Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3232203d3e20323730343336.roa
File:                     3230302e362e39322e302f32322d3232203d3e20323730343336.roa (raw, json)
Hash identifier:          LDy/txFss2jJkcuxNCqSGxF/xmRvan3NJb9PqPw5Aqs=
Subject key identifier:   9F:64:42:1A:50:5B:04:74:98:EB:22:A5:CC:35:DA:29:4A:74:A6:CC
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       4F518D45C800E5D718392542B614C872A42E392C
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3232203d3e20323730343336.roa
Signing time:             Tue 11 Mar 2025 19:56:52 +0000
ROA not before:           Tue 11 Mar 2025 19:51:52 +0000
ROA not after:            Tue 10 Mar 2026 19:56:52 +0000
asID:                     270436
IP address blocks:        200.6.92.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 23:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:51:8d:45:c8:00:e5:d7:18:39:25:42:b6:14:c8:72:a4:2e:39:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 11 19:51:52 2025 GMT
            Not After : Mar 10 19:56:52 2026 GMT
        Subject: CN=9F64421A505B047498EB22A5CC35DA294A74A6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:a2:29:99:e0:ab:bc:11:b0:07:45:54:5e:
                    1a:66:fa:90:31:43:91:7b:03:be:de:8d:40:e2:80:
                    03:3f:9a:f5:ea:87:6d:fb:50:fb:c1:00:6a:06:6a:
                    b8:03:7e:fe:2a:2c:42:4c:6a:a1:9d:6b:91:5a:76:
                    54:bb:2f:82:6f:22:d4:df:f3:c3:79:5d:6e:68:0b:
                    48:22:83:f9:aa:c1:1d:5c:1a:93:b7:cd:40:9f:06:
                    db:45:49:72:a2:cf:8b:1e:e2:27:ab:ee:a2:8f:c7:
                    60:2f:7a:82:fb:66:b2:a5:82:8b:41:cb:a2:26:7f:
                    6f:6a:65:50:36:b2:e0:e3:23:59:ee:91:58:fe:d7:
                    e1:36:55:bd:2d:21:bd:54:9c:0f:ce:d7:b0:1d:9e:
                    df:6f:0d:a2:9a:3f:64:39:f9:c6:1f:22:c9:ff:1e:
                    71:94:e3:59:5e:41:91:f6:0a:38:d9:a7:68:39:a7:
                    07:79:e4:9d:95:2d:47:56:0f:47:bc:53:77:0f:e9:
                    ae:8b:dc:92:e2:1f:1c:6f:50:7d:fb:e5:df:23:8f:
                    8c:d2:47:bd:6a:71:e1:20:9f:f6:15:a5:dc:80:9c:
                    ce:33:88:f3:cb:29:6d:ad:8b:25:60:9d:7c:82:6a:
                    bc:03:df:c5:6d:a6:ad:e1:f1:56:75:b1:73:13:8d:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:42:1A:50:5B:04:74:98:EB:22:A5:CC:35:DA:29:4A:74:A6:CC
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39322e302f32322d3232203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:0d:42:fd:0e:f3:5e:72:57:ba:d9:83:91:13:84:c4:23:
         96:2d:03:c9:67:2f:57:34:c6:b4:74:57:b2:2a:bd:34:f7:b3:
         b1:54:3a:7c:0b:87:a0:43:f8:d3:88:4c:65:dd:91:ba:2e:d5:
         b2:d2:f0:3c:fb:ab:76:53:01:ee:aa:c0:c4:55:39:f9:35:66:
         b6:d2:70:de:5b:f4:2c:29:bb:6c:25:40:0d:cb:b8:c2:94:c6:
         ec:fe:6b:78:b3:2b:2e:75:66:99:d8:44:e7:7b:9f:0e:a2:89:
         dd:84:0d:34:9d:41:12:58:76:80:b4:40:22:cc:8a:ba:88:bf:
         9f:f3:eb:47:10:b5:b6:74:39:80:c9:41:27:91:0e:63:00:6c:
         40:e8:6c:a8:26:4c:68:c1:93:3d:3c:a6:45:01:de:f7:8b:62:
         86:44:ca:4f:ea:5f:e8:b2:f3:fb:77:0e:b6:8e:56:41:f5:04:
         5b:48:fe:17:55:e4:77:47:7f:96:da:12:d8:48:d3:d3:9c:11:
         95:a7:32:5d:37:74:8b:89:4c:0f:27:59:3b:7d:96:66:66:c9:
         8e:2d:c8:0e:e0:2c:eb:d8:bc:a2:ef:ad:eb:19:b2:4a:6a:e0:
         46:a6:b9:f7:a1:9e:96:60:ea:f8:ad:77:52:61:a7:ca:05:41:
         2e:b1:c9:96
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT1GNRcgA5dcYOSVCthTIcqQuOSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhENTA1NUI5OTg0RTExOUMwNTJERURCM0YzQjExQjlC
NjU3RjI5MTAeFw0yNTAzMTExOTUxNTJaFw0yNjAzMTAxOTU2NTJaMDMxMTAvBgNV
BAMTKDlGNjQ0MjFBNTA1QjA0NzQ5OEVCMjJBNUNDMzVEQTI5NEE3NEE2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY0KIpmeCrvBGwB0VUXhpm+pAx
Q5F7A77ejUDigAM/mvXqh237UPvBAGoGargDfv4qLEJMaqGda5FadlS7L4JvItTf
88N5XW5oC0gig/mqwR1cGpO3zUCfBttFSXKiz4se4ier7qKPx2AveoL7ZrKlgotB
y6Imf29qZVA2suDjI1nukVj+1+E2Vb0tIb1UnA/O17Adnt9vDaKaP2Q5+cYfIsn/
HnGU41leQZH2CjjZp2g5pwd55J2VLUdWD0e8U3cP6a6L3JLiHxxvUH375d8jj4zS
R71qceEgn/YVpdyAnM4ziPPLKW2tiyVgnXyCarwD38Vtpq3h8VZ1sXMTjVztAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUn2RCGlBbBHSY6yKlzDXaKUp0pswwHwYDVR0j
BBgwFoAUuNUFW5mE4RnAUt7bPzsRubZX8pEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpkeXFrMmR5eXRLR2ZQNGVpMUprUnZBcnV6d1pXb2tLRFpTdkYzNTFQ
OFcvMC9COEQ1MDU1Qjk5ODRFMTE5QzA1MkRFREIzRjNCMTFCOUI2NTdGMjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDUwNTVCOTk4NEUxMTlD
MDUyREVEQjNGM0IxMUI5QjY1N0YyOTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqZHlxazJkeXl0S0dmUDRlaTFKa1J2QXJ1endaV29rS0RaU3ZGMzUxUDhXLzAv
MzIzMDMwMmUzNjJlMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMDM0
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgGXDANBgkqhkiG9w0BAQsFAAOCAQEAF/gNQv0O815y
V7rZg5EThMQjli0DyWcvVzTGtHRXsiq9NPezsVQ6fAuHoEP404hMZd2Rui7VstLw
PPurdlMB7qrAxFU5+TVmttJw3lv0LCm7bCVADcu4wpTG7P5reLMrLnVmmdhE53uf
DqKJ3YQNNJ1BElh2gLRAIsyKuoi/n/PrRxC1tnQ5gMlBJ5EOYwBsQOhsqCZMaMGT
PTymRQHe94tihkTKT+pf6LLz+3cOto5WQfUEW0j+F1Xkd0d/ltoS2EjT05wRlacy
XTd0i4lMDydZO32WZmbJji3IDuAs69i8ou+t6xmySmrgRqa596GelmDq+K13UmGn
ygVBLrHJlg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:55:00 2025 by rpki-client