Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138352e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138352e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          maITIXsryPe2UqzDR++iBdkC7lUhfydUllTLV1vmyuw=
Subject key identifier:   53:77:9B:82:64:83:76:36:E3:AC:21:CB:FA:2D:5E:7B:E8:17:D9:77
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       1B3048758772AAD7171D517C660284372F25E350
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138352e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 26 Jul 2024 17:48:27 +0000
ROA not before:           Fri 26 Jul 2024 17:43:27 +0000
ROA not after:            Fri 25 Jul 2025 17:48:27 +0000
asID:                     28589
IP address blocks:        200.152.185.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 26 Jul 2024 17:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:30:48:75:87:72:aa:d7:17:1d:51:7c:66:02:84:37:2f:25:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jul 26 17:43:27 2024 GMT
            Not After : Jul 25 17:48:27 2025 GMT
        Subject: CN=53779B8264837636E3AC21CBFA2D5E7BE817D977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:0e:6a:83:b7:93:87:84:15:34:5a:12:d3:
                    8b:37:d7:e2:89:2f:ae:34:e4:e1:12:f9:26:4c:dd:
                    8f:f2:a6:15:71:17:fc:66:c1:f6:fc:ee:f9:d8:26:
                    f2:4d:08:41:fe:1b:af:a1:6f:38:bf:ef:48:ab:b0:
                    fa:9b:d9:fe:6d:75:04:0f:9c:60:9d:26:db:11:15:
                    0c:58:e8:07:90:76:81:94:e7:39:0c:98:d4:8c:90:
                    47:38:be:2f:72:67:ab:5d:41:8f:10:21:c5:f0:2e:
                    33:84:46:42:44:99:d0:65:2c:06:73:37:63:c8:5f:
                    91:5e:eb:f8:3b:00:b1:ac:10:db:a9:a9:90:5b:00:
                    14:c9:2d:7f:04:a4:da:15:a6:63:c0:88:6e:b1:ae:
                    77:df:83:d2:4e:06:04:fb:2d:20:14:d7:10:93:76:
                    28:9e:0f:17:cb:59:8b:9b:8f:d6:9a:e8:e4:a0:d1:
                    d5:8c:17:bb:2c:1f:f0:9a:d4:16:65:08:51:b5:e9:
                    d1:3b:c1:d2:7c:56:a3:09:45:78:53:85:6c:42:2a:
                    f9:10:34:98:5b:2c:71:19:bc:4c:0b:7b:c6:87:bf:
                    4f:0c:e2:32:35:d1:5c:52:bc:32:e9:b7:8f:21:e8:
                    74:b0:4f:ac:ed:d9:eb:0b:c2:5e:70:5e:44:f3:fa:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:9B:82:64:83:76:36:E3:AC:21:CB:FA:2D:5E:7B:E8:17:D9:77
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138352e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:67:d3:fd:a8:93:f3:f6:c7:67:a6:54:6b:ca:62:c0:3d:17:
         87:40:04:fe:7a:02:39:c7:e0:a1:cc:5f:79:13:3f:80:57:58:
         12:84:32:23:49:b0:c0:ba:98:90:bd:00:91:d2:e8:57:9e:c1:
         de:05:aa:dc:74:2c:8d:aa:e4:98:b0:3e:c8:02:51:b9:b1:a3:
         99:32:ea:9c:55:4a:e6:8d:24:2f:83:e2:c9:ef:86:ed:9e:a6:
         df:cf:1f:3e:2b:0c:54:94:80:29:24:5e:5d:ad:c9:c5:13:47:
         c6:6d:1d:e7:7b:89:ab:87:11:fb:50:95:12:fa:15:ea:cf:89:
         73:96:a3:8a:10:26:aa:da:b6:df:b6:73:38:8b:6c:81:e2:44:
         d2:3e:f2:d9:04:90:c4:67:af:05:1b:e4:0a:b2:4e:61:3b:20:
         f5:1a:a2:ff:23:fa:3d:7e:c7:8b:9f:30:51:e7:68:03:1d:78:
         68:d7:ee:6d:f3:04:7a:a5:c1:67:a5:4e:74:85:fe:25:24:82:
         3b:f9:dc:de:48:5f:6c:42:63:c9:59:bc:a5:1f:a3:a1:06:7e:
         37:d0:26:83:95:0e:d4:d9:1b:66:2d:d4:6b:11:4a:6e:f6:d7:
         3f:9f:d2:f7:c2:a1:11:70:8a:60:b6:a1:4a:e2:c7:0f:dd:44:
         45:b5:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:23:20 2025 by rpki-client