Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139302e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3139302e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          NnuGU0/0jP4lNgyIfN6wJxQwZrhUtKN02nK58Vvmm7E=
Subject key identifier:   B1:60:11:87:95:67:E8:31:85:1A:E7:5E:11:64:D5:86:36:49:5B:6C
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       6B3B39F4BFB2AA1B082ACF4B9D3503177246CF6E
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139302e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:52:10 +0000
ROA not before:           Fri 18 Oct 2024 11:47:10 +0000
ROA not after:            Fri 17 Oct 2025 11:52:10 +0000
asID:                     263338
IP address blocks:        191.36.190.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 11:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:39:f4:bf:b2:aa:1b:08:2a:cf:4b:9d:35:03:17:72:46:cf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:47:10 2024 GMT
            Not After : Oct 17 11:52:10 2025 GMT
        Subject: CN=B16011879567E831851AE75E1164D58636495B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:cc:bb:31:9e:08:f1:28:29:04:fb:3e:2c:
                    b9:5e:f5:03:47:57:13:58:f0:a5:7b:50:db:1e:23:
                    bc:f5:e4:33:f8:5a:f8:e8:61:04:0b:9a:a8:cf:6f:
                    36:21:1c:2f:a1:64:5c:a8:a1:ef:b1:d8:08:c0:66:
                    54:b9:65:7b:cb:37:05:8f:23:8d:21:33:ab:11:d6:
                    27:15:d8:d7:a8:11:28:a0:90:9b:a8:02:0f:a7:72:
                    de:b1:09:21:ae:e7:5c:93:bf:11:53:c3:51:2a:b7:
                    9a:65:b9:91:1c:ed:01:36:92:b4:4d:03:bf:f8:eb:
                    25:55:06:3a:03:e9:5c:c5:d0:a2:55:24:02:f5:3e:
                    4d:dd:8b:fc:b4:71:cb:61:2f:29:c1:a9:5a:61:90:
                    01:33:17:41:93:9b:b2:1c:29:4b:f8:a5:42:89:89:
                    25:bc:37:26:fb:b2:cf:3b:8c:49:a6:8e:16:5f:83:
                    fc:79:41:42:4e:6d:0c:36:c1:44:7d:a5:73:9e:e6:
                    c7:3c:98:17:24:90:3c:a9:67:8f:f3:e3:7c:dc:f2:
                    29:cd:4e:3b:dc:88:79:a2:fc:63:33:53:db:97:2e:
                    a9:c4:c9:47:b9:2e:1b:64:2c:fd:cc:42:a2:61:61:
                    3f:68:62:bf:00:d1:19:71:a9:e6:73:d5:57:09:23:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:11:87:95:67:E8:31:85:1A:E7:5E:11:64:D5:86:36:49:5B:6C
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139302e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:c5:af:69:bd:6b:dc:85:4a:40:03:f3:17:67:1b:7b:7e:67:
         da:b7:c5:9d:ba:77:57:b7:0b:77:9d:30:e8:46:97:bb:1e:61:
         00:36:83:fa:81:f2:01:28:ea:77:9e:2e:ef:24:b8:f7:ea:eb:
         46:25:43:f1:72:cd:6f:08:ba:34:69:3a:24:d7:71:03:7f:1f:
         34:ae:e1:a6:dc:8a:67:02:5a:b9:73:6c:a6:37:0e:f3:a9:2b:
         16:51:54:e8:05:f2:5e:14:24:a7:1b:54:dc:de:f6:9f:bc:29:
         7a:28:e9:77:56:aa:60:10:c6:02:c6:13:91:0d:86:76:0c:c5:
         52:62:ae:3c:d7:34:d6:03:ee:97:c5:e6:49:b4:1f:81:48:17:
         dd:b6:86:bd:8e:1d:b7:83:d4:c0:62:2c:53:13:d0:69:23:d3:
         5c:7a:ec:a1:95:6c:55:cd:fe:f1:7a:a9:19:e0:f6:54:63:f8:
         f9:ec:5e:67:72:09:39:eb:cc:26:34:57:85:94:5f:5d:77:52:
         7a:fa:6e:5a:72:84:49:f7:af:01:91:12:47:8f:55:6c:68:17:
         e2:38:a1:d5:fb:6e:b4:06:6b:7e:43:77:e9:93:83:ac:a4:5e:
         ed:bc:90:06:18:b1:fa:8f:86:a5:71:db:f8:ae:81:38:f7:18:
         db:49:bb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:02 2025 by rpki-client