Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3233203d3e20323635303238.roa
File:                     3137302e38342e3235302e302f32332d3233203d3e20323635303238.roa (raw, json)
Hash identifier:          X8xYOYZopr29u3RYpFkH4Uu4IDWl3+tTa1ICcso+o1w=
Subject key identifier:   EA:33:3C:6B:68:99:24:66:C0:22:C9:1D:07:8E:72:10:B8:17:3D:58
Certificate issuer:       /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial:       263B371B193619C50F7D10941099D9A8CE267977
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3233203d3e20323635303238.roa
Signing time:             Wed 09 Apr 2025 13:41:22 +0000
ROA not before:           Wed 09 Apr 2025 13:36:22 +0000
ROA not after:            Wed 08 Apr 2026 13:41:22 +0000
asID:                     265028
IP address blocks:        170.84.250.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 09 Apr 2025 19:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3b:37:1b:19:36:19:c5:0f:7d:10:94:10:99:d9:a8:ce:26:79:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
        Validity
            Not Before: Apr  9 13:36:22 2025 GMT
            Not After : Apr  8 13:41:22 2026 GMT
        Subject: CN=EA333C6B68992466C022C91D078E7210B8173D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:69:b1:c6:64:a7:ed:7e:cb:c5:a1:cf:48:
                    65:6d:b8:8a:15:fe:45:30:5a:a8:1b:a5:21:bb:ec:
                    8b:18:24:00:16:68:37:29:1a:e4:9f:21:20:0c:92:
                    0c:9b:d9:ec:68:29:c7:26:cb:d3:94:c2:ca:53:d6:
                    34:de:56:04:22:b9:3b:31:ab:db:d2:3e:9b:16:ee:
                    d3:38:75:a8:21:1f:21:57:a3:7c:2c:bc:67:fc:91:
                    49:71:77:e1:56:97:94:9a:69:58:84:a0:05:a0:b8:
                    f2:e0:84:9d:ea:e8:1b:1a:65:fa:21:b2:18:6d:3d:
                    0c:66:29:fe:03:92:08:c0:50:8a:c9:f0:df:41:7e:
                    f2:ba:2a:16:23:0b:51:66:24:ed:cb:b3:86:46:47:
                    23:b5:bf:d2:f2:27:8d:36:2d:f1:5f:ad:89:65:31:
                    21:2e:b4:a5:1c:61:36:34:57:80:26:85:22:1e:7e:
                    eb:f1:ec:71:59:1d:94:5f:a7:6f:01:de:5e:97:f2:
                    68:fe:90:db:f8:05:5e:fc:1e:6d:87:96:d0:8c:53:
                    09:4b:db:bd:80:cf:1d:ef:28:5a:23:77:f9:85:53:
                    b9:63:a3:66:1d:ba:df:8b:a5:b8:9c:8d:34:da:32:
                    26:47:87:1c:c2:c1:29:30:c0:d2:cf:f0:15:d1:81:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:3C:6B:68:99:24:66:C0:22:C9:1D:07:8E:72:10:B8:17:3D:58
            X509v3 Authority Key Identifier:
                keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/3137302e38342e3235302e302f32332d3233203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:ce:29:21:6f:7e:92:8c:81:54:2f:3a:c6:8d:76:8a:de:
         23:45:8f:dd:05:d3:75:ca:d9:0f:d9:c9:7e:37:7f:df:4e:08:
         40:82:3b:48:d3:03:1d:8b:9e:91:f1:89:d2:a1:51:bc:6f:e7:
         f1:ee:bf:4b:0d:11:41:76:8d:81:60:ce:11:c4:13:09:37:8d:
         15:4b:2f:1c:3f:30:bf:e7:d4:24:22:0f:53:f8:9a:ee:62:15:
         e4:4c:0a:e4:14:8f:69:e1:f9:87:40:47:fb:a6:b2:7e:88:2e:
         75:b9:61:9a:c7:3c:c8:d4:46:76:df:d3:46:35:b2:20:4e:f8:
         df:4e:d3:5d:e4:cb:c7:a6:87:a4:df:20:49:c4:03:b6:c9:9a:
         85:28:f9:5f:26:99:56:b8:17:ba:1f:a4:1a:15:e9:47:85:3e:
         0e:f3:c5:8c:8e:bb:3f:b6:f3:c2:45:bc:a2:cf:e8:5e:46:e9:
         ed:3c:51:0b:94:32:37:6a:8b:0e:e5:5f:74:80:2f:fc:ce:69:
         7c:2d:09:2f:f3:72:9d:79:00:ef:db:cc:23:d9:67:c5:c3:31:
         ca:b2:3f:ee:4f:d7:a7:fd:21:7c:26:3c:84:03:74:e2:07:e8:
         8b:c5:68:14:8c:cf:e0:7d:04:82:f5:ac:3b:c9:36:37:9f:a8:
         cf:d8:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:36:07 2025 by rpki-client