Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa (raw, json)
Hash identifier:          hrXm27mp8MJY5vc14fhMUFkY6ncSkoCTSrhp8ARhNSE=
Subject key identifier:   E5:5C:0B:82:13:1D:B0:9C:0A:D4:52:FB:C5:65:74:F3:BE:EC:4C:F1
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       2ECAB9FD9B21E396C9311BDCCD3031525BB5EFF3
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:22 +0000
ROA not before:           Thu 16 May 2024 11:33:22 +0000
ROA not after:            Thu 15 May 2025 11:38:22 +0000
asID:                     263338
IP address blocks:        170.78.244.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 11:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ca:b9:fd:9b:21:e3:96:c9:31:1b:dc:cd:30:31:52:5b:b5:ef:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:22 2024 GMT
            Not After : May 15 11:38:22 2025 GMT
        Subject: CN=E55C0B82131DB09C0AD452FBC56574F3BEEC4CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:8e:35:ac:69:21:11:ba:ed:d9:d0:9f:73:
                    6b:85:04:b0:8b:77:75:50:19:4a:f8:52:2f:3a:fd:
                    8f:9f:8c:b5:08:11:b0:11:9b:86:67:39:be:85:97:
                    2f:77:60:02:0e:28:53:7f:c3:70:a8:b6:69:a4:6b:
                    44:b7:cd:ba:a4:bb:b0:e1:17:5d:44:c7:21:b4:03:
                    f2:ac:a4:8a:f9:40:5c:0a:d2:d6:07:ca:98:96:fc:
                    2d:f5:32:6c:f2:0b:3b:75:07:d4:14:69:29:c1:bd:
                    56:d5:0e:c4:da:15:22:19:ce:f2:65:40:66:81:6d:
                    27:15:13:0b:58:2e:64:e0:4c:7b:20:cb:b6:6e:ad:
                    b8:a9:3a:1d:cc:43:32:b3:7b:af:39:2b:46:27:7c:
                    bc:93:14:77:77:3a:da:c6:64:41:c4:c6:c5:f6:ed:
                    b9:5b:aa:1b:0f:fd:a6:c5:03:8e:fa:0c:5f:5a:ea:
                    e7:1a:47:8c:fa:78:0a:28:4b:7d:c5:7d:ca:0a:37:
                    51:8b:fc:9b:a8:61:24:be:f9:5c:55:dd:24:48:29:
                    7b:39:6f:de:9b:94:62:51:4f:cb:55:f9:21:a5:6c:
                    7d:ab:ab:77:96:9b:01:d1:78:4a:db:d4:6c:ef:66:
                    10:96:4d:11:89:b6:c1:69:97:be:71:79:c4:06:66:
                    35:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5C:0B:82:13:1D:B0:9C:0A:D4:52:FB:C5:65:74:F3:BE:EC:4C:F1
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32322d3232203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:19:a3:52:d3:60:b6:bb:04:aa:5c:38:c0:79:2f:ab:65:d0:
         e7:6b:1e:26:54:4c:bf:be:14:00:af:24:43:3c:0b:0e:f2:c5:
         b6:2c:ec:ab:37:1b:f0:3c:e5:c4:02:b2:12:87:7f:ed:66:21:
         d2:80:fb:27:dd:fc:82:17:a9:e0:6b:cc:ee:21:93:1e:51:a7:
         68:46:22:98:54:70:97:46:a5:4b:8d:f9:bc:e2:30:f0:84:19:
         a3:23:79:8c:32:b9:60:bf:ff:a2:a0:37:48:10:91:fb:ff:7a:
         98:21:0c:fa:90:da:ed:e2:88:db:b4:24:74:cb:b7:65:60:3c:
         23:06:c9:ec:f3:85:8d:95:54:61:96:6d:53:a9:0e:43:d8:3f:
         3b:01:b4:97:3a:51:e8:3d:f2:2f:70:37:77:4c:56:09:82:2d:
         05:dd:00:e0:57:0a:06:bd:59:c4:82:e7:17:ef:96:62:ac:f0:
         08:87:2b:fe:92:0b:1e:aa:a9:8b:c1:ba:b8:17:ac:32:88:f6:
         3d:0e:09:21:2f:7b:75:38:7f:f5:d9:ff:20:74:56:db:df:a3:
         69:5b:04:63:89:17:37:ef:8e:3c:89:d6:e0:90:5a:4e:6c:d2:
         00:73:bf:8c:90:10:b2:6f:30:53:d1:8c:b4:60:ec:70:8f:fc:
         0a:d0:8d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:57 2025 by rpki-client