Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa
File:                     3138362e3139342e362e302f32332d3233203d3e20323730383832.roa (raw, json)
Hash identifier:          ll9XOw1ZhkKUGENjNubRlnFAefg4qgWmqhg/jg39zBI=
Subject key identifier:   97:B5:A7:45:08:A8:CB:32:63:07:B3:B4:78:D7:FF:35:30:68:ED:D1
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       27F4B7F54D852496968F68C119C90FE140435724
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa
Signing time:             Tue 23 Apr 2024 12:49:23 +0000
ROA not before:           Tue 23 Apr 2024 12:44:23 +0000
ROA not after:            Tue 22 Apr 2025 12:49:23 +0000
asID:                     270882
IP address blocks:        186.194.6.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:b7:f5:4d:85:24:96:96:8f:68:c1:19:c9:0f:e1:40:43:57:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Apr 23 12:44:23 2024 GMT
            Not After : Apr 22 12:49:23 2025 GMT
        Subject: CN=97B5A74508A8CB326307B3B478D7FF353068EDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:34:46:dc:a1:a7:cc:1b:63:cf:e9:3d:54:
                    f5:da:62:27:37:99:36:4f:af:1b:f0:59:38:b7:00:
                    58:b6:75:ff:b3:ed:b2:8e:c4:e0:fe:bf:55:a0:20:
                    15:4b:aa:1e:15:95:64:cd:db:fa:9f:41:e6:6f:ca:
                    52:e2:69:75:b2:0a:92:b0:5c:f5:33:70:85:c8:f2:
                    06:03:31:71:08:12:07:3a:d7:8d:ed:8d:e1:28:0e:
                    01:dc:f3:92:ab:00:f5:49:67:69:ba:62:07:37:a2:
                    d3:f1:95:ae:4b:1a:e8:ce:71:c6:af:3d:a8:38:99:
                    4a:b6:06:d1:80:2e:89:fb:d2:d3:f9:a5:d7:9d:bc:
                    17:96:9f:93:f8:c2:cc:ac:84:ae:cd:e2:cd:b3:ba:
                    89:07:34:68:90:bb:4b:40:31:e7:fd:44:35:35:67:
                    81:d3:90:61:3f:b0:b6:1f:72:1e:d6:ae:71:08:54:
                    c8:9c:32:df:bf:d2:5c:f7:a4:5c:90:9b:4c:d7:7a:
                    65:8c:dd:35:85:09:69:1f:5d:2e:d6:54:ac:9c:e5:
                    2c:89:3b:3c:f1:1b:c5:a4:54:d6:20:7a:93:c8:b3:
                    3c:7c:12:45:87:a7:5c:e3:88:ad:c1:4b:70:f4:ba:
                    a0:33:ff:fb:fa:a9:3a:22:f2:e2:e7:8d:81:c7:f4:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:A7:45:08:A8:CB:32:63:07:B3:B4:78:D7:FF:35:30:68:ED:D1
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:0f:0e:49:c5:6a:91:2d:e9:f7:f2:55:93:6f:fa:85:76:
         ed:9b:8c:41:67:ed:8a:d7:98:ea:58:42:fb:fa:52:26:a2:b9:
         c3:eb:38:26:f1:4b:9d:0c:70:b0:54:f9:f9:f6:04:c1:22:b6:
         48:fc:0d:df:ab:08:80:6d:f3:e3:8f:fe:66:f4:5f:25:8b:14:
         29:04:67:7a:82:e1:0f:ea:14:ff:4f:f9:46:3d:1d:5a:ce:5d:
         e4:99:81:bc:33:52:ae:bd:74:db:a3:15:80:cc:bd:65:71:56:
         0c:e2:da:c4:1d:89:29:0d:4b:d7:41:09:01:d3:5e:5c:8c:0e:
         76:a1:80:f6:34:e1:f7:15:16:db:b5:58:70:6a:55:27:c5:99:
         d6:6f:7a:28:c6:d0:f5:5f:34:0b:b0:a0:eb:37:74:72:bd:09:
         6b:f3:07:bf:13:2a:8f:2a:a8:cc:69:23:ce:6e:5e:f9:c4:d8:
         27:c1:8a:87:a7:81:15:59:7e:0e:22:98:26:9e:d9:f5:d6:57:
         9b:40:4b:67:73:6f:e9:52:72:03:ad:dd:8a:fe:fc:73:4e:3d:
         e7:fb:e3:8a:19:3e:4b:24:3f:a4:19:e2:b9:d3:67:09:61:26:
         a2:f6:26:20:d8:b7:7f:0f:60:da:8f:d1:69:ef:c0:66:2b:de:
         40:78:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:34 2025 by rpki-client