Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32322d3232203d3e20323633303834.roa
File:                     3137372e32312e34382e302f32322d3232203d3e20323633303834.roa (raw, json)
Hash identifier:          17aUO5lyXs2MFV7reM3BuFwPAA2TJFmOh0h1KbpHR9w=
Subject key identifier:   86:AC:55:4B:07:8D:C2:05:05:4F:DD:C2:15:7D:9A:E7:89:B4:A2:19
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       7E8CAF9E81C821BD747E30EE3BC0A3E34ED8CC7A
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32322d3232203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 18:20:03 +0000
ROA not before:           Wed 24 Apr 2024 18:15:03 +0000
ROA not after:            Wed 23 Apr 2025 18:20:03 +0000
asID:                     263084
IP address blocks:        177.21.48.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8c:af:9e:81:c8:21:bd:74:7e:30:ee:3b:c0:a3:e3:4e:d8:cc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 18:15:03 2024 GMT
            Not After : Apr 23 18:20:03 2025 GMT
        Subject: CN=86AC554B078DC205054FDDC2157D9AE789B4A219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:f0:5f:21:41:2f:9e:f9:f8:df:3a:17:0e:
                    28:8b:bf:62:24:9f:c6:0f:26:b7:57:83:bd:c3:c8:
                    a9:8c:b5:5d:ac:c8:d9:8e:eb:89:a9:90:f0:21:10:
                    88:45:5f:d8:0a:fb:7f:e6:96:7e:95:09:86:ef:cb:
                    1a:60:c9:d2:09:40:b8:26:61:7a:1b:af:64:86:ba:
                    b1:2b:01:00:11:14:39:d8:f0:5a:1f:f6:7c:1b:07:
                    c5:a8:0b:cc:70:ae:aa:cc:f7:cb:9d:23:56:55:e7:
                    80:60:8a:97:f3:84:95:a5:09:52:4b:33:db:95:bc:
                    29:a7:d1:90:49:36:ba:84:72:b3:8e:c7:c8:86:83:
                    55:e9:2d:02:67:3a:11:43:44:7f:d4:99:3e:f7:12:
                    ef:e8:c1:b1:9d:c7:6e:ed:33:bc:02:64:28:70:04:
                    33:11:e8:16:91:78:4d:1d:3c:dc:8c:9c:32:ac:8e:
                    c3:77:5a:8f:f4:7e:a9:27:a8:94:bf:ea:b0:df:78:
                    87:87:a0:e1:d8:7d:f0:07:de:0a:37:77:bd:b2:b5:
                    46:a4:c6:25:05:3b:c3:cc:12:fb:98:e4:8d:bf:a3:
                    9e:69:af:4c:26:85:86:bc:df:d8:29:67:7d:1f:06:
                    c0:40:d6:bd:6d:19:1a:8d:3f:28:49:8b:30:f2:45:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AC:55:4B:07:8D:C2:05:05:4F:DD:C2:15:7D:9A:E7:89:B4:A2:19
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e34382e302f32322d3232203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:55:17:ca:c9:23:b7:a1:1b:33:80:ab:6d:39:22:33:20:
         f0:cd:a0:c1:05:45:dd:55:a2:5f:12:e3:14:56:8a:e6:ee:ff:
         50:a4:00:9d:24:35:71:1f:36:19:0e:fb:33:8b:00:7d:ee:7a:
         8b:a0:f5:0e:f3:43:1d:ad:a2:6f:40:80:c7:89:0d:6f:1c:d2:
         06:22:60:42:7f:ea:d8:56:33:ae:a4:a2:32:43:24:57:b0:dc:
         a2:ec:6f:cd:74:5e:78:93:42:20:50:f3:29:75:7d:c5:37:8d:
         f5:69:ea:10:9a:9d:1e:2f:8b:35:1c:87:c1:03:b9:62:c8:8f:
         29:4d:c8:ab:00:36:0f:41:ce:52:f2:3e:5e:fd:7b:a9:97:bf:
         a9:89:40:ef:50:41:c7:4d:02:99:df:b3:32:69:02:62:41:ed:
         b0:ed:e0:2a:1a:ff:7f:ed:b7:ea:a1:dc:86:54:b7:b7:8e:97:
         64:46:00:2a:e8:87:ca:a0:c2:6b:79:09:a1:0e:89:f5:34:f2:
         e9:9b:ef:ed:0d:57:35:4d:e0:02:a0:6b:be:73:95:34:80:eb:
         92:6a:8e:f3:df:df:62:79:1a:43:72:42:cf:d7:89:9e:cb:05:
         5e:28:0e:ad:f3:9d:c4:9f:ba:98:18:43:fb:cc:88:2e:60:92:
         d2:35:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:32 2025 by rpki-client