Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32342d3332203d3e20323731363431.roa
File:                     3230302e3139342e3138382e302f32342d3332203d3e20323731363431.roa (raw, json)
Hash identifier:          Oj8ad14O9nNaA/PzyM6uPtMGvP1FVrrde0iZZcXVU4o=
Subject key identifier:   9F:AE:22:17:A7:AB:B0:6F:1A:C8:69:87:1F:09:3F:87:CB:E9:8E:D0
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       752416ACC2FBFB8E71225ECB563EE0AFEBBF4982
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32342d3332203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:18:55 +0000
ROA not before:           Fri 31 May 2024 15:13:55 +0000
ROA not after:            Fri 30 May 2025 15:18:55 +0000
asID:                     271641
IP address blocks:        200.194.188.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Tue 05 Nov 2024 04:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:16:ac:c2:fb:fb:8e:71:22:5e:cb:56:3e:e0:af:eb:bf:49:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:13:55 2024 GMT
            Not After : May 30 15:18:55 2025 GMT
        Subject: CN=9FAE2217A7ABB06F1AC869871F093F87CBE98ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:f7:c8:d5:4b:42:7c:b9:b5:99:b6:72:a1:
                    d3:cf:c9:61:d2:f0:46:f4:1c:cf:1d:c5:10:1f:5e:
                    68:eb:89:69:f5:39:8b:6e:12:d2:92:10:67:1d:7c:
                    c2:9a:78:0f:11:7b:7a:f4:4c:4a:d7:87:f3:d9:04:
                    dd:df:f5:f4:a1:d2:9e:c1:76:db:a5:28:d0:9e:72:
                    87:8d:25:e5:1c:cf:54:d2:23:e4:ca:8c:79:1d:5e:
                    59:68:e8:de:30:3e:af:42:2f:ea:ee:7f:5b:a4:c7:
                    a4:45:39:b7:0b:e6:95:d2:13:84:7f:1b:1f:fa:17:
                    ab:92:4b:b6:8d:c0:2d:7d:47:0c:a7:8f:16:61:0e:
                    5e:14:18:07:a9:61:2f:d2:2b:f3:08:6a:b3:74:49:
                    6d:09:a1:41:30:ee:58:4e:5e:02:7e:7d:03:50:bc:
                    1f:7b:85:79:f8:06:3c:74:e7:ff:ff:cf:97:f9:6e:
                    0b:e8:dd:e9:83:af:c4:00:3d:60:8c:df:41:29:64:
                    8e:4e:d0:29:41:77:de:51:46:41:0b:76:f6:c7:90:
                    b3:1d:3a:f5:57:a2:04:b5:30:4a:8d:99:e6:19:36:
                    1a:ed:b3:8c:50:43:39:bf:2e:3b:ee:43:cb:ec:8a:
                    6c:5f:9e:a0:b2:72:cd:e2:6d:84:11:78:a1:c1:ff:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AE:22:17:A7:AB:B0:6F:1A:C8:69:87:1F:09:3F:87:CB:E9:8E:D0
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3138382e302f32342d3332203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:6c:ea:fa:fe:55:49:dc:d1:84:33:04:27:0d:03:4f:5f:
         68:5d:50:9b:b3:4f:07:09:8d:c9:07:5a:4e:1e:c9:04:6f:fd:
         fd:65:13:c1:07:f6:7c:99:bb:21:a5:a7:46:0e:94:51:d8:df:
         cd:51:97:c5:76:dc:b3:5b:23:12:27:51:01:d7:ef:3d:3e:ad:
         73:06:60:bb:cc:dc:d2:4d:7b:81:ab:01:80:26:cd:1a:16:8b:
         a4:58:69:66:66:60:e4:b7:57:3f:de:4d:70:a3:07:e2:b3:c0:
         9c:e8:92:dc:6d:ea:05:c3:9f:d3:47:7f:be:e3:36:39:cd:98:
         57:b7:87:ac:7c:91:60:26:25:1a:81:b9:c3:30:7a:1e:28:e7:
         64:38:8d:e0:3b:e7:0c:20:19:ee:64:e3:f4:b0:e8:9b:f7:3a:
         62:05:ec:13:0a:f0:61:75:26:c2:2a:7f:1a:37:88:81:a3:d2:
         3a:b7:af:be:89:0f:2a:5f:c1:4b:90:6b:c1:b1:b5:08:26:ea:
         d6:c1:f6:a9:d8:14:91:b9:6f:26:52:33:74:dd:78:d7:49:da:
         63:0e:a9:d6:50:bb:93:43:cc:05:b8:28:da:14:e7:91:76:b0:
         2b:4c:06:16:56:41:7c:84:b3:e4:a9:53:78:e8:12:40:cb:53:
         3e:37:08:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:09 2025 by rpki-client