Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          ZDbLC96wqdflk45TuQaOVq21FzFtjQOnd0SMH7ZHxDw=
Subject key identifier:   34:DF:AE:6C:B4:5E:23:AD:D4:73:32:33:42:05:20:F2:93:A9:70:E7
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       0E345C65A1C080D4BDAF546CC2B6F09FC1622B2B
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:53:06 +0000
ROA not before:           Fri 18 Oct 2024 11:48:06 +0000
ROA not after:            Fri 17 Oct 2025 11:53:06 +0000
asID:                     263338
IP address blocks:        191.36.191.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 11:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:5c:65:a1:c0:80:d4:bd:af:54:6c:c2:b6:f0:9f:c1:62:2b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:48:06 2024 GMT
            Not After : Oct 17 11:53:06 2025 GMT
        Subject: CN=34DFAE6CB45E23ADD4733233420520F293A970E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:4b:df:f8:67:e6:38:25:03:4d:59:32:ca:
                    0c:41:7d:03:fe:02:5b:9c:f3:a8:db:73:b7:a1:e2:
                    0a:11:0e:a7:36:84:ad:f1:ff:69:45:23:b0:14:af:
                    70:c9:ec:4c:ba:b6:88:bc:58:93:ad:6c:e6:f4:c1:
                    06:a2:46:0e:df:75:c7:44:0b:a3:ad:03:9c:6d:76:
                    af:5c:c5:5d:61:ba:2d:83:71:5c:13:a9:b1:2f:65:
                    7e:c3:b8:8c:3c:b3:8d:14:21:0c:04:0f:06:f8:d0:
                    6d:c5:4c:80:c1:92:eb:a4:5e:0e:16:f5:6e:62:cb:
                    04:b2:46:e8:35:0a:6a:c6:9f:23:13:70:51:92:25:
                    4a:5f:d0:8f:62:3e:a7:26:ac:e0:81:0a:08:d6:8f:
                    c0:d6:85:cc:99:8c:5b:81:fc:e3:eb:89:e3:d7:9d:
                    94:7b:a5:b1:e5:a3:77:12:7d:0e:2d:dd:af:4b:12:
                    4a:3e:a7:0e:3c:80:39:45:b9:43:aa:4b:f5:85:11:
                    d8:11:02:fc:71:f7:a4:bd:88:24:de:25:d9:91:48:
                    08:8c:86:74:f1:2c:a1:ab:9c:4c:ac:62:30:08:97:
                    23:cd:29:ea:ae:3c:46:b7:a1:b7:53:f2:89:e5:d6:
                    c3:d6:47:31:4a:97:20:16:ed:a7:35:21:e4:fa:ac:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:AE:6C:B4:5E:23:AD:D4:73:32:33:42:05:20:F2:93:A9:70:E7
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3139312e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:cd:b4:e2:fe:d2:77:3c:49:ac:29:f1:9f:6d:da:df:26:
         87:35:83:e2:eb:71:d0:cf:87:b6:fb:10:37:17:3a:88:95:0d:
         f5:c4:6b:09:94:f7:f7:0d:cc:ce:9a:fe:84:27:18:aa:bb:ed:
         81:dc:dc:a8:27:3f:a3:a1:f0:e0:fe:93:9f:35:62:d1:bf:18:
         ff:fb:6c:7e:db:49:74:3f:af:03:23:18:25:a8:aa:72:6f:f1:
         10:63:67:38:7b:7c:19:50:d6:c4:2f:eb:04:5c:30:fa:af:c7:
         74:57:9c:d0:ba:5d:2c:21:01:dd:36:e0:c9:92:bc:98:9d:dd:
         ff:a9:6d:01:d7:0b:ad:f6:a9:31:83:e7:79:6a:1a:49:77:ef:
         72:db:cc:ce:0e:ef:fe:9b:a5:fa:63:01:de:c1:c7:61:db:6a:
         33:e3:f3:22:70:c9:ff:9b:e8:de:90:f6:78:dc:4d:a6:78:05:
         0c:8f:1c:ab:bb:56:97:62:ad:7e:3c:e7:94:25:4c:62:5c:f5:
         0f:0a:2c:76:cb:4e:21:1d:00:89:32:93:78:41:ff:c7:e9:ee:
         de:f4:99:28:58:34:be:3f:b7:fe:c2:5e:ad:02:ab:90:6b:61:
         38:03:d5:72:7c:66:34:34:11:a2:55:cf:4e:2a:ae:c3:21:9a:
         8a:f6:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:22 2025 by rpki-client