Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139302e302f32332d3233203d3e20323731363431.roa
File:                     3230302e3139342e3139302e302f32332d3233203d3e20323731363431.roa (raw, json)
Hash identifier:          decRjSLIi6TmW/2sditpIc9r36YAKU3bPkjr+yPsEgU=
Subject key identifier:   61:D5:5C:E0:F9:40:14:0C:BA:3B:7F:93:F9:DF:31:3E:98:CE:8D:16
Certificate issuer:       /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial:       7A5ACCA78A275EF52B2E4786580102A6F3D817AF
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139302e302f32332d3233203d3e20323731363431.roa
Signing time:             Fri 31 May 2024 15:24:39 +0000
ROA not before:           Fri 31 May 2024 15:19:39 +0000
ROA not after:            Fri 30 May 2025 15:24:39 +0000
asID:                     271641
IP address blocks:        200.194.190.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 05 Nov 2024 04:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:cc:a7:8a:27:5e:f5:2b:2e:47:86:58:01:02:a6:f3:d8:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
        Validity
            Not Before: May 31 15:19:39 2024 GMT
            Not After : May 30 15:24:39 2025 GMT
        Subject: CN=61D55CE0F940140CBA3B7F93F9DF313E98CE8D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e1:19:88:f1:51:6b:4f:f7:ae:2b:26:6b:97:
                    27:79:a0:58:c0:11:9b:01:73:a0:98:48:e6:d3:90:
                    06:16:b6:af:c7:57:a4:f7:f7:2a:14:c5:58:a0:11:
                    ec:17:ac:90:02:3e:9f:96:00:ac:75:cc:d2:75:6b:
                    0b:4d:28:c5:b9:c5:1c:f9:7a:6e:5c:35:b1:63:4c:
                    47:01:a6:43:96:5c:7d:17:c8:90:c7:12:e6:91:49:
                    35:ac:e4:18:8b:9a:60:1f:2c:11:c1:d3:03:e2:9e:
                    1c:45:dc:4f:db:be:b3:07:d9:65:f0:cd:d1:16:1d:
                    7b:61:2e:98:f7:8e:84:44:fd:ae:7e:3e:25:b8:70:
                    bb:ee:dd:83:77:f3:c0:16:68:2d:e8:ba:77:33:b3:
                    0e:f6:5f:9c:2e:08:a6:53:64:d8:63:84:51:1c:5f:
                    00:62:b5:27:39:71:13:26:88:be:89:7e:5d:45:22:
                    0a:e6:b8:dc:ca:77:e3:1d:e4:ea:ef:9d:69:12:b4:
                    d2:9a:8f:1a:6c:00:cf:5e:74:37:b4:91:dd:53:e8:
                    81:69:c0:1e:e4:c2:05:a8:39:72:a6:b0:23:93:4d:
                    f9:2b:11:92:23:47:29:e2:5f:25:65:7d:f0:bc:8c:
                    78:80:26:08:37:69:a1:d3:1d:21:48:81:44:c0:18:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D5:5C:E0:F9:40:14:0C:BA:3B:7F:93:F9:DF:31:3E:98:CE:8D:16
            X509v3 Authority Key Identifier:
                keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/3230302e3139342e3139302e302f32332d3233203d3e20323731363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:25:49:73:42:fe:7d:7d:c7:78:50:a7:12:03:42:7d:82:b5:
         5c:dc:6d:64:ea:8e:a0:d4:ac:b8:a5:3b:04:49:50:2f:c0:cc:
         f4:b0:76:65:91:3e:56:58:a6:c0:43:b5:8d:85:79:d9:3f:b5:
         b9:92:15:2e:1d:97:e6:8e:87:25:f6:d8:82:aa:52:1b:fd:cc:
         db:47:ec:08:b6:df:56:a9:c8:8c:bf:34:b8:c5:db:da:40:11:
         ec:50:a0:80:cd:b0:f7:1b:d1:2b:84:06:7e:d1:72:81:94:6b:
         9f:70:68:90:cd:6b:35:50:4c:48:3e:b2:f1:db:29:bd:f5:f0:
         31:07:74:14:54:bb:22:6a:b1:39:0a:f1:8b:a2:84:26:76:73:
         f2:58:c0:a8:3d:b3:53:07:ec:57:e6:41:fa:6a:37:3f:34:51:
         9a:92:dd:29:c0:f1:a5:c1:2d:9d:8f:32:1e:67:b9:bb:ae:5b:
         3a:e9:eb:74:ef:7d:d3:96:30:69:cd:92:50:eb:37:e5:03:04:
         fd:57:dc:04:9b:d2:0c:8b:f0:3c:c5:c4:89:3d:a2:ff:f2:23:
         84:ae:f8:23:52:d3:66:ad:89:6a:12:fd:1a:56:ea:79:e3:64:
         5e:06:32:3b:64:ff:48:dc:7c:b9:59:86:3a:cf:06:83:dc:9f:
         c6:e9:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:05 2025 by rpki-client