Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3232203d3e20323633393830.roa
File:                     3133382e3235352e3234342e302f32322d3232203d3e20323633393830.roa (raw, json)
Hash identifier:          KRAzEHcsuF0ZX1MoM1I9II/GugrKYfKm9/HmkhYZ/ug=
Subject key identifier:   EA:08:3D:04:FD:35:59:DE:AF:31:BA:C7:46:38:69:29:2C:5B:FB:70
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       7EC3F391A380C8C415F9CCF8E93D7C66AAEFBAE4
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3232203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:58:08 +0000
ROA not before:           Tue 23 Apr 2024 12:53:08 +0000
ROA not after:            Tue 22 Apr 2025 12:58:08 +0000
asID:                     263980
IP address blocks:        138.255.244.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c3:f3:91:a3:80:c8:c4:15:f9:cc:f8:e9:3d:7c:66:aa:ef:ba:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:53:08 2024 GMT
            Not After : Apr 22 12:58:08 2025 GMT
        Subject: CN=EA083D04FD3559DEAF31BAC7463869292C5BFB70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f5:62:a8:6d:d3:ef:a7:e0:c3:97:8d:d5:f5:
                    19:48:a5:8c:a3:bc:a4:49:eb:c7:51:c8:96:56:08:
                    23:3a:60:75:51:8e:dc:8f:20:48:8f:93:98:6b:85:
                    76:28:de:03:09:c8:04:73:9b:5a:58:5a:7a:4c:50:
                    2a:7c:c7:00:80:c3:49:46:f1:54:b8:8d:6c:56:17:
                    fe:64:8d:78:3d:bc:f7:a9:a4:5d:1a:7b:cf:a6:e7:
                    25:97:49:31:4a:37:be:c2:3e:f2:9b:d4:7c:23:4f:
                    98:cd:35:ec:50:a3:60:2d:ad:4e:ff:c9:cc:e5:c9:
                    2c:73:bb:54:49:9b:dd:f1:71:33:29:3d:0f:4b:35:
                    57:0c:43:7d:d3:ed:51:7f:9e:35:ab:f7:02:78:8e:
                    70:e7:0d:12:01:01:00:ce:a5:9c:e0:76:bc:69:fb:
                    ff:f9:48:ac:00:f8:a6:d7:9e:e7:0f:a8:89:a7:19:
                    5c:af:48:94:e5:64:26:ee:48:c8:b2:62:60:51:c5:
                    15:03:1a:c6:cb:28:0f:47:4b:44:7b:da:89:f9:24:
                    2e:35:b4:22:f8:cc:15:17:7c:9c:e0:18:4c:78:93:
                    a3:d8:00:8a:cd:35:ae:17:38:71:92:e2:89:70:0c:
                    dd:3e:91:19:d5:ca:3e:b4:38:c0:ad:09:a3:e8:4a:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:08:3D:04:FD:35:59:DE:AF:31:BA:C7:46:38:69:29:2C:5B:FB:70
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234342e302f32322d3232203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:93:fc:50:8f:f1:6e:f4:e7:a8:bc:ee:6c:56:4c:be:63:53:
         90:63:de:29:2c:4a:75:bc:16:dc:b9:15:4d:57:c8:7c:bb:e2:
         10:8c:96:50:ae:be:87:45:99:73:27:a0:ee:37:a7:81:87:ac:
         11:e1:44:63:e3:60:5b:2e:44:2f:4a:df:4f:d6:43:98:38:74:
         7d:75:52:7a:4b:84:e1:89:fc:51:8f:89:ef:70:06:31:83:8e:
         2a:75:ab:fc:32:e7:16:fc:48:48:24:54:29:2f:6e:b2:31:58:
         d2:c7:60:e9:32:ff:0f:78:cd:70:0a:f9:20:d8:d6:95:55:3d:
         72:e8:25:4f:a1:63:bf:ce:21:9e:65:cc:8c:7a:e1:4b:48:fd:
         c2:c1:47:d7:b3:d0:8b:ae:63:8c:38:c2:1a:58:ec:96:58:6b:
         c2:16:e1:9e:19:b1:0d:b6:8f:94:f4:da:07:cc:70:6e:c5:6a:
         b7:ca:b0:42:a6:15:8e:63:0c:e4:c5:df:7c:2f:04:4d:22:ee:
         82:5c:62:58:5a:4c:17:1a:15:c5:20:f1:a1:fd:c4:3b:8c:37:
         65:d6:1f:43:49:cd:01:8b:a9:14:05:c1:1d:71:b8:0d:30:6f:
         0e:4f:dc:31:9b:50:f6:68:41:a8:7c:05:99:d8:34:34:f8:7f:
         0b:c4:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:38 2025 by rpki-client