Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37382e302f32332d3233203d3e20323634353138.roa
File:                     3133312e3235352e37382e302f32332d3233203d3e20323634353138.roa (raw, json)
Hash identifier:          MIVW9E3rvAjWoApZ9tuEWhhGS/L15CCsV2ChWGHZshc=
Subject key identifier:   B8:4C:00:20:5E:12:15:C8:71:1B:76:33:05:28:68:64:C3:9C:B0:AC
Certificate issuer:       /CN=22CB937D7A1CC3A0570501B2B0718242D450D682
Certificate serial:       2B7FCDF62E29F438CE88F6072E28E8BB2211178C
Authority key identifier: 22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37382e302f32332d3233203d3e20323634353138.roa
Signing time:             Tue 23 Apr 2024 12:35:43 +0000
ROA not before:           Tue 23 Apr 2024 12:30:43 +0000
ROA not after:            Tue 22 Apr 2025 12:35:43 +0000
asID:                     264518
IP address blocks:        131.255.78.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Mon 29 Apr 2024 13:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:cd:f6:2e:29:f4:38:ce:88:f6:07:2e:28:e8:bb:22:11:17:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CB937D7A1CC3A0570501B2B0718242D450D682
        Validity
            Not Before: Apr 23 12:30:43 2024 GMT
            Not After : Apr 22 12:35:43 2025 GMT
        Subject: CN=B84C00205E1215C8711B763305286864C39CB0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:c1:7d:ff:fd:0b:d9:46:ef:59:c0:de:10:
                    35:cd:f5:0e:0d:42:4d:44:78:73:4f:f5:8d:29:69:
                    25:1c:e6:94:6b:54:61:20:a7:4d:33:9e:25:f5:2d:
                    d6:a7:bd:68:11:0f:e0:f9:a5:c9:0f:25:e2:76:f8:
                    cd:b7:6e:55:d5:1f:64:c8:2a:9a:60:06:84:9e:a3:
                    ad:e9:c3:ba:b7:66:91:99:57:0a:79:1e:cb:4a:56:
                    8f:54:f9:a0:4a:32:9b:d7:ea:5f:54:8b:ab:5e:cf:
                    98:b5:24:3f:9d:07:4a:9b:2c:b6:a7:27:be:b4:b7:
                    c4:eb:c2:45:9a:46:54:45:2a:aa:e0:de:71:6f:0b:
                    e4:84:fa:db:99:68:7a:33:d4:56:58:0d:c7:b1:11:
                    c1:c1:69:36:55:a7:1d:ab:fd:9c:92:a3:57:ae:c9:
                    d6:4d:82:1d:47:26:02:6f:fb:34:d1:bf:5e:8b:49:
                    2d:b1:7b:74:c6:1b:b3:ea:42:08:62:5a:71:28:83:
                    bf:4f:37:9d:5d:89:10:24:98:a5:3f:58:3f:32:5c:
                    2e:75:d5:ee:4a:d5:66:a8:39:e0:a5:f2:89:6e:8e:
                    90:29:70:99:86:66:5a:d6:44:ed:66:70:f0:6c:c0:
                    8b:21:e2:ec:65:30:dd:fb:2f:5c:5e:24:97:bf:2d:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4C:00:20:5E:12:15:C8:71:1B:76:33:05:28:68:64:C3:9C:B0:AC
            X509v3 Authority Key Identifier:
                keyid:22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37382e302f32332d3233203d3e20323634353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:56:f4:07:06:61:ee:5a:d2:9b:c8:ad:7f:94:f4:09:29:04:
         b2:a6:a9:a4:a1:ae:61:7f:45:ab:9d:37:8c:fd:46:45:52:c7:
         7f:94:b6:7e:7c:87:62:3e:1b:d8:71:b3:2f:03:0b:69:e6:9e:
         a0:3d:b6:7e:18:95:60:25:ee:c2:32:e7:7e:a8:82:64:b8:40:
         f3:08:b4:16:cc:55:31:e7:f5:46:30:45:1b:25:ac:fa:da:75:
         f6:71:70:d8:f3:c2:aa:53:b8:6d:4a:be:e3:e3:69:cc:60:db:
         1c:64:dc:b3:f5:5c:2e:82:df:a7:cf:a5:f8:03:0a:84:ea:8e:
         03:f6:fd:95:28:02:9f:10:f6:81:91:c6:a6:e7:fc:be:e5:1f:
         b8:ed:d0:0b:1e:73:d2:83:74:2e:34:79:74:8e:62:53:bd:1b:
         a1:2a:d0:4e:0d:48:74:01:d3:d9:5a:e5:3d:42:1d:8e:bf:40:
         30:8e:5a:3f:ad:66:c0:6f:75:f5:36:9b:06:c8:28:35:cc:1c:
         05:88:b9:f4:5c:66:78:7b:90:e1:f5:4e:1b:80:7a:38:87:61:
         70:77:8c:aa:3b:e8:50:02:d9:51:7e:d7:1a:54:84:73:22:ef:
         59:49:f9:50:8f:37:89:99:59:fb:78:98:2d:83:73:75:e0:17:
         76:05:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:28 2025 by rpki-client