Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa
File:                     3137372e32312e35362e302f32322d3232203d3e20323633303834.roa (raw, json)
Hash identifier:          4UC3gAdtXL+nuX/uSO2aXpC9CwZMw7S7x8W9PXc1Kek=
Subject key identifier:   91:F4:0C:98:26:7A:C3:F6:CB:68:78:92:C2:C1:9F:79:DA:53:6D:41
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       5385F6C1A01E2EC93117858DF341533715FA6AA3
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 18:20:40 +0000
ROA not before:           Wed 24 Apr 2024 18:15:40 +0000
ROA not after:            Wed 23 Apr 2025 18:20:40 +0000
asID:                     263084
IP address blocks:        177.21.56.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:85:f6:c1:a0:1e:2e:c9:31:17:85:8d:f3:41:53:37:15:fa:6a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 18:15:40 2024 GMT
            Not After : Apr 23 18:20:40 2025 GMT
        Subject: CN=91F40C98267AC3F6CB687892C2C19F79DA536D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:8b:96:7b:6f:d6:b9:fa:aa:36:33:13:0d:
                    2e:3a:40:70:90:a6:e2:dc:25:cd:24:57:9f:8b:48:
                    e3:30:08:61:17:6c:3d:c7:a8:d7:d2:69:aa:1f:c2:
                    c6:35:a7:dd:d6:9f:5a:29:cc:8e:d2:10:4a:33:77:
                    38:9d:28:4f:96:13:dd:f0:ee:a1:8a:9f:01:ca:b9:
                    a3:68:c4:73:7a:c4:e7:7a:42:df:90:b3:4e:0b:44:
                    9c:ef:a2:61:08:82:8a:57:52:20:8d:be:54:d3:f9:
                    75:8e:74:2b:df:01:a5:66:e9:a1:26:2e:80:d7:56:
                    2f:5c:c5:3a:89:f6:b9:25:41:70:51:72:ed:ab:9a:
                    cb:b2:3c:8e:d3:6a:6b:27:ed:72:f1:49:e5:ed:cf:
                    4c:7b:68:ea:12:0a:0c:3a:d6:58:1b:e5:de:a5:1c:
                    20:92:1d:81:43:3d:bc:23:cf:3d:30:50:f8:2d:28:
                    c1:0e:df:48:e0:85:cd:06:0b:70:40:2b:72:eb:ef:
                    5e:f3:29:9f:4f:ec:ad:60:01:8d:7a:91:82:3d:46:
                    bf:3c:73:ce:62:6f:0e:97:b0:88:de:d2:04:db:12:
                    3f:d6:cc:3f:d8:9b:b8:be:8d:92:e3:dd:57:db:bb:
                    3a:f5:f8:45:31:7d:c6:d2:13:9d:fd:78:ec:5a:7e:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:0C:98:26:7A:C3:F6:CB:68:78:92:C2:C1:9F:79:DA:53:6D:41
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e35362e302f32322d3232203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:f3:06:36:31:f3:d8:25:c2:f8:50:da:5b:d0:fd:65:fa:
         68:67:a9:86:b3:55:45:7b:1b:19:fb:cc:90:96:06:e3:42:49:
         74:2a:9b:1a:1f:d2:cf:60:6f:a0:f6:00:fc:d1:23:1d:31:82:
         b9:3a:e6:75:e3:94:75:c4:32:b8:fe:2d:ef:6a:3e:0d:28:cd:
         86:a7:62:94:3e:f7:b0:cc:db:84:c6:da:9b:cb:5c:a3:b1:09:
         a2:db:63:63:f9:c3:c5:81:13:cd:c3:f7:ba:2c:29:63:a7:d8:
         46:cc:8c:19:48:f0:de:7c:3e:8e:11:68:b7:ad:27:9b:5c:33:
         c5:cd:ee:cb:15:9c:71:14:39:2a:b3:3c:7b:92:4b:14:27:57:
         1f:4e:a0:0e:d9:20:15:8b:71:86:45:e5:e8:df:27:1c:c7:88:
         35:f7:4f:53:fa:5a:11:92:56:bd:d7:e3:7e:84:54:23:1a:43:
         ec:28:f3:3c:0b:c4:47:75:2e:eb:47:c6:fe:02:c0:e5:29:93:
         e6:4d:24:29:07:fc:72:b0:18:e1:19:60:a2:1d:cf:00:5c:eb:
         6c:d7:28:37:b4:71:cb:f5:a5:e9:b2:25:48:9b:53:d5:e8:0f:
         fd:19:15:a1:a9:5c:e0:b3:39:36:07:be:24:d7:72:6a:b4:f0:
         79:7a:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:22 2025 by rpki-client