Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3232203d3e20323636343937.roa
File:                     3137302e3234342e33322e302f32322d3232203d3e20323636343937.roa (raw, json)
Hash identifier:          QGARMIBzp/6H+4DVhOUh8WBWtLGkvnrYkBzOeEvRewA=
Subject key identifier:   8F:FE:70:93:18:B0:33:59:30:EE:F8:61:D1:A5:78:E2:15:11:93:D2
Certificate issuer:       /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial:       150EA8BC9CCDF143275D786D1EE160834DF73579
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3232203d3e20323636343937.roa
Signing time:             Fri 06 Dec 2024 16:52:02 +0000
ROA not before:           Fri 06 Dec 2024 16:47:02 +0000
ROA not after:            Fri 05 Dec 2025 16:52:02 +0000
asID:                     266497
IP address blocks:        170.244.32.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 19 Dec 2024 20:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0e:a8:bc:9c:cd:f1:43:27:5d:78:6d:1e:e1:60:83:4d:f7:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
        Validity
            Not Before: Dec  6 16:47:02 2024 GMT
            Not After : Dec  5 16:52:02 2025 GMT
        Subject: CN=8FFE709318B0335930EEF861D1A578E2151193D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:22:7c:d3:8e:d8:d8:97:8a:5f:ff:1c:7f:
                    65:c4:cf:a2:b3:68:0a:21:59:a2:57:d9:ce:dd:8f:
                    3b:1f:34:cc:45:68:0b:77:4d:b1:11:82:06:50:28:
                    1d:2c:bc:db:e0:3e:f1:4f:43:74:11:01:b3:ec:89:
                    84:a2:66:90:73:d8:da:cd:8a:0e:42:0d:f4:53:f3:
                    52:1f:0f:46:a4:5c:a2:ec:d1:b9:0e:a0:b6:fc:4a:
                    d8:61:c6:4d:14:4a:ea:d2:72:89:8d:9c:91:2b:28:
                    b9:f1:2f:df:ba:96:bc:05:f8:bd:7c:d6:ed:bd:d8:
                    d7:5a:53:c7:9f:85:86:03:80:ce:45:6d:86:d2:83:
                    80:1b:2d:dd:8b:b6:33:06:ca:a3:23:82:43:2e:5f:
                    52:a7:f7:7c:0b:c7:b6:be:90:21:46:ab:d9:fc:6f:
                    12:08:6b:5c:86:f7:f8:18:c4:92:ba:d3:24:32:8a:
                    a4:74:15:2a:ac:4e:af:78:9b:d4:88:e3:73:1c:d4:
                    08:cb:08:21:ee:c7:28:97:d5:6b:53:82:fa:75:50:
                    29:17:6b:cc:e8:97:cf:08:dc:4b:ba:7c:30:03:4e:
                    95:55:9b:d3:5b:cf:27:82:ca:25:bf:24:4c:59:d2:
                    9d:2b:e4:bb:fe:fe:20:72:fe:92:51:76:ff:db:83:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:70:93:18:B0:33:59:30:EE:F8:61:D1:A5:78:E2:15:11:93:D2
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/3137302e3234342e33322e302f32322d3232203d3e20323636343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:6f:65:51:41:19:1c:7b:ce:cf:ca:ff:b6:88:ad:f6:74:
         26:65:b9:4d:50:ab:5d:a1:d8:80:bb:48:29:65:51:26:80:7c:
         da:ed:4d:c4:ac:26:c0:cd:08:3c:a1:c8:04:62:9a:2b:96:f4:
         6c:6e:84:5c:49:4b:d9:d2:f0:8b:a6:77:8e:2e:75:31:c7:6b:
         48:25:e0:0b:94:be:90:cb:50:f2:88:c6:50:67:e9:de:3e:0a:
         fa:c6:0e:14:a0:98:a9:ca:c8:31:9a:3e:d1:5f:77:45:eb:d7:
         9b:17:0f:b2:d2:09:47:32:38:e7:e0:35:4e:4f:6a:0d:c8:4f:
         90:f7:f5:99:e0:7e:e2:2f:9e:b9:36:ce:e3:e5:d4:05:50:4c:
         f4:6f:d7:f6:05:0e:21:1b:28:d8:51:70:52:48:8d:50:6c:71:
         a6:21:65:f4:0a:b0:1f:84:71:84:f8:99:9c:cf:38:c1:db:ab:
         e7:2b:4e:3b:72:b7:43:d3:3d:f6:42:c5:70:38:b1:3e:f6:a3:
         12:ad:1d:60:65:b2:3a:a1:b2:20:03:13:7b:fa:33:df:f9:d8:
         26:82:5e:5e:0a:a5:d6:06:70:fa:f1:25:23:36:b9:7d:c3:16:
         d0:b5:7d:91:55:b9:0e:7d:b2:c3:d6:8f:a7:57:ba:d3:91:50:
         66:0f:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:18 2025 by rpki-client