Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3233203d3e20323731303732.roa
File:                     3137392e34382e3130302e302f32322d3233203d3e20323731303732.roa (raw, json)
Hash identifier:          GZTJMvtL3Orp5hFVMACFKrnVr/b4oscmdmb7V7goaPk=
Subject key identifier:   CB:14:31:61:0B:DD:56:D8:20:13:80:FD:5C:B9:19:45:AD:68:77:F3
Certificate issuer:       /CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
Certificate serial:       09B220D3DAAAC703D7D16514A9D3920FA102F1E6
Authority key identifier: D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3233203d3e20323731303732.roa
Signing time:             Sat 14 Dec 2024 14:39:17 +0000
ROA not before:           Sat 14 Dec 2024 14:34:17 +0000
ROA not after:            Sat 13 Dec 2025 14:39:17 +0000
asID:                     271072
IP address blocks:        179.48.100.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Tue 17 Dec 2024 01:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b2:20:d3:da:aa:c7:03:d7:d1:65:14:a9:d3:92:0f:a1:02:f1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79E6FA1BCB46B68863FF39B03FDADF551198EEC
        Validity
            Not Before: Dec 14 14:34:17 2024 GMT
            Not After : Dec 13 14:39:17 2025 GMT
        Subject: CN=CB1431610BDD56D8201380FD5CB91945AD6877F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:74:ff:5e:2a:97:08:25:0d:b5:32:fd:60:
                    93:c5:6f:f6:b0:b0:24:61:10:5f:b7:80:c8:80:9b:
                    15:df:10:83:44:26:94:0c:57:ba:e3:a5:e4:f1:6b:
                    89:e1:ea:4e:d9:af:3b:2c:ea:8d:04:e2:5a:0c:f9:
                    38:06:db:5a:76:2a:8f:11:48:43:77:7a:a3:50:4d:
                    9b:12:1e:30:86:71:0e:c1:7f:0d:23:a1:09:07:17:
                    dd:fd:db:7d:06:77:f0:b6:c6:60:df:6f:3e:e6:a0:
                    83:5e:85:45:57:c5:9b:35:5c:ba:8f:d7:8a:2a:91:
                    b4:c6:d5:ad:76:fe:37:c3:17:f6:ff:21:2a:60:db:
                    78:f2:dc:ea:9b:2b:cf:af:74:0c:cc:5f:de:ef:39:
                    fc:81:1c:c7:34:7d:bf:c3:06:d2:a3:07:5d:10:f5:
                    fa:1f:a7:be:e4:93:7d:0d:0f:06:9b:a2:2b:bb:a8:
                    b5:eb:17:bb:a0:95:61:13:0a:a8:54:35:fe:68:ec:
                    9a:3a:56:bb:94:08:27:54:a7:5e:ec:c0:a2:2c:96:
                    f7:10:a2:8f:d2:a7:2c:4a:ca:40:12:74:c2:5c:fa:
                    88:19:8b:c2:b9:bf:00:e0:2d:c7:87:99:a3:72:16:
                    bb:fc:bc:b1:35:72:f5:2b:12:f4:d0:68:da:cb:18:
                    fa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:14:31:61:0B:DD:56:D8:20:13:80:FD:5C:B9:19:45:AD:68:77:F3
            X509v3 Authority Key Identifier:
                keyid:D7:9E:6F:A1:BC:B4:6B:68:86:3F:F3:9B:03:FD:AD:F5:51:19:8E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79E6FA1BCB46B68863FF39B03FDADF551198EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/3137392e34382e3130302e302f32322d3233203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:c0:d5:dc:23:7c:d2:bc:ea:5b:4a:53:ff:c0:48:b9:f5:b0:
         87:51:10:64:28:f7:0e:37:de:d4:fb:16:2d:e4:9d:d0:97:88:
         95:96:b8:92:8a:be:62:7c:98:17:c5:c7:ac:28:02:2a:fb:c8:
         5c:ac:be:9f:84:ba:42:ae:1e:5c:12:6c:61:14:12:45:be:85:
         43:36:70:c8:be:10:ac:83:59:00:10:b9:d4:d2:21:f0:5d:44:
         85:b9:e0:7f:98:ca:79:22:b3:ef:57:4d:02:e7:9d:9e:91:90:
         7f:79:41:c1:bb:93:47:49:be:8e:67:f7:10:05:71:ae:ee:54:
         fc:35:a9:e7:f0:3a:f3:54:64:54:56:a3:c0:78:d8:09:f4:e7:
         d4:3b:bd:5b:c9:1c:28:55:fa:87:e5:60:e1:b1:a1:cc:07:d5:
         ab:a2:56:aa:22:b6:09:d4:c6:60:a8:1f:43:e2:1c:0f:03:c2:
         75:dc:f8:bc:22:7c:19:1d:2b:e1:5e:40:5e:41:a8:e0:ab:20:
         99:e6:38:99:65:eb:96:61:72:89:09:7f:23:3e:bb:4f:78:6f:
         4a:4e:25:8a:a9:60:9f:9e:40:97:97:f1:4e:ea:08:eb:41:3f:
         19:15:a2:42:4d:77:f2:3b:97:ad:0c:2c:db:e0:16:4f:df:24:
         4e:91:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:42:55 2025 by rpki-client