Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131332e302f32342d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131332e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          +VntMYUKc/MyFu/SAY5Cq4JPsoev8Bja9HdYhTCVed8=
Subject key identifier:   AA:6A:68:A9:10:CF:85:E8:F7:EB:63:30:00:8D:D1:E7:2E:E6:11:28
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       4737C8050F66C013E2A2E78F89883C99EA8D0F31
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131332e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:01 +0000
ROA not before:           Mon 18 Nov 2024 13:42:01 +0000
ROA not after:            Mon 17 Nov 2025 13:47:01 +0000
asID:                     263634
IP address blocks:        179.125.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:37:c8:05:0f:66:c0:13:e2:a2:e7:8f:89:88:3c:99:ea:8d:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:01 2024 GMT
            Not After : Nov 17 13:47:01 2025 GMT
        Subject: CN=AA6A68A910CF85E8F7EB6330008DD1E72EE61128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:07:4e:65:07:1d:d8:f1:3b:0f:27:5c:97:
                    2d:92:b7:cc:24:c8:5d:34:19:19:7f:c9:c4:a9:08:
                    bd:ca:41:01:2a:67:89:42:6a:d3:36:38:bd:2b:4c:
                    25:87:35:d4:0a:87:3a:72:e8:28:02:ae:45:59:22:
                    ca:3c:23:5f:f0:d4:a5:e3:ac:44:66:0c:7c:e9:92:
                    11:7b:9a:88:ab:2e:6b:8a:9b:fa:04:6a:73:d9:32:
                    94:98:97:94:d3:71:3e:1e:09:f7:25:75:9b:12:c1:
                    93:87:61:58:ad:2d:3b:7e:5e:20:79:f9:66:c2:4f:
                    e0:fb:6e:05:d8:9d:54:78:05:f9:78:5b:d9:7b:c2:
                    7c:16:ae:b9:81:89:9a:f2:85:a8:0c:83:ff:4f:65:
                    6d:22:14:5a:4a:3f:0e:76:82:ab:dd:c2:e8:c6:57:
                    64:64:d5:a1:65:e6:bf:bc:80:79:26:aa:4f:ed:09:
                    fa:47:ae:a7:2d:33:b8:86:2c:f1:db:5c:4e:ee:8f:
                    6b:6c:9a:5b:0a:ad:d2:6c:27:85:fc:e9:49:54:e5:
                    d5:73:40:49:22:5a:05:4a:63:4c:02:36:d1:f3:59:
                    6a:91:2b:7b:43:2e:18:08:04:ae:4d:d2:67:90:b4:
                    21:52:df:9b:1a:74:c0:01:ac:aa:76:22:f6:88:fb:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6A:68:A9:10:CF:85:E8:F7:EB:63:30:00:8D:D1:E7:2E:E6:11:28
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131332e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:d0:1c:f9:73:d9:89:4c:eb:a3:43:ff:52:b7:98:96:be:
         13:8e:07:49:fd:60:b1:07:5c:ae:8b:c5:1e:60:22:5a:e1:fa:
         00:d6:dd:18:1b:2b:b3:7b:03:a2:3d:8c:32:ca:b6:5e:f7:0e:
         e3:11:cd:e1:e8:0c:be:6e:d1:97:b6:95:dd:5b:41:13:d4:82:
         ad:b2:40:76:57:a5:32:2e:98:ae:b0:ae:5c:fe:75:2a:0e:5c:
         77:02:1e:b8:c1:0c:4a:b5:68:6b:02:cb:04:61:71:17:4b:f2:
         30:b5:1f:fa:2d:0e:13:6a:fe:9e:66:18:06:6c:43:70:f9:05:
         8d:63:ae:bd:16:35:85:89:55:ff:e8:ad:8e:d2:51:85:e1:29:
         55:0c:7b:65:e6:1a:64:4b:98:1b:d1:f8:b8:45:51:3d:f8:f1:
         42:90:20:12:f7:f8:f9:34:59:a8:a6:5f:9b:62:81:dc:65:48:
         07:65:df:72:20:aa:18:51:3d:63:aa:ba:17:55:9b:b4:11:e0:
         fc:c8:d6:23:ba:ff:32:5c:0d:6a:ea:61:1f:e0:a0:a0:d1:fc:
         5a:57:db:68:bd:91:6f:4f:9a:06:b7:9d:8f:b6:32:63:e7:dd:
         a0:f2:c0:98:5b:ae:80:7d:9c:da:94:a4:36:78:e5:61:5d:93:
         f5:fd:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org