Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
File:                     3139322e3134312e322e302f32332d3233203d3e20323637343430.roa (raw, json)
Hash identifier:          RN2UcgN4/l3xriYlusYNpYUSOAoItb7jjlCifXoxUbg=
Subject key identifier:   A1:2C:B3:BF:47:94:1F:F8:D8:13:07:EA:EF:CC:F0:F6:B8:C4:D5:6D
Certificate issuer:       /CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
Certificate serial:       72D699DF23738E8C166DC812748AB5DDBE74ADB5
Authority key identifier: 68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa
Signing time:             Mon 20 Jan 2025 14:46:22 +0000
ROA not before:           Mon 20 Jan 2025 14:41:22 +0000
ROA not after:            Mon 19 Jan 2026 14:46:22 +0000
asID:                     267440
IP address blocks:        192.141.2.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 14:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:99:df:23:73:8e:8c:16:6d:c8:12:74:8a:b5:dd:be:74:ad:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683528643A65F1188AB7E1EF5CB5E716A5A13959
        Validity
            Not Before: Jan 20 14:41:22 2025 GMT
            Not After : Jan 19 14:46:22 2026 GMT
        Subject: CN=A12CB3BF47941FF8D81307EAEFCCF0F6B8C4D56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:48:5d:e6:e2:ba:b0:8e:a8:15:bd:84:54:
                    01:93:cb:99:03:88:14:01:c8:89:76:02:7c:7f:7b:
                    ac:28:f7:45:50:52:f4:ee:37:6f:22:a8:b6:20:49:
                    95:07:6a:09:3c:97:c9:17:46:31:fc:c1:14:e2:12:
                    c9:0f:27:5e:e8:15:e6:cb:23:94:5a:3a:a9:10:a8:
                    61:16:bb:d6:31:2c:8e:ff:64:78:fc:5e:69:cb:d9:
                    d2:81:9c:5e:ba:5a:4a:28:a8:0b:a6:44:9d:45:66:
                    5e:b6:4c:66:aa:ec:27:3e:de:aa:c6:de:81:7d:9d:
                    d9:7b:59:fa:81:34:c6:10:ec:74:bd:f8:49:ed:7d:
                    a4:e8:2a:db:09:7c:9e:a6:7d:9e:8b:06:5b:31:a3:
                    03:ae:af:e8:ca:bc:3f:b4:2f:4c:8e:fd:c9:89:1d:
                    86:ce:7c:a7:e2:91:92:45:bd:5f:73:57:cd:0e:dc:
                    3b:18:10:eb:39:52:4f:d1:ba:16:e6:8c:9c:dc:1d:
                    dc:81:5a:93:86:94:10:a9:81:18:2b:9b:4a:10:3c:
                    c0:b1:bb:9a:0f:5c:28:15:11:f9:c2:37:40:8d:54:
                    57:8a:cd:37:f4:57:e5:08:70:a9:10:b8:c1:44:f2:
                    f3:56:96:06:4b:aa:bb:76:cc:0f:e6:d0:f2:22:a1:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:B3:BF:47:94:1F:F8:D8:13:07:EA:EF:CC:F0:F6:B8:C4:D5:6D
            X509v3 Authority Key Identifier:
                keyid:68:35:28:64:3A:65:F1:18:8A:B7:E1:EF:5C:B5:E7:16:A5:A1:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/683528643A65F1188AB7E1EF5CB5E716A5A13959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683528643A65F1188AB7E1EF5CB5E716A5A13959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/0/3139322e3134312e322e302f32332d3233203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:1d:6b:80:77:07:9c:90:81:50:c3:eb:2f:5c:8b:19:d9:95:
         d2:68:ac:9d:2e:d3:1c:fc:a4:45:11:3b:e2:54:11:fc:4a:5a:
         46:16:43:97:3e:34:4b:58:a7:d9:fb:ed:e0:e6:d7:a1:a2:42:
         15:18:e5:ce:8a:81:eb:a7:d9:f6:06:7e:95:23:04:3b:cf:fa:
         2a:89:30:23:9b:91:68:96:a0:3a:2a:ac:be:ed:af:d4:ea:8e:
         e0:2b:4d:c7:26:b8:81:51:14:13:b9:01:a2:5a:59:fc:6f:2a:
         9a:1b:80:f2:a4:20:9a:88:9d:4b:61:ad:94:7e:fb:d0:2b:05:
         d5:ca:31:9f:6d:c5:cf:2a:2f:b1:ab:a7:e3:86:62:fb:27:0a:
         d0:55:ca:57:35:f6:02:e4:e0:a8:02:d9:2b:c4:d8:7b:e3:57:
         49:27:97:08:b1:ed:7a:ce:58:d4:ea:b9:5f:15:6b:8b:bc:6a:
         26:41:72:9c:7e:1d:63:2d:42:e7:81:cf:a6:bc:e1:06:54:d2:
         e5:cd:92:dc:35:f6:8b:96:b7:7a:e4:f9:22:28:ef:bd:e8:10:
         c6:82:35:f3:cf:10:9f:ec:ea:a1:0e:92:a0:75:2b:c0:b7:af:
         5e:90:a9:40:d1:00:8f:57:da:7e:8b:16:6a:48:09:e7:48:9f:
         28:92:b3:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUctaZ3yNzjowWbcgSdIq13b50rbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgzNTI4NjQzQTY1RjExODhBQjdFMUVGNUNCNUU3MTZB
NUExMzk1OTAeFw0yNTAxMjAxNDQxMjJaFw0yNjAxMTkxNDQ2MjJaMDMxMTAvBgNV
BAMTKEExMkNCM0JGNDc5NDFGRjhEODEzMDdFQUVGQ0NGMEY2QjhDNEQ1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeEhd5uK6sI6oFb2EVAGTy5kD
iBQByIl2Anx/e6wo90VQUvTuN28iqLYgSZUHagk8l8kXRjH8wRTiEskPJ17oFebL
I5RaOqkQqGEWu9YxLI7/ZHj8XmnL2dKBnF66WkooqAumRJ1FZl62TGaq7Cc+3qrG
3oF9ndl7WfqBNMYQ7HS9+EntfaToKtsJfJ6mfZ6LBlsxowOur+jKvD+0L0yO/cmJ
HYbOfKfikZJFvV9zV80O3DsYEOs5Uk/RuhbmjJzcHdyBWpOGlBCpgRgrm0oQPMCx
u5oPXCgVEfnCN0CNVFeKzTf0V+UIcKkQuMFE8vNWlgZLqrt2zA/m0PIioYF3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoSyzv0eUH/jYEwfq78zw9rjE1W0wHwYDVR0j
BBgwFoAUaDUoZDpl8RiKt+HvXLXnFqWhOVkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzluSGlENGlwenI3M1U4TDVTUUhNYUtSQmtTMUdzNWFoQTRjdDlSQzN3
OEEvMC82ODM1Mjg2NDNBNjVGMTE4OEFCN0UxRUY1Q0I1RTcxNkE1QTEzOTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MzUyODY0M0E2NUYxMTg4
QUI3RTFFRjVDQjVFNzE2QTVBMTM5NTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5bkhpRDRpcHpyNzNVOEw1U1FITWFLUkJrUzFHczVhaEE0Y3Q5UkMzdzhBLzAv
MzEzOTMyMmUzMTM0MzEyZTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBwI0CMA0GCSqGSIb3DQEBCwUAA4IBAQB0HWuAdwec
kIFQw+svXIsZ2ZXSaKydLtMc/KRFETviVBH8SlpGFkOXPjRLWKfZ++3g5tehokIV
GOXOioHrp9n2Bn6VIwQ7z/oqiTAjm5FolqA6Kqy+7a/U6o7gK03HJriBURQTuQGi
Wln8byqaG4DypCCaiJ1LYa2UfvvQKwXVyjGfbcXPKi+xq6fjhmL7JwrQVcpXNfYC
5OCoAtkrxNh741dJJ5cIse16zljU6rlfFWuLvGomQXKcfh1jLULngc+mvOEGVNLl
zZLcNfaLlrd65PkiKO+96BDGgjXzzxCf7OqhDpKgdSvAt69ekKlA0QCPV9p+ixZq
SAnnSJ8okrP9
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:50:31 2025 by rpki-client