Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3230203d3e20323632343632.roa
File:                     3137372e33372e302e302f32302d3230203d3e20323632343632.roa (raw, json)
Hash identifier:          2FbzIiOu3W6eilPMiEiEklNWEt1k8c9NI37HhF1fsq0=
Subject key identifier:   C3:55:65:8F:DE:71:08:75:B3:0B:C9:A1:A5:C5:87:95:E5:83:3D:C3
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       7EA9538CDE1FFBAF0193A29397670117D2F7524F
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3230203d3e20323632343632.roa
Signing time:             Fri 05 Apr 2024 04:21:28 +0000
ROA not before:           Fri 05 Apr 2024 04:16:28 +0000
ROA not after:            Fri 04 Apr 2025 04:21:28 +0000
asID:                     262462
IP address blocks:        177.37.0.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Mon 21 Oct 2024 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a9:53:8c:de:1f:fb:af:01:93:a2:93:97:67:01:17:d2:f7:52:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Apr  5 04:16:28 2024 GMT
            Not After : Apr  4 04:21:28 2025 GMT
        Subject: CN=C355658FDE710875B30BC9A1A5C58795E5833DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:68:a6:5f:7d:0d:a2:82:f6:6b:47:91:f0:
                    c2:48:2e:17:56:1b:bc:79:1d:94:0b:78:02:84:f4:
                    48:c3:8c:4e:04:5b:53:0d:e3:63:98:b5:ad:72:15:
                    a6:33:d9:f7:15:76:30:68:ee:14:86:60:69:07:f1:
                    95:a0:0b:9d:40:7f:b6:bf:43:86:3a:8d:0f:72:8b:
                    cf:95:9b:be:b8:e9:c6:b5:a5:8f:a4:65:7c:25:e6:
                    81:43:46:ad:05:d3:ad:3a:cb:1c:fd:43:f3:c2:86:
                    2d:f5:8f:54:06:7e:05:85:18:50:56:38:fc:d7:b4:
                    83:66:54:eb:18:74:84:90:c1:c2:c6:d7:27:b0:89:
                    3f:30:31:2f:2c:d0:12:16:f4:40:23:88:22:bb:fa:
                    52:7a:3e:1e:94:75:43:ae:23:73:d0:79:a9:be:66:
                    66:f7:e3:75:1e:2a:5a:57:20:d0:8a:55:fe:2c:9c:
                    14:89:99:44:4d:e0:66:ab:77:1e:a4:f8:77:84:10:
                    b1:2b:37:4e:ac:49:46:ce:8f:07:19:bc:d0:01:69:
                    a1:12:7e:22:80:04:66:32:9c:66:71:4a:18:2f:50:
                    70:08:9b:db:a1:e5:68:bd:e1:16:d5:f0:dd:81:e9:
                    00:fe:81:5c:fd:9e:b1:e2:ed:73:ed:9d:66:9c:a7:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:65:8F:DE:71:08:75:B3:0B:C9:A1:A5:C5:87:95:E5:83:3D:C3
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3137372e33372e302e302f32302d3230203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:b6:b2:65:e4:cd:7c:b5:6b:27:58:7b:43:90:df:4c:00:
         a1:3e:ae:7f:d6:c5:34:ed:e8:9c:34:ff:a4:71:55:7d:b5:75:
         7d:f8:14:db:cf:ea:c4:ff:49:7e:75:71:5e:11:7f:31:7f:a7:
         fc:4e:af:a7:2f:32:f7:cb:81:94:db:42:d3:97:49:54:98:81:
         20:85:90:fd:60:8d:cb:b5:39:30:cb:15:ef:36:b4:86:10:5e:
         28:16:52:8e:c4:eb:35:7e:c5:94:a3:98:2a:97:0a:43:29:f0:
         69:8a:e6:89:c5:ea:57:72:ce:7d:c8:a5:0c:62:16:79:c2:72:
         4d:5a:d4:db:a9:7a:ff:45:6f:52:f1:48:25:4a:f2:9d:50:24:
         f5:4d:a5:34:ac:3b:c0:4b:62:29:02:1e:99:f6:45:14:d8:72:
         76:bd:25:b7:43:9b:d4:b9:ff:10:c7:5b:14:75:1c:86:b6:58:
         17:5c:cd:28:5f:0e:3e:1b:f9:3c:ea:c0:c8:c8:4e:df:a0:49:
         80:7e:2d:2d:0f:9f:1b:7c:ab:60:8b:f7:2e:ea:88:b0:ec:fb:
         9e:97:e6:7b:2b:60:d0:db:17:ca:24:5b:66:a1:df:37:7a:36:
         90:37:00:79:d9:6d:82:15:2c:2f:6b:49:e7:ab:56:f4:44:11:
         c8:4b:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:34 2025 by rpki-client