Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3232203d3e20323633353236.roa
File:                     3139312e3235332e32302e302f32322d3232203d3e20323633353236.roa (raw, json)
Hash identifier:          BI98k0qkMncn6zdv3JZOt8ewz0S/tRiGe4B50dsY/Z4=
Subject key identifier:   A5:11:F8:C8:67:02:4D:F0:69:9F:4F:68:C3:EC:F8:FB:53:BB:38:B2
Certificate issuer:       /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
Certificate serial:       781A75A33843600755784FA2C7563450A5B32DD7
Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3232203d3e20323633353236.roa
Signing time:             Tue 13 May 2025 13:49:01 +0000
ROA not before:           Tue 13 May 2025 13:44:01 +0000
ROA not after:            Tue 12 May 2026 13:49:01 +0000
asID:                     263526
IP address blocks:        191.253.20.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Tue 13 May 2025 15:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1a:75:a3:38:43:60:07:55:78:4f:a2:c7:56:34:50:a5:b3:2d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E
        Validity
            Not Before: May 13 13:44:01 2025 GMT
            Not After : May 12 13:49:01 2026 GMT
        Subject: CN=A511F8C867024DF0699F4F68C3ECF8FB53BB38B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:5f:d1:3f:58:12:77:8e:92:31:5f:00:a5:
                    1a:0c:a4:1a:35:54:78:a6:91:12:77:c3:2a:b9:19:
                    65:44:5e:62:32:88:e6:98:30:22:5d:8c:31:f3:a6:
                    48:25:09:1b:bc:5a:f9:37:51:ec:22:3a:a4:18:22:
                    b6:f8:ff:46:73:29:9c:42:a1:1c:b1:c2:ea:cc:05:
                    e0:f3:98:d0:4a:c0:fe:73:7a:b6:b1:2d:d1:73:2a:
                    c8:8a:49:44:e5:42:d2:f6:83:11:8f:3f:cf:6d:77:
                    f9:6f:24:49:e9:fa:da:05:f5:e0:1f:0b:bb:23:18:
                    fc:51:72:bb:eb:aa:21:e6:d9:7b:b3:f0:ab:11:f7:
                    8a:db:a7:4c:68:65:a7:b1:58:1c:a7:8a:00:f9:76:
                    6b:ef:17:44:78:54:86:21:9f:27:61:90:87:b6:90:
                    52:ac:18:29:09:f8:63:9f:17:9a:87:60:d5:2d:2d:
                    82:64:e4:89:00:5e:5f:f9:f3:7c:bc:c3:c4:11:52:
                    a6:ab:b9:04:76:bd:f6:7e:92:bf:83:11:80:38:48:
                    21:a1:9d:a3:c5:f8:a9:67:69:db:08:bb:e9:41:42:
                    e2:e3:bd:0e:5e:21:42:7e:13:d7:a3:9f:a2:48:63:
                    20:92:93:5d:28:86:3d:aa:ac:02:30:3d:38:09:f6:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:F8:C8:67:02:4D:F0:69:9F:4F:68:C3:EC:F8:FB:53:BB:38:B2
            X509v3 Authority Key Identifier:
                keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/3139312e3235332e32302e302f32322d3232203d3e20323633353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:fd:da:41:12:c3:03:36:2a:cd:d5:15:96:ab:92:ad:2d:b2:
         b6:58:9d:47:ad:35:bf:18:79:4c:d3:3c:8d:27:fc:db:c7:16:
         8d:2e:e1:67:80:63:dc:c5:64:90:b1:f1:6f:2d:d1:3c:28:f4:
         3b:1e:b0:6a:cc:f8:3b:7c:6a:3e:2b:67:f2:b3:33:b9:ca:57:
         1d:d4:e2:80:fe:1b:05:78:98:3d:50:9c:15:da:ab:48:8b:94:
         30:d2:87:6b:ab:a6:bd:a4:4e:a2:4e:66:90:4d:bd:11:e2:57:
         78:a5:ae:46:d0:6f:7e:83:17:f0:32:57:7c:be:5d:e5:05:bb:
         54:90:85:01:7b:f6:43:dc:56:4a:6f:58:2e:b2:9f:1f:e4:35:
         e7:0d:68:e7:2d:f7:ac:ef:5c:07:7c:88:cd:60:3f:de:55:b0:
         ff:e6:32:23:75:f5:4a:c0:c4:23:51:57:be:a5:0a:4d:69:e1:
         c9:ee:44:80:24:f1:36:50:eb:92:d2:46:eb:30:83:38:6e:65:
         10:c0:d7:a7:67:a0:fd:3c:d3:50:9b:41:35:52:10:73:4d:e7:
         ed:5d:97:ce:36:8f:14:a8:1f:8d:a7:dd:44:bb:ac:fb:5a:18:
         96:28:30:5a:b0:90:59:37:c9:35:00:59:68:0b:2c:b9:e4:43:
         aa:cf:8a:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeBp1ozhDYAdVeE+ix1Y0UKWzLdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDcyRDNGNDY1MjRGRDMyQjEyQTg4NTdBREE2QTM2MzUx
NTg3QzkwRTAeFw0yNTA1MTMxMzQ0MDFaFw0yNjA1MTIxMzQ5MDFaMDMxMTAvBgNV
BAMTKEE1MTFGOEM4NjcwMjRERjA2OTlGNEY2OEMzRUNGOEZCNTNCQjM4QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hV/RP1gSd46SMV8ApRoMpBo1
VHimkRJ3wyq5GWVEXmIyiOaYMCJdjDHzpkglCRu8Wvk3UewiOqQYIrb4/0ZzKZxC
oRyxwurMBeDzmNBKwP5zeraxLdFzKsiKSUTlQtL2gxGPP89td/lvJEnp+toF9eAf
C7sjGPxRcrvrqiHm2Xuz8KsR94rbp0xoZaexWBynigD5dmvvF0R4VIYhnydhkIe2
kFKsGCkJ+GOfF5qHYNUtLYJk5IkAXl/583y8w8QRUqaruQR2vfZ+kr+DEYA4SCGh
naPF+KlnadsIu+lBQuLjvQ5eIUJ+E9ejn6JIYyCSk10ohj2qrAIwPTgJ9malAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpRH4yGcCTfBpn09ow+z4+1O7OLIwHwYDVR0j
BBgwFoAU1y0/RlJP0ysSqIV62mo2NRWHyQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj
YXEvMC9ENzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MkQzRjQ2NTI0RkQzMkIx
MkE4ODU3QURBNkEzNjM1MTU4N0M5MEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqamZNeHFLVU1LNDZlYnlkVkFqclRYVGV4aUVHbkhqQmhHVmFVV1ZwY2FxLzAv
MzEzOTMxMmUzMjM1MzMyZTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK//RQwDQYJKoZIhvcNAQELBQADggEBAIz92kES
wwM2Ks3VFZarkq0tsrZYnUetNb8YeUzTPI0n/NvHFo0u4WeAY9zFZJCx8W8t0Two
9DsesGrM+Dt8aj4rZ/KzM7nKVx3U4oD+GwV4mD1QnBXaq0iLlDDSh2urpr2kTqJO
ZpBNvRHiV3ilrkbQb36DF/AyV3y+XeUFu1SQhQF79kPcVkpvWC6ynx/kNecNaOct
96zvXAd8iM1gP95VsP/mMiN19UrAxCNRV76lCk1p4cnuRIAk8TZQ65LSRuswgzhu
ZRDA16dnoP0801CbQTVSEHNN5+1dl842jxSoH42n3US7rPtaGJYoMFqwkFk3yTUA
WWgLLLnkQ6rPinY=
-----END CERTIFICATE-----
Generated at Thu Jun 12 15:12:06 2025 by rpki-client