Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa
File:                     3139322e3134312e302e302f32322d3232203d3e20323637343430.roa (raw, json)
Hash identifier:          zZdHq8oUuthXjjGfyIZmQr6tKl0kU6hGS1MddAhR2Bc=
Subject key identifier:   71:5B:4A:2E:48:A0:30:02:CB:5C:A2:FC:C5:9F:FD:07:15:0D:5B:CD
Certificate issuer:       /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial:       7CEE307E57B5A66BE5873E66D8E966433D33C335
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa
Signing time:             Mon 20 Jan 2025 14:46:23 +0000
ROA not before:           Mon 20 Jan 2025 14:41:23 +0000
ROA not after:            Mon 19 Jan 2026 14:46:23 +0000
asID:                     267440
IP address blocks:        192.141.0.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 14:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ee:30:7e:57:b5:a6:6b:e5:87:3e:66:d8:e9:66:43:3d:33:c3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
        Validity
            Not Before: Jan 20 14:41:23 2025 GMT
            Not After : Jan 19 14:46:23 2026 GMT
        Subject: CN=715B4A2E48A03002CB5CA2FCC59FFD07150D5BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:e9:a6:ac:61:3d:68:14:24:49:7f:16:ef:
                    70:78:4e:c4:8b:e6:c5:5e:ee:0b:f2:28:78:83:0f:
                    f5:79:ca:d1:02:4b:df:ec:e6:4a:e8:b6:6b:62:e0:
                    9c:3f:0f:76:ad:60:84:2e:31:40:71:6e:ee:5e:ed:
                    54:f3:25:44:55:8d:88:1a:04:15:ef:bf:4f:04:c5:
                    3e:67:53:ac:96:6f:b1:25:d9:96:96:15:6a:02:e6:
                    25:b0:bf:14:1c:2b:cb:4b:5b:39:7a:02:0b:03:c1:
                    59:fd:dd:ae:3a:2c:c2:94:c4:aa:1f:51:4f:9d:9d:
                    be:26:f9:01:78:e0:f9:1b:10:eb:d7:ec:db:af:01:
                    63:26:f2:b7:59:05:b9:d0:f4:5a:9c:f3:1d:61:ae:
                    43:f8:eb:ce:fa:98:f2:63:56:65:3d:a5:d3:6f:7c:
                    ca:2a:c0:ed:7b:4c:07:03:ab:ef:70:c0:6f:6d:62:
                    26:7e:d9:aa:92:57:c6:de:d6:6a:21:b0:94:7c:e4:
                    8c:8b:4a:5b:a0:aa:20:8a:98:d8:74:d8:cb:03:f8:
                    2a:1a:83:67:87:d0:92:4a:b3:3c:06:d3:e4:7d:95:
                    2b:a5:01:6a:bd:ef:03:8f:78:1c:03:f1:c8:13:d8:
                    c6:fc:ec:98:69:0d:89:d1:30:e1:7d:55:56:2c:27:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:4A:2E:48:A0:30:02:CB:5C:A2:FC:C5:9F:FD:07:15:0D:5B:CD
            X509v3 Authority Key Identifier:
                keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e302e302f32322d3232203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:0c:49:e9:3a:6a:c0:09:c1:66:13:6a:08:b7:a4:41:4f:
         d7:e2:78:7e:77:f3:18:35:71:58:00:ab:37:f8:ff:79:64:3a:
         8f:33:f6:df:1f:09:3b:1b:57:e8:28:33:73:d4:02:04:37:6b:
         ec:3f:c7:a7:dd:6c:80:3e:de:d0:ee:7f:ae:6c:26:15:a4:6c:
         e5:ea:0b:6b:5d:e5:cb:d4:57:b0:80:b9:a4:8d:fa:c5:31:a8:
         f8:0b:ca:d9:b8:87:f7:d8:a9:f8:5d:a9:63:d4:54:0c:38:63:
         ac:7a:86:27:75:64:d6:6f:87:2a:74:1d:25:a5:6f:5b:70:8b:
         7f:f9:ff:22:df:26:0f:80:f0:09:9c:4a:0b:38:f1:a7:c1:12:
         30:d9:22:22:2e:75:7c:a0:60:af:4d:cf:b6:28:2f:34:c2:f5:
         dc:fb:c8:ad:0c:82:26:02:4d:10:0d:be:6c:f4:1d:9a:34:09:
         40:87:a7:61:c8:2a:56:42:52:c6:08:ec:36:10:b0:4c:67:b6:
         01:a1:87:b4:bd:d9:95:43:f1:15:56:79:56:23:4a:56:25:f5:
         c2:be:dd:e0:22:aa:e7:e1:c7:fd:4f:4a:02:53:51:c5:05:23:
         d1:6d:af:62:fa:e6:d0:7a:ea:a6:47:6e:3e:30:33:f8:5b:07:
         37:62:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:48 2025 by rpki-client