Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e20323633333338.roa
File:                     3137302e37382e3234342e302f32332d3233203d3e20323633333338.roa (raw, json)
Hash identifier:          P+lEDINsvhIW9tcXFyG4n85S2/VUK2WVOn15+kZ+d0Q=
Subject key identifier:   45:D4:DC:62:CE:89:DE:56:5E:26:1E:51:F9:2A:F6:02:06:9E:46:F3
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       0EA807DC8EC33BA4CC7B822D3707FFAD91C1068C
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e20323633333338.roa
Signing time:             Wed 22 May 2024 18:32:29 +0000
ROA not before:           Wed 22 May 2024 18:27:29 +0000
ROA not after:            Wed 21 May 2025 18:32:29 +0000
asID:                     263338
IP address blocks:        170.78.244.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 11:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a8:07:dc:8e:c3:3b:a4:cc:7b:82:2d:37:07:ff:ad:91:c1:06:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 22 18:27:29 2024 GMT
            Not After : May 21 18:32:29 2025 GMT
        Subject: CN=45D4DC62CE89DE565E261E51F92AF602069E46F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:48:2b:7c:7a:f5:39:dc:09:3e:c5:bb:eb:
                    c5:da:cd:2c:27:2f:c4:cd:59:0e:63:7a:7f:8e:50:
                    4d:7b:3b:80:d0:da:d1:dc:e2:ea:6c:1a:4f:06:9d:
                    b7:0e:bb:d2:02:d9:b4:25:62:45:f4:72:81:52:ac:
                    02:a0:5a:bc:c0:e0:79:4d:af:95:f8:45:1a:a4:5f:
                    e9:b3:49:2a:90:57:5b:3f:35:28:bb:07:81:11:31:
                    6f:0c:7c:72:64:51:80:d7:91:90:d4:48:8b:97:d3:
                    fb:42:7e:ea:28:d2:ce:a1:39:58:95:37:a5:f1:2d:
                    57:6a:ee:25:f1:19:3e:20:e6:a0:c4:39:3b:4e:28:
                    cf:ed:a9:60:11:1f:e0:87:a4:38:9f:fb:b0:f5:90:
                    e8:20:87:e1:bd:20:06:09:05:71:2c:8d:2f:f1:b6:
                    a9:81:21:0e:e7:92:f3:a0:36:96:d8:1c:7c:32:89:
                    6b:f5:47:bb:90:ba:e5:75:fd:97:c0:1c:5d:bd:26:
                    99:3f:7e:51:7d:6b:38:23:90:02:78:58:2c:6f:b7:
                    61:9c:50:74:2c:e5:1f:c8:ed:2c:a0:b9:a7:3a:75:
                    b3:7d:a6:9b:c7:72:89:33:d8:49:ad:97:21:04:60:
                    44:10:f0:71:e9:b4:37:18:c2:b7:ba:67:dd:41:6e:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:DC:62:CE:89:DE:56:5E:26:1E:51:F9:2A:F6:02:06:9E:46:F3
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3137302e37382e3234342e302f32332d3233203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:da:71:58:fb:e5:75:08:09:a5:56:ff:6f:41:0f:39:7f:
         8a:d6:d2:4e:b3:22:78:f4:e3:c4:d0:91:d0:29:61:c1:11:4c:
         b5:1b:a3:83:a6:7b:6c:33:d1:b7:d7:75:19:66:29:fd:6d:1c:
         a2:28:ac:7a:a4:9a:bf:93:57:79:14:52:ae:77:91:a2:09:d4:
         8a:3b:4f:69:8f:ed:ae:9a:ab:11:6a:ea:68:00:4e:e7:ee:07:
         aa:1b:ee:52:fe:11:13:db:22:8e:89:c0:ba:f1:83:34:0c:91:
         27:fe:b4:58:f2:b9:bb:53:b1:aa:17:30:50:67:53:d8:05:79:
         b2:d9:b2:e8:df:dc:22:44:09:57:00:f4:11:be:a4:35:8a:30:
         f1:f1:6c:8c:86:d0:7e:8f:fe:de:85:74:91:d8:23:f5:40:d7:
         79:6f:60:52:e1:73:9e:7d:ed:06:2c:86:c6:c4:ba:31:0f:be:
         e8:58:f1:6b:0f:f9:db:67:de:b8:26:14:1d:9c:3e:d5:68:d4:
         96:29:f8:49:2d:6b:81:90:29:01:e9:a7:98:d8:80:07:66:0f:
         a4:ad:1c:81:17:e9:83:24:e6:a1:b7:f2:68:29:ee:4d:16:6f:
         ec:5c:cf:0c:44:9f:3f:eb:94:09:a4:8c:1f:3d:a4:0b:41:cd:
         27:eb:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:39:44 2025 by rpki-client