:25:3c:b4:8d:62:22:
1a:77:53:80:f3:ab:3b:33:07:3e:d6:5f:d4:56:3c:
16:41:c3:b2:2f:fb:13:36:9b:ed:08:3f:2f:68:88:
b3:ea:74:40:8e:eb:5a:eb:09:8c:61:51:c2:5b:b0:
bf:d5:f3:29:81:2c:1f:12:a7:ca:53:20:10:bb:bc:
e3:87:5a:87:74:e9:cf:97:90:f8:5c:85:40:11:cf:
e0:3d:58:81:18:11:18:bd:93:90:fd:c3:c7:11:74:
3a:30:93:fd:06:bc:2f:89:12:d5:34:95:6b:6f:ba:
03:1f:c7:59:4c:4e:05:da:92:0d:1d:a6:fb:04:37:
51:e9:b0:30:b6:fb:47:bf:4f:b9:b0:52:e7:9a:0d:
d8:73:17:d3:ae:9f:74:74:5d:c7:10:3b:5f:4c:a6:
ca:b9:0a:60:58:11:e4:86:32:f6:e3:1c:9b:05:6b:
e2:3d:78:a8:6a:64:87:d4:86:b5:31:f5:3a:38:8f:
e5:99:51:1a:5a:99:2d:6d:36:2f:df:0a:1d:58:42:
7f:62:7c:fe:1d:ee:2f:ce:d6:d0:2a:12:2b:d6:c8:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:4F:38:EC:96:5A:61:A8:7C:99:8C:58:FE:BE:80:25:42:2C:60
X509v3 Authority Key Identifier:
keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/3133312e3136312e3135362e302f32322d3232203d3e203631383035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:30:fb:66:0e:5d:6c:f8:15:1b:92:2b:b2:39:6c:04:3d:54:
00:31:59:5b:8e:f4:92:6d:b3:f2:3b:7a:a4:52:15:62:e9:82:
8f:60:67:b5:e6:f0:5f:e9:4a:63:c8:83:61:b4:6a:9c:57:ec:
b7:b2:1c:31:32:13:4d:c3:ae:43:85:0e:69:7b:57:8e:2b:ed:
c3:ae:61:f7:b2:c4:cc:75:36:e3:94:29:0d:1e:9e:0b:06:a3:
0e:e4:34:d1:91:c1:97:50:69:d8:44:79:7a:2d:f0:26:ca:29:
e3:44:b0:b9:28:17:25:9f:0b:06:39:2d:bd:b2:98:55:9b:c0:
61:a8:3a:ba:0d:63:29:8b:52:6d:27:d7:3e:37:58:72:59:1a:
f6:e8:dc:d1:2c:80:e2:f2:c1:58:d4:4e:4c:0d:07:6b:ec:c5:
a5:1e:aa:d6:31:f7:db:6f:84:71:16:3a:a3:d1:86:1a:32:e6:
b8:b2:e0:44:f1:99:09:5d:eb:85:c4:a3:e4:65:2e:a9:1a:2e:
0e:69:5c:fb:a3:0e:02:0d:ad:12:f1:92:b1:0d:91:5f:64:f3:
a1:84:ec:36:2d:e2:01:cd:ee:3d:d9:d0:d7:35:cf:17:c4:1b:
9e:a0:e5:69:b6:7f:28:dd:92:da:cc:1d:b9:2d:f8:71:98:41:
4f:c2:27:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGFIHjDQTzxTmp1xqCN9ZQG6KsxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU3MEJGNDgyMUIyMURDNTkwNUZERDc0RUQwM0MxMzZB
MTZBMjgzMDAeFw0yNTAzMjcxMTE1MTdaFw0yNjAzMjYxMTIwMTdaMDMxMTAvBgNV
BAMTKEI4QUQ0RjM4RUM5NjVBNjFBODdDOTk4QzU4RkVCRTgwMjU0MjJDNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCoEGmFKuxx5hYIDg1Fx8PwaR
LKMuLgr9r0akd2fnKnFeL/w3WiU8tI1iIhp3U4DzqzszBz7WX9RWPBZBw7Iv+xM2
m+0IPy9oiLPqdECO61rrCYxhUcJbsL/V8ymBLB8Sp8pTIBC7vOOHWod06c+XkPhc
hUARz+A9WIEYERi9k5D9w8cRdDowk/0GvC+JEtU0lWtvugMfx1lMTgXakg0dpvsE
N1HpsDC2+0e/T7mwUueaDdhzF9Oun3R0XccQO19Mpsq5CmBYEeSGMvbjHJsFa+I9
eKhqZIfUhrUx9To4j+WZURpamS1tNi/fCh1YQn9ifP4d7i/O1tAqEivWyF5tAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuK1POOyWWmGofJmMWP6+gCVCLGAwHwYDVR0j
BBgwFoAU/nC/SCGyHcWQX9107QPBNqFqKDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzREWnQ4cEdoOUZYTU5XTDhNd3V1QXBzQnNBZDNMSFZ2THpka0Fxc1FC
OUgvMC9GRTcwQkY0ODIxQjIxREM1OTA1RkRENzRFRDAzQzEzNkExNkEyODMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFNzBCRjQ4MjFCMjFEQzU5
MDVGREQ3NEVEMDNDMTM2QTE2QTI4MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c0RFp0OHBHaDlGWE1OV0w4TXd1dUFwc0JzQWQzTEhWdkx6ZGtBcXNRQjlILzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDoZwwDQYJKoZIhvcNAQELBQADggEBAE0w+2YO
XWz4FRuSK7I5bAQ9VAAxWVuO9JJts/I7eqRSFWLpgo9gZ7Xm8F/pSmPIg2G0apxX
7LeyHDEyE03DrkOFDml7V44r7cOuYfeyxMx1NuOUKQ0engsGow7kNNGRwZdQadhE
eXot8CbKKeNEsLkoFyWfCwY5Lb2ymFWbwGGoOroNYymLUm0n1z43WHJZGvbo3NEs
gOLywVjUTkwNB2vsxaUeqtYx99tvhHEWOqPRhhoy5riy4ETxmQld64XEo+RlLqka
Lg5pXPujDgINrRLxkrENkV9k86GE7DYt4gHN7j3Z0Nc1zxfEG56g5Wm2fyjdktrM
Hbkt+HGYQU/CJ9E=
-----END CERTIFICATE-----
Generated at Sun May 11 22:48:01 2025 by rpki-client