Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa
File:                     3137372e39332e3234382e302f32312d3231203d3e203532393935.roa (raw, json)
Hash identifier:          2RESSxkLTIEwmr3nRcYL+MCX1yoF8/buKzdfRQXugUQ=
Subject key identifier:   DC:1B:0F:A2:EE:A3:C3:E3:19:9E:7A:5D:46:B2:9B:80:C9:A9:C9:6D
Certificate issuer:       /CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Certificate serial:       45B6CDE969FE2146842E40CFCE82DADAE4902EEE
Authority key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa
Signing time:             Wed 03 Apr 2024 18:32:32 +0000
ROA not before:           Wed 03 Apr 2024 18:27:32 +0000
ROA not after:            Wed 02 Apr 2025 18:32:32 +0000
asID:                     52995
IP address blocks:        177.93.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Wed 02 Apr 2025 18:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b6:cd:e9:69:fe:21:46:84:2e:40:cf:ce:82:da:da:e4:90:2e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
        Validity
            Not Before: Apr  3 18:27:32 2024 GMT
            Not After : Apr  2 18:32:32 2025 GMT
        Subject: CN=DC1B0FA2EEA3C3E3199E7A5D46B29B80C9A9C96D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:d5:ff:69:ab:d4:2c:d9:78:6a:71:d6:ff:
                    53:11:89:76:a9:b4:d9:5c:d4:0d:2e:14:60:53:64:
                    b4:bb:5a:84:8b:19:27:0f:a9:97:b7:71:f1:41:cc:
                    7d:fa:e9:08:ef:d1:36:6e:a7:67:21:77:f9:97:0b:
                    7a:4b:6a:ec:39:73:b7:4f:56:ae:bc:ec:27:48:e0:
                    55:40:33:b9:0d:80:bc:c8:46:dd:ed:31:65:26:11:
                    a0:c2:1a:fa:e1:94:05:6e:7b:f5:68:79:7a:32:53:
                    11:bb:12:1b:71:0a:bf:9f:5a:da:7f:61:9f:fd:82:
                    ed:dd:62:3f:e0:e3:d7:85:4b:db:79:66:4b:50:19:
                    01:6b:c1:2b:ac:5f:17:5f:f1:8f:dd:ee:7c:b7:d6:
                    5a:c5:a8:7d:fb:d4:e2:38:d6:11:8e:a6:b1:5a:c1:
                    10:63:41:f3:b5:74:46:97:9b:d5:36:67:73:d4:4b:
                    fb:35:bd:07:f1:c8:88:a8:be:9a:c9:bb:6e:a5:53:
                    77:bc:2a:75:6e:f1:c4:8a:11:d3:32:b0:44:38:45:
                    eb:69:3f:27:6d:79:ca:c8:5b:54:00:08:f4:fa:4a:
                    c5:a5:0a:62:7a:4f:74:4c:dd:1e:22:c9:dd:b8:73:
                    fc:fc:fe:48:e7:64:a1:83:87:30:28:7d:31:44:c0:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1B:0F:A2:EE:A3:C3:E3:19:9E:7A:5D:46:B2:9B:80:C9:A9:C9:6D
            X509v3 Authority Key Identifier:
                keyid:25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/3137372e39332e3234382e302f32312d3231203d3e203532393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:22:f2:1e:4b:9e:55:e6:92:49:9f:48:7d:f2:3b:73:2f:3a:
         06:98:ad:38:19:e6:13:53:15:d4:19:d2:a9:f0:7e:73:c7:c5:
         1b:b8:9c:a8:18:65:a3:0c:fa:dd:3f:4c:0f:07:b8:93:4d:b1:
         a5:66:f3:13:40:48:44:e9:94:7b:da:8b:40:b2:87:89:a1:4b:
         da:6d:e8:79:52:a3:0e:f5:d4:2c:49:9b:23:95:0d:28:23:76:
         ed:79:6f:00:5d:d5:98:8e:f4:65:1c:f2:00:6c:ab:9e:e9:57:
         4b:c5:fe:68:c3:6a:d1:1a:a5:b7:51:5a:0e:2d:32:9d:a4:37:
         86:df:92:b7:b0:24:fa:a8:75:1f:55:c8:a2:9a:e4:65:bf:bb:
         2e:ef:26:85:43:73:59:c5:a5:dc:97:36:71:85:00:8b:9c:9f:
         5c:ca:5e:cd:25:74:02:76:8b:80:15:1a:fc:dc:11:b5:c9:31:
         fa:ba:e1:d7:e6:a8:02:c6:5a:a2:f2:96:5b:3d:43:18:90:fd:
         35:7c:26:f1:72:42:e9:8f:9c:c4:4f:6d:9a:10:f8:07:88:d9:
         8f:e7:45:1b:8a:f0:c8:fa:73:4c:31:61:06:ff:d2:c7:8c:c2:
         25:03:f1:11:a2:c3:85:8c:ef:da:94:85:a3:b5:20:da:42:c2:
         c0:37:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 01:33:34 2024 by rpki-client on console-ams.rpki-client.org