Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3232203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32322d3232203d3e20323633333338.roa (raw, json)
Hash identifier:          BH9s6s29PONVc/hwwc9apfG5Qsvy0sVGbNJtZyi3RYE=
Subject key identifier:   DB:AE:5E:E7:F3:61:FE:D1:7C:E7:9B:B5:05:B3:FB:04:DC:E4:84:F4
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       1C6CC022FD2E08E03B3F06F60885E21DC57A7014
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3232203d3e20323633333338.roa
Signing time:             Wed 22 May 2024 18:25:17 +0000
ROA not before:           Wed 22 May 2024 18:20:17 +0000
ROA not after:            Wed 21 May 2025 18:25:17 +0000
asID:                     263338
IP address blocks:        191.36.184.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 11:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6c:c0:22:fd:2e:08:e0:3b:3f:06:f6:08:85:e2:1d:c5:7a:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 22 18:20:17 2024 GMT
            Not After : May 21 18:25:17 2025 GMT
        Subject: CN=DBAE5EE7F361FED17CE79BB505B3FB04DCE484F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:e8:29:90:ed:b9:b3:5e:fc:dd:88:92:94:
                    7b:8a:33:d7:d0:5e:76:ff:35:41:4a:a8:31:d3:42:
                    e2:3c:b7:a7:25:a2:de:55:33:05:ac:19:39:4a:52:
                    35:bd:8a:4d:9b:c9:88:52:50:ee:ad:c8:40:ab:e4:
                    e7:2b:91:ff:28:3c:b5:3d:67:11:4f:52:83:36:fb:
                    a9:fa:ad:a9:7f:27:1d:75:8d:76:fa:02:89:3b:56:
                    b6:80:23:78:e0:95:ce:66:90:56:58:4d:74:0c:2f:
                    a1:78:fc:9b:3d:cf:3b:7b:32:95:03:ff:e7:9a:53:
                    77:fb:32:de:c4:d6:a6:66:a6:24:4c:33:8a:65:81:
                    b0:3b:6c:f5:1c:4f:59:0b:47:19:3b:e0:4c:e5:62:
                    5e:66:3b:3a:1a:83:aa:1c:40:96:13:aa:5d:c9:aa:
                    24:43:af:35:f7:40:ff:08:5d:0c:34:26:8f:0a:04:
                    e1:da:f2:17:c8:c2:d1:c6:08:ff:ac:cf:04:76:a6:
                    a2:50:f7:f6:6f:96:52:50:19:27:36:db:63:90:eb:
                    cc:2a:66:ea:fa:7f:82:eb:df:2e:d9:ae:23:63:47:
                    9d:80:7a:f9:02:61:72:a3:2f:88:6a:e1:1a:67:31:
                    ec:f6:ab:78:b4:d9:61:e6:36:7a:62:98:6b:10:28:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:5E:E7:F3:61:FE:D1:7C:E7:9B:B5:05:B3:FB:04:DC:E4:84:F4
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32322d3232203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:e5:92:30:b3:ec:c7:d8:d4:37:50:fa:09:ac:5c:ba:3a:
         08:23:38:0a:6e:3b:fd:b8:28:aa:c7:0d:0f:bc:19:3f:18:fc:
         54:63:64:89:6f:ff:4f:6d:42:53:43:63:e7:93:02:8e:9a:89:
         51:2c:54:04:64:d6:de:05:a6:2e:98:b3:a3:55:f7:54:1e:4f:
         34:6c:f0:fe:e1:e1:fc:78:fd:dd:1e:2c:5f:1e:77:16:43:30:
         53:52:38:55:97:e8:e1:50:00:10:5e:a9:e6:80:93:50:bc:66:
         8f:17:29:df:dd:48:b7:07:14:c7:09:a5:a7:0d:8c:bd:06:3c:
         84:48:c1:1f:b8:78:6b:f1:5c:e1:6c:87:5a:eb:3e:aa:82:cd:
         24:82:1d:74:78:9d:53:53:de:be:1b:f2:b8:b0:de:b2:a9:9f:
         b1:09:e9:93:e8:1f:a9:53:02:e5:a6:27:fb:dc:f2:40:f2:20:
         f3:64:75:6e:58:2d:15:3b:59:8f:a5:2c:0d:a2:fb:52:2a:6b:
         90:57:a6:1f:6b:a8:d8:40:74:33:21:ad:c3:d2:3d:4e:97:0c:
         75:24:98:53:85:59:81:58:48:47:6c:77:5f:07:d1:f9:9c:85:
         5c:3a:bf:65:f9:fe:06:33:1d:48:83:a7:71:97:20:51:e4:ae:
         85:15:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:32 2025 by rpki-client