Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36352e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e36352e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          yByQhVmfEBqwi7wHrSgTlJTd1WdIwlIYCq5/1ZtzV9w=
Subject key identifier:   02:05:34:61:8E:5D:DA:C2:5A:56:2C:3B:0E:6D:A0:EE:A1:20:7A:D3
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       0427E246FAF90A7541A45809B2C28526A9AA174C
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36352e302f32342d3234203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:45:44 +0000
ROA not before:           Mon 06 May 2024 11:40:44 +0000
ROA not after:            Mon 05 May 2025 11:45:44 +0000
asID:                     262338
IP address blocks:        177.126.65.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:e2:46:fa:f9:0a:75:41:a4:58:09:b2:c2:85:26:a9:aa:17:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:40:44 2024 GMT
            Not After : May  5 11:45:44 2025 GMT
        Subject: CN=020534618E5DDAC25A562C3B0E6DA0EEA1207AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:3e:55:a4:fa:7b:b2:70:56:43:4a:54:67:
                    a3:63:cc:36:ce:2d:bf:70:0e:33:09:2c:df:b4:0c:
                    33:93:89:a1:43:d5:ee:7e:48:a2:06:0b:92:49:be:
                    1c:81:22:ec:8b:30:5b:a9:88:8e:2e:77:96:49:86:
                    02:e0:18:11:6b:4b:84:ea:81:b8:59:41:3a:95:cc:
                    7e:8f:70:b8:73:12:84:2d:ba:96:78:91:13:56:7d:
                    ef:81:b6:0b:3b:ae:b0:2b:81:19:d7:b4:3b:9c:17:
                    f8:32:4d:6b:c2:4e:71:12:ba:18:d2:d8:d8:25:f3:
                    ab:eb:4b:40:95:a0:80:46:bf:89:32:95:da:c2:8f:
                    06:f3:a7:b3:cb:83:5e:6f:48:5c:5b:cb:62:7d:03:
                    09:bf:3b:07:2f:d2:33:99:58:f8:fe:a3:ee:94:f4:
                    14:ac:c3:9c:d8:9a:d6:32:1b:a3:87:a4:7e:fe:3b:
                    3b:9a:9f:d2:f6:ce:68:de:91:e5:6e:71:be:72:15:
                    ad:0a:96:33:9c:fe:d6:c8:9c:a6:7f:ca:4c:65:c4:
                    5f:56:10:9d:1d:e4:48:cb:cb:34:de:ed:73:ac:c3:
                    16:8b:d7:6a:84:19:af:70:5a:f5:84:46:cf:5f:c6:
                    f0:a0:a8:41:9f:0a:28:06:c6:a4:56:cd:83:29:ee:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:34:61:8E:5D:DA:C2:5A:56:2C:3B:0E:6D:A0:EE:A1:20:7A:D3
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36352e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:53:0c:63:52:5f:33:8a:3d:8c:37:70:07:a7:8b:40:db:a3:
         62:14:3c:9a:d4:61:c8:e9:8f:05:50:38:a7:b7:88:ae:20:c6:
         5d:73:f0:99:ca:0b:13:04:dc:a0:ff:ae:dc:12:d7:90:a4:5d:
         22:0f:e6:63:34:0a:55:e2:97:e5:9f:d5:bf:38:e6:07:3e:75:
         b4:1f:f7:b0:b3:d6:3d:7a:0b:b5:64:e8:a2:48:1f:f1:39:f0:
         e8:63:e2:ad:63:3f:2b:8c:6f:1f:76:c9:37:2d:2c:0d:a1:6a:
         c5:22:e5:6c:95:11:e8:94:f7:cb:56:8a:6b:10:fc:d9:31:33:
         91:2f:0a:6b:3e:8a:b7:0d:9c:0e:e3:83:dc:0c:7b:ab:ff:84:
         e9:3b:55:31:4b:0d:63:c0:44:b3:47:57:07:dd:30:9b:83:f6:
         d7:32:36:f3:69:2e:ac:7d:b8:5e:c0:b0:4c:5a:18:37:a4:ce:
         92:17:09:09:e0:ce:3f:46:eb:6b:fb:b9:9c:74:cd:33:bc:9b:
         10:db:fb:f8:5c:22:37:af:34:1e:fc:c8:2d:3e:e2:70:a1:29:
         f6:4b:64:69:2f:f8:e0:c1:e9:48:cf:f5:ac:50:13:46:9e:e4:
         2b:e8:ce:d1:d7:17:77:d4:12:1e:42:1d:e9:3e:26:7c:12:1e:
         5c:e5:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:19:54 2025 by rpki-client