Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e36302e302f32322d3232203d3e20323633303834.roa
File:                     3137372e32312e36302e302f32322d3232203d3e20323633303834.roa (raw, json)
Hash identifier:          911kk2JQIT9T8pMQ4ytmus22NBWnTRMQX6WDw25YNJY=
Subject key identifier:   C8:CD:4D:7E:33:2C:48:2B:ED:B0:4F:F0:34:CD:DE:28:D0:8D:CD:18
Certificate issuer:       /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
Certificate serial:       3E11052768AFA8E078776FFE13A422AF5DF23E16
Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e36302e302f32322d3232203d3e20323633303834.roa
Signing time:             Wed 24 Apr 2024 17:24:04 +0000
ROA not before:           Wed 24 Apr 2024 17:19:04 +0000
ROA not after:            Wed 23 Apr 2025 17:24:04 +0000
asID:                     263084
IP address blocks:        177.21.60.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:11:05:27:68:af:a8:e0:78:77:6f:fe:13:a4:22:af:5d:f2:3e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3
        Validity
            Not Before: Apr 24 17:19:04 2024 GMT
            Not After : Apr 23 17:24:04 2025 GMT
        Subject: CN=C8CD4D7E332C482BEDB04FF034CDDE28D08DCD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:e6:47:9f:74:fc:26:ad:02:5d:51:84:2b:
                    61:dd:f6:d9:ce:de:88:17:f8:b3:00:65:31:73:7b:
                    54:b1:a0:0c:27:8c:a1:05:45:39:70:aa:34:39:81:
                    0f:0b:df:cb:96:1e:ff:2f:8c:cc:c7:be:b1:ca:29:
                    7d:a0:25:45:b0:a8:67:fa:ff:6d:54:fe:86:6d:84:
                    dc:06:d0:0c:1a:99:29:4d:e2:1c:8a:bc:ec:1b:dc:
                    1b:6a:1d:17:b0:ec:73:dd:29:51:fa:36:3e:ae:2a:
                    22:ad:98:9d:58:76:c2:ac:ee:29:f1:bf:28:84:d5:
                    16:7e:bc:21:c6:74:5a:40:25:f6:d0:19:49:e8:f0:
                    92:32:fd:b2:d8:e0:e2:de:06:4f:70:65:08:1f:10:
                    f8:b3:9d:e8:42:3c:89:64:36:e9:c5:a0:cc:a6:35:
                    65:f0:4a:63:a5:00:ec:0c:25:c8:69:5d:ac:a2:b8:
                    3d:35:da:a2:b6:96:df:10:ec:f3:96:45:02:d9:96:
                    61:91:e4:42:ae:ad:53:32:6a:ce:d1:bb:30:d6:e9:
                    9e:46:29:d8:9a:96:91:35:46:dd:20:11:28:b4:a1:
                    16:15:c4:88:3c:e6:84:70:05:dd:b3:d7:d0:e1:a2:
                    d2:c4:87:5c:3f:7f:a1:78:dd:26:6a:8e:51:9f:35:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CD:4D:7E:33:2C:48:2B:ED:B0:4F:F0:34:CD:DE:28:D0:8D:CD:18
            X509v3 Authority Key Identifier:
                keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/3137372e32312e36302e302f32322d3232203d3e20323633303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:45:34:99:84:c0:5e:d3:67:29:12:98:e5:7a:7e:d4:a9:d5:
         f7:dc:12:55:f1:79:11:e1:14:7c:11:90:dc:8f:ec:d0:e8:07:
         ce:5d:d9:80:29:b5:83:db:4b:32:d6:93:90:50:0e:68:a4:ec:
         7b:a8:2a:63:7d:d5:9d:cd:b1:0e:76:fd:13:b3:32:c1:5c:3e:
         84:6a:d2:d1:bf:3b:29:e7:85:18:d2:d9:e2:0b:b6:16:f8:e8:
         5e:56:9b:8e:51:8d:00:0d:59:c9:38:b9:b3:1b:b0:c7:db:98:
         fc:05:08:7d:20:4f:86:16:98:ed:6f:bf:18:eb:37:9d:58:1a:
         60:c5:56:47:73:47:1f:23:cf:d4:15:6c:cb:11:c2:68:4b:b9:
         49:ac:12:1f:f8:93:c2:58:bd:00:a7:09:22:87:e3:0d:b3:4b:
         5c:7f:68:a8:b8:a1:f3:41:27:07:c7:d9:0b:9d:e3:91:25:df:
         54:b3:1e:d8:ce:d9:b9:31:d6:45:28:18:a2:e9:37:41:34:55:
         58:6e:ef:7b:88:2b:af:54:4f:00:7e:80:27:a0:9f:ad:c6:51:
         a2:f7:2a:01:34:1d:d3:af:c3:98:ba:ca:3c:6c:c6:a6:f6:56:
         f0:52:99:18:8a:51:64:a1:25:e8:18:81:e2:a4:6d:2f:d9:29:
         90:90:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:12 2025 by rpki-client