Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36312e302f32342d3234203d3e20323730383733.roa
File:                     3137392e34332e36312e302f32342d3234203d3e20323730383733.roa (raw, json)
Hash identifier:          O+v6KMDal5TnQlp32vvnWcy0AiOwb0oNJF5AqpWq0yA=
Subject key identifier:   19:8A:BB:97:5A:84:D1:0C:F5:5C:53:6B:6D:D6:8B:BE:13:29:04:6C
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       458D7687AB2B808EBB7BC15673471E5772D4DE8C
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36312e302f32342d3234203d3e20323730383733.roa
Signing time:             Fri 05 Jul 2024 14:43:45 +0000
ROA not before:           Fri 05 Jul 2024 14:38:45 +0000
ROA not after:            Fri 04 Jul 2025 14:43:45 +0000
asID:                     270873
IP address blocks:        179.43.61.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 15 Oct 2024 18:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:76:87:ab:2b:80:8e:bb:7b:c1:56:73:47:1e:57:72:d4:de:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Jul  5 14:38:45 2024 GMT
            Not After : Jul  4 14:43:45 2025 GMT
        Subject: CN=198ABB975A84D10CF55C536B6DD68BBE1329046C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:40:d7:6d:5f:8c:a1:e3:59:85:32:9b:37:
                    77:0f:03:e8:e3:bb:68:c3:3e:21:c7:61:35:fb:ea:
                    6b:d2:e9:93:23:06:4e:78:c3:2f:0b:25:ba:c1:54:
                    d0:d3:5c:bd:fe:b8:96:84:70:f5:4a:ef:e8:d8:14:
                    e2:74:78:75:9c:c3:dd:09:7b:c8:e1:46:85:eb:53:
                    2b:41:67:0e:c9:f6:be:a5:bb:6c:85:2e:f4:3f:b3:
                    ce:0c:ab:7b:6f:0b:e1:96:e8:98:86:b0:fd:00:3b:
                    22:9a:bf:64:f7:49:c7:5b:45:f6:03:de:77:1e:ab:
                    93:89:98:a8:66:27:d1:f9:2a:1d:90:74:7f:b6:3c:
                    09:ab:ea:15:09:ae:a6:d4:3a:82:34:ea:4b:38:42:
                    c6:5c:cf:f1:cd:97:47:a2:bd:c4:38:aa:21:d9:df:
                    b0:f9:20:07:04:e3:73:f7:e5:27:dd:96:b2:a9:0c:
                    a2:46:bf:ee:12:3b:f2:2b:16:08:fa:86:95:12:8e:
                    ae:a0:4f:39:dc:68:61:52:fe:29:d2:e1:69:57:79:
                    3b:30:2c:a7:a8:d4:7d:9e:57:8c:e2:e4:71:55:4c:
                    2c:65:23:cb:25:51:16:8d:15:84:4c:cd:58:d8:8e:
                    87:b6:57:e8:7e:ae:b0:3a:32:2f:bf:e8:d1:c1:a8:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:BB:97:5A:84:D1:0C:F5:5C:53:6B:6D:D6:8B:BE:13:29:04:6C
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/3137392e34332e36312e302f32342d3234203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:99:b3:28:52:34:38:2b:f7:45:af:d1:6c:b2:4d:fc:d5:
         a8:e4:5e:39:0d:a2:fc:f1:5b:31:1a:48:8b:b3:ce:4c:53:d5:
         2b:d6:3b:d7:2f:9e:97:6c:db:92:ce:25:78:d0:09:4c:e0:85:
         36:be:08:a6:b0:4f:74:40:7e:16:ed:bb:f5:28:31:ac:d2:7a:
         5e:c4:3e:88:99:c6:96:fc:df:f2:5b:2b:b5:53:e9:5c:30:94:
         9a:a3:75:1f:96:d7:78:55:10:4f:7d:e2:62:e9:71:79:a1:a2:
         d0:ec:d5:9c:3a:2b:70:3b:cc:79:bd:08:7d:1b:ab:78:c1:e5:
         76:c3:75:c5:cf:95:b2:eb:3f:63:fc:40:0f:a4:b5:2a:4b:b7:
         22:70:4c:bf:50:b5:56:7c:6a:c3:c8:78:6a:03:ab:dc:64:bb:
         a7:28:78:e3:e5:dd:4e:16:6b:a1:b5:86:d1:39:76:d6:0a:83:
         5f:ca:22:ac:18:db:c9:cb:33:18:11:6e:76:5d:1f:f4:b6:c2:
         31:92:ce:c8:00:10:73:27:24:54:59:03:2e:a8:25:4c:b0:b5:
         da:f5:82:f6:74:89:74:e6:15:e9:51:08:ca:cc:17:9e:f9:93:
         82:b1:df:be:65:7a:c7:8a:06:bb:19:0f:f3:0a:ae:18:9c:8a:
         ce:3e:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:29:13 2025 by rpki-client