Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3234203d3e20323633393830.roa
File:                     3136382e3232372e31362e302f32322d3234203d3e20323633393830.roa (raw, json)
Hash identifier:          IYeamzoUU5C3oG3d5wQVHoITtVAIhSJMRV8gR2A3F0s=
Subject key identifier:   86:A3:E2:33:09:81:94:63:8B:07:A5:AC:F0:0B:3D:04:2C:6C:76:B1
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       2EB0376EE5FAFCD7855FE4E1513A24BAFE69B1D1
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3234203d3e20323633393830.roa
Signing time:             Wed 05 Jun 2024 18:37:08 +0000
ROA not before:           Wed 05 Jun 2024 18:32:08 +0000
ROA not after:            Wed 04 Jun 2025 18:37:08 +0000
asID:                     263980
IP address blocks:        168.227.16.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Thu 16 Jan 2025 12:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b0:37:6e:e5:fa:fc:d7:85:5f:e4:e1:51:3a:24:ba:fe:69:b1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Jun  5 18:32:08 2024 GMT
            Not After : Jun  4 18:37:08 2025 GMT
        Subject: CN=86A3E233098194638B07A5ACF00B3D042C6C76B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:06:95:f6:07:3e:f8:e4:73:e5:44:c2:56:
                    87:b5:79:37:8b:8b:bd:47:5b:37:52:18:85:a3:9d:
                    ca:8d:43:e4:20:3e:7d:74:b7:1a:75:82:d9:80:26:
                    c0:70:cb:41:78:ed:fd:87:d3:91:2c:25:bf:72:be:
                    9b:b5:10:36:91:83:40:36:23:71:88:ec:f2:aa:7a:
                    4d:ed:da:39:80:a1:2e:7e:78:92:f6:6e:4c:38:b2:
                    f1:16:47:31:e7:06:ed:ce:a2:ea:89:70:c2:b8:42:
                    a8:54:27:b5:1b:aa:40:90:69:bd:1a:bd:0a:a8:71:
                    6b:83:1f:b6:2b:84:49:a8:27:59:c8:32:ba:84:9f:
                    d3:fb:07:57:d0:44:7b:6a:19:a9:08:29:aa:f8:60:
                    ce:d4:b5:db:ce:ad:ab:38:38:c7:34:ef:96:94:e3:
                    84:17:94:e0:16:d1:6f:c5:df:df:7b:32:11:14:ed:
                    fe:70:4a:70:eb:80:34:8c:ec:6c:60:66:c3:e9:8d:
                    70:e5:a0:41:1d:ab:2d:7d:31:bb:8d:70:88:5b:ef:
                    08:52:51:49:9b:02:bc:d4:60:ba:cd:13:30:74:aa:
                    b2:05:f2:6e:e1:1e:1a:bc:7d:d4:4e:e2:c2:4d:74:
                    cd:9a:45:87:6a:07:50:25:c1:ec:73:19:60:d9:b5:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A3:E2:33:09:81:94:63:8B:07:A5:AC:F0:0B:3D:04:2C:6C:76:B1
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3234203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:da:86:2e:dc:54:70:56:e2:fc:92:42:d0:d5:0a:d5:02:28:
         5d:b3:75:40:53:b0:c1:bd:63:5a:1c:bf:f9:38:94:04:c7:4c:
         29:05:af:bc:a3:c2:89:7d:4c:81:40:6f:fc:d7:07:4e:8d:33:
         8b:09:b9:bb:04:fd:e7:7d:83:85:dd:31:47:b1:ef:7d:b2:07:
         23:9f:fd:12:5b:40:ba:77:38:64:6b:f7:3f:11:3a:df:a8:6c:
         3d:3b:56:f3:4f:44:b6:9c:1a:25:7a:62:67:8f:22:27:bd:2b:
         af:99:13:c5:b1:c0:a0:1e:cf:18:33:47:2c:53:7e:3d:71:e6:
         0c:b4:66:4c:71:44:80:95:67:99:2b:2a:bb:82:ef:f0:fb:c8:
         2b:ca:62:9f:14:b5:5a:1f:c4:5e:3c:a3:a0:34:ce:32:97:dd:
         0e:35:23:41:33:1b:b7:1b:1a:57:a6:9a:5f:24:17:56:a9:77:
         f0:9e:a0:0c:95:77:4c:c2:13:be:01:a5:2c:fe:d5:cd:78:c9:
         3c:69:79:fe:d9:7f:0b:7a:fa:d1:76:a6:95:b2:5b:3e:de:e4:
         40:18:06:91:0e:1b:03:98:f1:81:2b:c9:19:b5:85:28:c0:31:
         10:44:5a:97:2a:fa:e4:8f:b9:4f:6d:41:46:3b:f0:a3:b2:d9:
         48:14:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:21 2025 by rpki-client