Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39332e302f32342d3234203d3e20323730343336.roa
File:                     3230302e362e39332e302f32342d3234203d3e20323730343336.roa (raw, json)
Hash identifier:          Pwly6FszC08Y2sSIOJBX2cleWujqSPJysJA7RzGqmmI=
Subject key identifier:   23:54:94:88:70:E9:B6:BE:5A:EF:04:EC:D3:E7:0F:FB:38:F2:F6:7E
Certificate issuer:       /CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
Certificate serial:       2DECF34948DCDBA1200614EE1536453A59DCAB94
Authority key identifier: B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39332e302f32342d3234203d3e20323730343336.roa
Signing time:             Tue 11 Mar 2025 19:56:51 +0000
ROA not before:           Tue 11 Mar 2025 19:51:51 +0000
ROA not after:            Tue 10 Mar 2026 19:56:51 +0000
asID:                     270436
IP address blocks:        200.6.93.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Mar 2025 19:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ec:f3:49:48:dc:db:a1:20:06:14:ee:15:36:45:3a:59:dc:ab:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D5055B9984E119C052DEDB3F3B11B9B657F291
        Validity
            Not Before: Mar 11 19:51:51 2025 GMT
            Not After : Mar 10 19:56:51 2026 GMT
        Subject: CN=2354948870E9B6BE5AEF04ECD3E70FFB38F2F67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:46:77:98:26:32:49:49:72:b0:29:9f:4f:
                    20:7c:a9:21:3f:90:17:13:e9:42:e2:07:09:b9:00:
                    35:f0:17:cd:67:96:98:c9:0c:13:2a:6f:4b:8b:78:
                    fc:06:c2:ca:02:bc:d3:cf:b5:e2:29:f1:0a:f4:d4:
                    63:72:ac:f3:b9:59:97:87:2b:5c:e3:2a:8a:b9:b7:
                    75:17:1d:55:22:ab:65:be:de:53:91:4b:c5:1a:fe:
                    1f:e2:61:fc:07:49:47:b9:6d:c7:89:a2:6e:ec:ff:
                    b2:29:2d:7a:03:c1:7b:e6:63:c1:35:e8:92:37:10:
                    cc:e9:de:92:e7:2f:50:c3:ba:7e:c7:3e:81:06:38:
                    83:28:2b:2e:18:bc:68:b2:ee:e1:1d:29:18:7d:1f:
                    6b:e4:e5:9c:dd:f6:74:c1:3f:a8:94:ea:4f:70:4e:
                    f9:22:06:06:f7:a8:40:1c:14:61:fc:d6:88:5a:2f:
                    ec:23:29:f9:49:6a:a9:ff:d9:d7:b1:ce:f4:df:28:
                    50:24:72:17:9a:3a:90:e5:e2:82:5f:ab:80:02:2c:
                    36:9b:ec:43:54:0b:fa:d7:ed:4a:27:80:9e:e1:24:
                    d5:3c:13:e9:04:17:1a:f6:0c:fe:2e:5d:8c:77:cf:
                    9d:df:ff:22:d3:fa:d8:40:9f:58:13:5f:eb:6b:ea:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:54:94:88:70:E9:B6:BE:5A:EF:04:EC:D3:E7:0F:FB:38:F2:F6:7E
            X509v3 Authority Key Identifier:
                keyid:B8:D5:05:5B:99:84:E1:19:C0:52:DE:DB:3F:3B:11:B9:B6:57:F2:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/B8D5055B9984E119C052DEDB3F3B11B9B657F291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D5055B9984E119C052DEDB3F3B11B9B657F291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jdyqk2dyytKGfP4ei1JkRvAruzwZWokKDZSvF351P8W/0/3230302e362e39332e302f32342d3234203d3e20323730343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:b9:36:05:74:fa:c4:0d:03:fc:56:f1:b9:e1:36:32:4a:
         df:d3:e0:d9:24:8e:c4:e3:93:77:45:6d:e4:06:07:8b:bb:d6:
         1d:c5:54:18:6a:83:66:c2:a2:7d:93:58:96:14:ca:0d:ef:de:
         7d:37:9d:d0:05:3d:79:48:6c:a7:24:44:5d:89:e3:a5:8f:8d:
         3b:71:28:ae:df:6b:14:e8:09:7c:5e:4e:ba:12:fa:95:31:aa:
         00:80:33:b0:6a:67:bc:88:47:1d:ca:e2:0b:02:c2:04:a6:f4:
         cb:17:17:47:77:99:9d:15:84:8e:81:6b:f6:59:43:ff:52:ea:
         8a:43:33:01:41:dd:ce:d9:9a:7c:e0:48:3b:51:1e:dd:c5:61:
         6f:41:f8:c7:ff:ef:b3:0f:71:7d:0e:73:47:5d:b0:78:01:97:
         f6:d8:15:30:00:6d:fe:ec:66:f8:a7:2f:47:26:ad:b7:1e:e6:
         40:04:d0:9a:00:82:bc:c6:08:d2:de:ac:bb:1a:ce:9d:e1:ec:
         56:bd:9a:71:57:f8:a8:b9:65:b6:53:e9:d8:9c:d2:c7:55:f7:
         24:9d:53:ed:41:5c:41:29:02:9d:cb:7e:46:69:98:39:4e:bc:
         af:cf:69:74:f7:e6:5c:e2:a2:3f:22:88:b4:d1:47:15:64:f9:
         4d:15:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:08:46 2025 by rpki-client