Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353735.roa
File:                     3133382e3138352e3233302e302f32342d3234203d3e203631353735.roa (raw, json)
Hash identifier:          5D0AwrlLebaf7gPXUF/7AUd6dPXJlQ3XhlMLoJv9/9E=
Subject key identifier:   4F:B9:FB:09:1C:2C:C7:FE:FB:8B:39:D9:C1:05:65:E9:E1:48:FE:52
Certificate issuer:       /CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
Certificate serial:       4850A288D2EE6C6D021294BDAF7B4D32098600E9
Authority key identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353735.roa
Signing time:             Thu 19 Dec 2024 08:07:39 +0000
ROA not before:           Thu 19 Dec 2024 08:02:39 +0000
ROA not after:            Thu 18 Dec 2025 08:07:39 +0000
asID:                     61575
IP address blocks:        138.185.230.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 05 Jan 2025 04:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:50:a2:88:d2:ee:6c:6d:02:12:94:bd:af:7b:4d:32:09:86:00:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
        Validity
            Not Before: Dec 19 08:02:39 2024 GMT
            Not After : Dec 18 08:07:39 2025 GMT
        Subject: CN=4FB9FB091C2CC7FEFB8B39D9C10565E9E148FE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:da:15:69:8c:b6:f3:66:98:ad:6d:d4:77:
                    1b:b8:53:67:5c:97:cc:92:ab:e0:20:2b:f9:26:4e:
                    2b:ea:dd:e0:8f:7d:ed:b1:bf:b6:71:2f:52:f9:24:
                    24:f5:8e:59:94:75:92:f5:3d:aa:ec:17:97:d0:8b:
                    c0:80:71:4c:5a:f1:84:1a:d3:b6:7c:03:1d:8c:59:
                    d8:5a:30:09:fe:10:36:76:24:66:d3:e1:f6:e7:5c:
                    50:09:ed:77:b4:a2:78:26:72:c2:51:c1:a8:43:1a:
                    fa:57:2c:96:a7:0b:11:dd:5c:eb:3c:1f:04:97:0d:
                    7e:d3:66:50:b1:a4:ed:1c:37:ce:65:6f:72:75:48:
                    d7:b6:7f:4d:bb:b2:46:4f:82:eb:b7:d4:e3:d0:c0:
                    8f:31:d0:25:3e:11:19:37:10:24:ea:0b:7e:06:36:
                    13:d9:10:75:b8:e5:0a:62:7b:ca:40:11:dd:1b:eb:
                    a5:35:9e:7b:f3:2c:f1:78:6b:63:83:2f:68:7d:0b:
                    67:1a:3e:24:86:df:9a:a9:3f:b8:73:dd:8c:99:ee:
                    4c:c1:41:06:9d:6c:03:27:14:ba:32:ca:50:e2:3d:
                    8a:69:7c:d5:f8:05:17:c9:84:d5:c9:a7:71:23:16:
                    58:f8:72:a7:33:72:bd:75:02:5a:1a:5c:34:2a:c9:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B9:FB:09:1C:2C:C7:FE:FB:8B:39:D9:C1:05:65:E9:E1:48:FE:52
            X509v3 Authority Key Identifier:
                keyid:7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:b5:0d:60:e7:85:16:6e:f4:19:7a:24:8f:0a:6a:d2:4e:
         35:5e:75:e1:50:77:c7:26:48:6f:a0:b4:0b:11:1b:34:1c:4a:
         7c:91:47:8d:41:6b:2d:b4:08:d0:61:8a:16:3f:db:28:0d:66:
         7a:75:cb:b6:7b:39:29:2b:4d:9c:26:52:40:0c:11:ec:b1:22:
         ff:9b:1e:3d:12:62:c8:20:53:42:56:88:23:6f:eb:7a:54:49:
         dd:59:48:79:56:18:1f:f3:a8:3b:f1:f0:db:d4:e3:fa:2a:96:
         84:fd:69:a9:21:c6:97:55:d2:40:76:63:55:13:1b:b8:5b:bc:
         e3:5c:4c:d2:67:21:15:4d:b9:bd:47:4d:a5:91:22:00:9d:44:
         6b:31:36:09:cd:12:2a:83:c0:be:00:9c:3f:2a:cd:d4:a0:3b:
         98:f3:3f:82:7c:78:52:74:55:89:db:a6:fc:63:4e:29:4c:bb:
         e1:c7:e9:08:65:2c:36:ee:30:00:5d:4e:83:3b:2a:dd:69:e6:
         1f:02:d4:cb:b8:d2:f8:0f:55:36:f0:c2:dd:d2:24:18:99:92:
         92:e4:74:06:24:77:f3:ff:3b:6e:cf:57:c7:ec:0b:ec:eb:64:
         ff:08:8a:cf:eb:48:b5:b0:90:7f:30:eb:7c:95:cf:fb:a4:2b:
         fd:ae:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:47:24 2025 by rpki-client