Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31322e302f32342d3332203d3e203232333831.roa
File:                     3137372e3132362e31322e302f32342d3332203d3e203232333831.roa (raw, json)
Hash identifier:          1YXeEDRwewE6wUfXIOBn4UTW9+JJU1Rdtj1swItZeBs=
Subject key identifier:   E9:2B:23:8A:69:B0:38:21:AB:0C:6C:5F:48:DF:5C:5E:9D:15:90:BD
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       264AA1903FD65844A9E133DB8135272BA4DF68A3
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31322e302f32342d3332203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:08:46 +0000
ROA not before:           Fri 07 Mar 2025 19:03:46 +0000
ROA not after:            Fri 06 Mar 2026 19:08:46 +0000
asID:                     22381
IP address blocks:        177.126.12.0/24 maxlen: 32
Validation:               Failed, certificate revoked on Fri 07 Mar 2025 20:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4a:a1:90:3f:d6:58:44:a9:e1:33:db:81:35:27:2b:a4:df:68:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:03:46 2025 GMT
            Not After : Mar  6 19:08:46 2026 GMT
        Subject: CN=E92B238A69B03821AB0C6C5F48DF5C5E9D1590BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:89:20:ea:c6:63:72:98:74:f3:3c:3d:c7:
                    ff:b3:f4:c0:a5:ec:89:4f:a6:5d:86:5f:71:58:ca:
                    c2:63:11:b3:e5:7c:be:9f:34:2b:2d:07:6a:f3:31:
                    4f:e8:3d:42:c4:1c:52:af:be:d6:c5:e3:25:ba:c4:
                    53:0b:8e:89:71:eb:30:bd:29:cc:b1:3b:97:bf:9c:
                    4d:23:4c:d4:60:6f:6d:ae:9a:62:f6:bf:03:c3:0b:
                    00:7a:3d:40:53:78:92:ef:e5:c7:65:0f:fe:41:0d:
                    8b:9a:2e:fd:fc:a9:08:0c:5e:d2:03:d9:bd:cc:e6:
                    30:eb:b7:e4:a7:d7:d2:55:ca:fd:6f:8d:b4:f1:92:
                    32:f4:9b:cf:8d:62:71:59:67:22:9f:4e:77:70:a7:
                    ca:67:bf:db:2d:ea:aa:46:0c:9a:ac:84:1d:91:dd:
                    cb:ea:f4:0b:3b:15:26:b2:8a:23:42:35:dc:1d:d0:
                    d8:81:32:59:de:7c:4c:56:2f:88:1a:c5:5c:b9:06:
                    92:53:d4:8d:de:8f:43:b6:90:ce:0a:1a:32:41:25:
                    89:47:47:66:9c:2d:cc:14:5e:83:62:7c:a2:ae:01:
                    0b:bb:b3:2c:51:60:3d:22:92:5c:da:3c:57:cd:8a:
                    45:62:34:28:fd:cc:33:28:31:f2:1d:34:f5:4d:a7:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2B:23:8A:69:B0:38:21:AB:0C:6C:5F:48:DF:5C:5E:9D:15:90:BD
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/3137372e3132362e31322e302f32342d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:b7:98:78:98:90:c6:e6:c4:28:13:72:31:0d:5a:f0:1e:
         4f:b4:a3:df:26:0b:97:d4:70:e7:d0:39:6d:99:0d:c0:16:6d:
         a1:a3:7b:13:6f:90:f1:54:ae:37:f3:52:db:5e:e7:e4:ea:bf:
         8b:59:b1:ec:a1:2f:cb:73:8c:43:20:46:5c:fb:dd:eb:5c:61:
         6c:cd:e0:cb:a6:54:e3:1a:56:f3:63:3e:1f:b0:c0:86:da:8a:
         b5:5c:a5:79:99:86:ea:8c:58:bc:ab:96:04:f8:2d:a9:31:0f:
         ac:7b:e3:9f:77:b2:32:a9:57:ac:fb:67:2d:3f:74:19:cd:d8:
         cf:3b:20:0c:6b:47:c3:26:ea:11:d7:8b:0c:ec:33:b9:16:51:
         d3:73:18:79:04:5d:9a:7a:0c:0b:57:ef:c0:0d:d7:c9:f0:5c:
         88:33:2b:1a:cd:c8:89:ec:39:7c:88:db:fb:46:e1:65:6e:1c:
         7b:b0:36:b7:aa:8c:d8:95:52:90:bf:1a:86:8a:2d:cf:78:ed:
         5e:da:96:53:05:db:c3:c0:01:a7:2c:85:9d:ba:01:f4:c1:a0:
         79:4d:4a:38:6e:1c:42:9e:8f:d1:d7:2a:ee:0d:ca:04:d6:ed:
         61:c6:67:05:21:1a:5b:8b:c0:bd:c9:7c:f9:57:7c:c0:ec:b8:
         aa:d3:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:53:33 2025 by rpki-client