Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e36382e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          oAsvseGvFCuqhdVu9MJ7MOXLI/LyQo5RbmR8MAuJKZs=
Subject key identifier:   DB:1B:0A:FD:4D:C2:07:38:73:4F:A7:CB:EC:44:6F:AC:A7:C9:82:15
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       3A6C7E63D861C1FD0EFFBAF5A3E7B92C4F483E6B
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32342d3234203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:46:27 +0000
ROA not before:           Mon 06 May 2024 11:41:27 +0000
ROA not after:            Mon 05 May 2025 11:46:27 +0000
asID:                     262338
IP address blocks:        177.126.68.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 18:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6c:7e:63:d8:61:c1:fd:0e:ff:ba:f5:a3:e7:b9:2c:4f:48:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:41:27 2024 GMT
            Not After : May  5 11:46:27 2025 GMT
        Subject: CN=DB1B0AFD4DC20738734FA7CBEC446FACA7C98215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:51:81:3a:8a:c0:a1:6e:bd:67:2e:bb:86:
                    29:f0:bc:71:ef:5a:d1:54:55:ed:8a:b5:ba:a0:34:
                    75:99:3a:a5:87:a1:5a:83:35:1a:a5:09:65:68:71:
                    98:7e:80:0e:86:4f:c1:2e:3d:5f:87:f6:2e:7c:68:
                    56:ff:6d:d2:fc:a0:2a:4f:ab:67:90:cf:87:b8:1e:
                    7e:a5:5e:5a:b3:7e:b0:62:a7:b0:2b:b4:fa:59:51:
                    ce:fb:62:4b:41:f7:ff:60:d3:b5:19:7d:55:42:90:
                    c2:7d:51:d3:c9:da:d5:61:89:33:9e:16:41:43:e5:
                    fe:25:08:c9:5f:93:d2:a1:3d:38:7b:44:a0:01:1d:
                    38:60:a4:cc:77:de:d8:c7:3f:35:16:8d:96:13:1b:
                    5d:54:29:57:5e:50:ee:bd:89:8d:5f:f1:c6:61:21:
                    f5:cb:c7:57:0d:dd:f0:2e:8f:cc:8f:ac:70:54:ab:
                    f5:c3:93:cd:33:1f:7f:80:89:13:a4:03:28:6a:84:
                    eb:8a:f9:50:f3:b5:fd:56:1f:81:9e:5d:5b:6f:10:
                    1b:ed:24:09:af:c8:2f:0c:36:9e:97:f0:75:df:0c:
                    d5:86:34:54:63:d0:04:27:d9:f3:cd:bd:38:39:0d:
                    e1:1b:f4:0c:ee:14:19:77:2a:84:0d:e0:e1:99:05:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1B:0A:FD:4D:C2:07:38:73:4F:A7:CB:EC:44:6F:AC:A7:C9:82:15
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e36382e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:42:0f:77:c6:c0:2c:3e:91:ac:60:ba:3f:5b:30:2c:db:8a:
         09:aa:1b:e6:7f:5c:d9:20:68:58:a5:83:95:8b:67:6a:52:db:
         00:36:fb:bc:42:9b:6b:fe:55:72:db:cf:b8:46:c7:17:41:fd:
         5a:b1:bc:77:44:da:3c:b0:0d:02:93:d0:85:29:4f:1a:b0:b4:
         ca:40:94:e9:55:01:fc:d2:ba:f2:15:c3:63:82:6b:7c:09:65:
         45:54:e2:a8:e2:9d:f3:40:13:03:08:61:44:52:dd:dc:b6:3f:
         75:6e:7f:4b:8b:b2:74:c7:74:bd:ee:61:7d:21:9c:fc:34:0d:
         9b:77:42:86:1e:eb:84:0a:dd:84:a6:1c:83:89:a7:d0:76:7b:
         c6:08:69:17:62:d9:c3:32:76:ca:83:79:4c:92:84:b0:b4:57:
         c8:de:03:62:d4:22:e7:ac:8e:ab:34:6d:e2:7d:02:75:21:de:
         c7:f0:1e:72:8b:73:49:94:16:53:af:98:c5:da:02:45:0b:1f:
         c3:90:3a:82:99:43:4a:96:5a:22:89:5c:2d:20:2b:d2:d8:06:
         11:40:58:38:a3:d6:fa:83:fe:0f:d5:76:61:13:36:08:03:28:
         1e:fa:2e:ee:f9:9f:c6:64:df:9f:7c:42:54:37:c4:98:1a:76:
         9f:ab:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:55 2025 by rpki-client