Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3233203d3e20323633393830.roa
File:                     3137302e3234352e3132322e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          xFlbbbdnfQ/sRjkI/nOXay60gk66m9D1aMC1D5WmzW0=
Subject key identifier:   16:D4:94:DE:40:75:3A:1B:BE:9F:39:B4:51:B6:70:A0:23:E3:B1:6B
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       3EF542354B71B1B9532A366875A722DA6BEB0FC0
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3233203d3e20323633393830.roa
Signing time:             Tue 23 Apr 2024 12:58:44 +0000
ROA not before:           Tue 23 Apr 2024 12:53:44 +0000
ROA not after:            Tue 22 Apr 2025 12:58:44 +0000
asID:                     263980
IP address blocks:        170.245.122.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f5:42:35:4b:71:b1:b9:53:2a:36:68:75:a7:22:da:6b:eb:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Apr 23 12:53:44 2024 GMT
            Not After : Apr 22 12:58:44 2025 GMT
        Subject: CN=16D494DE40753A1BBE9F39B451B670A023E3B16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:8f:ff:c8:31:01:a7:74:0d:45:1f:0d:2a:
                    44:cc:f3:81:33:e1:b7:9e:63:1d:c5:4c:fd:b1:1a:
                    cb:d2:4e:1b:7e:df:91:cf:9f:30:75:3a:21:46:72:
                    63:f0:e6:0f:91:00:66:1d:60:20:08:b8:00:af:42:
                    44:5a:d5:2d:a5:bd:63:0a:28:e7:29:81:ed:6f:6b:
                    4e:f5:23:c7:7e:9b:5a:bf:ef:05:1a:64:18:7e:9f:
                    b4:c1:3d:05:55:eb:68:18:ba:f2:c9:ac:9c:05:a3:
                    d0:51:dc:f4:70:5b:d2:97:8a:e2:63:46:5c:41:6b:
                    9d:48:2e:fd:66:07:a7:99:8f:76:02:6a:10:66:9e:
                    ca:63:0b:7f:6d:fa:2e:03:98:eb:77:f3:02:0f:bc:
                    c2:c7:ad:a7:79:62:4d:af:5d:36:63:1a:1f:14:65:
                    8d:2f:bb:1a:44:ce:fb:5d:0e:4b:a5:c2:ee:33:bb:
                    78:60:db:43:30:61:6a:3e:d8:39:64:8b:04:b7:61:
                    b3:9f:b0:bc:fa:b6:82:83:1a:34:0e:d5:aa:47:f7:
                    bd:dc:66:f1:08:e8:a4:6f:b4:a6:b8:58:28:db:fb:
                    5f:d4:cc:e4:03:41:d8:f7:31:38:9b:e8:2c:db:4f:
                    5c:5b:5d:8c:8a:ad:87:5c:af:dd:82:cb:14:67:f3:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:94:DE:40:75:3A:1B:BE:9F:39:B4:51:B6:70:A0:23:E3:B1:6B
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3137302e3234352e3132322e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:10:e1:7c:8d:ef:e5:fe:58:30:6e:1a:ea:0e:b5:a4:db:fe:
         e1:96:79:e9:ae:bd:f1:8c:f8:04:58:7e:24:39:35:d4:98:25:
         30:08:20:dc:1d:46:ad:5b:22:41:40:13:33:a2:e8:cc:35:fb:
         ee:b7:ac:c2:01:c3:7e:49:1c:88:36:bc:e8:59:ec:e2:1b:92:
         c6:60:a2:59:e2:1a:33:4f:9f:3c:df:ef:a9:84:00:e5:82:f5:
         e6:cc:3c:47:16:8a:53:2a:4e:db:36:56:d0:3a:69:cc:68:83:
         a0:e8:4d:ba:ca:9d:16:3a:ea:8e:24:0b:20:90:12:7f:55:55:
         ae:8e:b0:0e:6c:c9:49:17:b5:06:26:ed:27:51:70:0b:0a:b4:
         75:cf:a0:92:34:72:bc:4d:eb:d5:8e:19:8b:67:40:9d:39:02:
         a3:92:eb:f1:a2:50:da:b8:5c:d2:d9:47:37:5e:fd:6d:f9:d3:
         ea:b7:87:18:b6:10:42:a1:34:92:ca:d8:a6:ce:4b:ab:d3:f4:
         6c:90:c9:03:05:4b:fd:69:07:de:a7:b6:b4:3f:6c:c2:27:bd:
         74:75:5b:cd:e4:75:18:1f:64:c8:7c:5d:d4:af:64:06:f1:0d:
         9d:3c:3e:04:0d:89:e9:ab:5c:ef:bc:22:b0:13:b3:04:6f:ea:
         e4:bb:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:48 2025 by rpki-client