Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234362e302f32332d3233203d3e20323633393830.roa
File:                     3133382e3235352e3234362e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          icvomo3KrhW7KMgEu0Dkt7fspSG1UrEmxTjXN0X//lY=
Subject key identifier:   39:D0:C2:5C:C7:4A:D1:29:29:25:BB:89:76:85:8B:54:F8:73:D6:3D
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       0B5B10B71C96A3BD94CC9E2999F916877E494A74
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234362e302f32332d3233203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:58:13 +0000
ROA not before:           Tue 23 Apr 2024 12:53:13 +0000
ROA not after:            Tue 22 Apr 2025 12:58:13 +0000
asID:                     263980
IP address blocks:        138.255.246.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:10:b7:1c:96:a3:bd:94:cc:9e:29:99:f9:16:87:7e:49:4a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:53:13 2024 GMT
            Not After : Apr 22 12:58:13 2025 GMT
        Subject: CN=39D0C25CC74AD1292925BB8976858B54F873D63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:72:6e:2b:16:20:12:89:42:b9:9f:f2:22:
                    0d:37:0a:39:65:cb:8d:4f:bb:34:6d:61:c4:d3:ff:
                    d7:c5:f2:0b:95:04:b2:d6:25:c1:0b:b8:64:07:b2:
                    82:c1:32:94:a3:90:b3:98:ea:54:1d:5c:f2:f1:80:
                    7f:3a:2b:83:97:f6:97:c0:e3:ba:85:d5:e5:0b:7c:
                    7e:f8:7a:31:2a:0b:10:41:db:ef:bf:55:23:cf:48:
                    96:6f:f1:7e:a9:29:2b:3e:d6:bd:7c:72:d9:cf:51:
                    fb:9a:5a:ec:82:8c:23:3d:e4:76:3c:f5:4e:53:f6:
                    a9:33:54:81:47:ea:e7:04:c9:b0:eb:1f:e0:02:2f:
                    56:0c:e8:a1:0c:d8:9d:51:48:22:6a:c3:b8:ec:e5:
                    3f:76:f9:5b:f3:2b:cb:d2:d9:e2:0a:6a:0d:b5:c2:
                    0a:e7:7f:fc:0a:35:48:a3:a6:53:5c:ae:3e:af:62:
                    e0:2f:97:60:ac:c8:58:31:3f:49:3d:7c:fd:4b:a7:
                    1e:3e:38:54:0c:b6:9e:25:28:d2:40:6d:91:aa:7c:
                    47:44:9f:f2:1e:f4:ba:fa:1f:3f:93:9f:6a:a0:84:
                    d3:85:d8:2f:1f:d8:6c:a9:6d:86:b2:d1:f6:da:f4:
                    b6:5f:3f:64:67:47:ab:23:39:35:10:9f:5b:b9:63:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:C2:5C:C7:4A:D1:29:29:25:BB:89:76:85:8B:54:F8:73:D6:3D
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3133382e3235352e3234362e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:48:97:5c:17:27:fa:e8:0f:00:48:b1:81:89:a6:c3:a8:c2:
         6c:40:a6:b5:e5:84:f6:46:88:e6:16:53:f3:f5:48:30:84:c9:
         f8:8c:fc:be:bc:90:41:a3:04:a3:1b:d9:ba:4a:11:3f:5c:06:
         76:63:cd:dd:e6:5d:bf:8c:0f:d4:05:47:be:c0:4a:e5:ed:b1:
         7c:ea:15:0c:e2:78:95:65:69:fd:e7:f6:77:c7:8b:3d:b7:fe:
         3b:6f:26:d8:4e:7f:22:31:0c:14:e9:0b:1c:1d:b6:b3:39:2e:
         26:2f:91:bf:cc:a5:32:2f:59:44:22:a0:3e:2b:db:c0:61:aa:
         1f:7b:41:21:6b:05:fe:d7:7c:7e:f4:a3:06:3d:b1:06:76:71:
         f9:56:d4:d9:b8:1c:78:f0:3c:d9:fb:db:27:99:45:1e:92:4c:
         96:88:38:1c:08:00:0a:0e:cb:92:3f:7d:fb:c6:a8:11:15:e3:
         91:c0:ef:bb:cf:bc:7f:83:ad:70:09:51:8d:05:2f:58:cb:e3:
         da:a9:11:17:03:1a:30:27:ea:9b:50:75:4c:80:93:b3:88:52:
         33:51:60:2b:78:4b:f4:97:26:9e:58:17:10:bb:b7:a9:a5:d0:
         89:4a:37:9b:be:68:e1:2a:ec:a1:03:5b:3e:18:cf:76:8c:f9:
         12:2b:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:24 2025 by rpki-client