Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32332d3233203d3e20323634353138.roa
File:                     3133312e3235352e37362e302f32332d3233203d3e20323634353138.roa (raw, json)
Hash identifier:          4jdW3vVdTYq/Lqbc/KbmR5Nn0LdOKs2ZKAXMhOeh8zs=
Subject key identifier:   94:54:19:2E:AD:16:E2:CF:74:CD:79:DC:9D:B3:24:96:9D:D7:0A:2F
Certificate issuer:       /CN=22CB937D7A1CC3A0570501B2B0718242D450D682
Certificate serial:       7A942AF01470057F86CC6B25301249AC02EC3C64
Authority key identifier: 22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32332d3233203d3e20323634353138.roa
Signing time:             Tue 23 Apr 2024 12:35:40 +0000
ROA not before:           Tue 23 Apr 2024 12:30:40 +0000
ROA not after:            Tue 22 Apr 2025 12:35:40 +0000
asID:                     264518
IP address blocks:        131.255.76.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 29 Apr 2024 13:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:94:2a:f0:14:70:05:7f:86:cc:6b:25:30:12:49:ac:02:ec:3c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CB937D7A1CC3A0570501B2B0718242D450D682
        Validity
            Not Before: Apr 23 12:30:40 2024 GMT
            Not After : Apr 22 12:35:40 2025 GMT
        Subject: CN=9454192EAD16E2CF74CD79DC9DB324969DD70A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d9:9c:8e:d4:e0:6c:31:1b:20:5c:2b:26:59:
                    aa:aa:dd:be:cf:20:af:0b:14:a0:6f:6f:83:ab:59:
                    3f:44:75:79:28:97:a3:68:da:c0:51:20:6a:f5:60:
                    d0:7c:a2:5d:82:5c:24:26:74:bf:dd:ef:ac:51:a6:
                    ec:7c:c0:d2:a1:87:68:93:99:5a:2d:83:03:79:ad:
                    e6:36:14:27:00:fc:73:6c:e8:f7:e4:5d:b9:f3:75:
                    35:31:bc:c3:6d:46:6f:d5:46:27:ad:b5:5d:61:0c:
                    a0:f5:85:c9:70:ab:54:27:ae:37:ec:57:89:77:cc:
                    05:ff:60:cc:c6:d8:e6:37:41:b4:8f:21:59:9c:f3:
                    e9:4f:37:9d:bf:d3:31:49:d3:a5:12:91:69:ef:c1:
                    6e:fb:4c:3c:6b:6b:7a:99:8e:94:a1:8d:16:c3:13:
                    ba:6d:db:3a:5a:f2:1e:e2:d8:0f:07:3c:7e:2d:28:
                    22:19:de:51:b1:b8:cf:c6:b1:b2:fa:9a:c5:17:a9:
                    cf:32:f5:db:74:20:87:6d:3c:05:c8:c2:4a:46:a4:
                    24:c8:2f:1a:fb:92:c1:f6:49:8f:71:bb:03:67:8f:
                    23:d6:2c:9c:74:b9:45:da:f7:d7:77:61:db:2f:0d:
                    14:7c:1b:f3:eb:12:e8:d2:98:40:6c:eb:f6:39:29:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:19:2E:AD:16:E2:CF:74:CD:79:DC:9D:B3:24:96:9D:D7:0A:2F
            X509v3 Authority Key Identifier:
                keyid:22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32332d3233203d3e20323634353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:27:ac:33:f1:8f:70:de:e3:6c:ff:f3:c6:22:83:8f:b9:
         8b:b5:14:91:89:7c:0c:5c:de:d7:7c:76:57:0d:08:94:68:04:
         37:f9:40:6a:fe:3c:94:69:d9:7f:98:a1:19:6a:e0:26:5d:92:
         90:42:8d:06:e2:b5:26:2e:73:1a:a9:9f:da:00:cd:be:ee:c5:
         cc:c8:08:de:88:ba:0c:1e:81:50:ab:52:d1:a0:4f:e0:87:eb:
         e8:fb:e1:28:25:e1:97:e1:c5:5f:11:15:a7:a3:74:38:57:d7:
         f9:2e:53:87:d7:b6:6d:a1:62:84:9b:7b:e5:04:de:d7:dc:13:
         95:dc:99:23:39:5f:30:18:05:5e:55:2a:98:db:11:de:d5:54:
         36:1f:2f:3f:1d:bf:58:ce:75:48:1f:ed:15:58:e4:e1:17:12:
         cf:8f:c8:38:9d:31:7c:26:4c:23:8e:39:5c:12:72:dc:b4:22:
         59:2c:1b:bc:65:00:fe:80:b7:40:3d:e0:ab:ac:fb:16:97:a4:
         93:b7:c9:e7:7c:3d:97:b9:17:f5:13:e1:74:6b:31:74:d2:7b:
         43:e8:c7:4c:88:92:54:19:4d:02:ec:37:6c:01:f2:73:89:63:
         1f:3c:e4:b8:f0:47:cb:c1:a1:c1:91:84:8d:79:fc:ac:cc:2d:
         0b:ea:e3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:00:00 2025 by rpki-client