Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131342e302f32342d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131342e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          6BGA0uRGgceKFmCsVc/2dUWN7QTXqxtHy/TBaMVQ7zk=
Subject key identifier:   BF:B0:CA:97:CD:21:09:B6:8F:1F:BE:4F:88:89:76:C5:32:F4:E5:BE
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       2832D724CB2CE5A074933542819A5BFA79387CDD
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131342e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:04 +0000
ROA not before:           Mon 18 Nov 2024 13:42:04 +0000
ROA not after:            Mon 17 Nov 2025 13:47:04 +0000
asID:                     263634
IP address blocks:        179.125.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:d7:24:cb:2c:e5:a0:74:93:35:42:81:9a:5b:fa:79:38:7c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:04 2024 GMT
            Not After : Nov 17 13:47:04 2025 GMT
        Subject: CN=BFB0CA97CD2109B68F1FBE4F888976C532F4E5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:86:e6:e8:7c:25:a6:d6:59:0c:85:63:df:
                    08:e5:62:5b:9f:bd:ea:d3:98:45:1f:c7:85:d8:11:
                    4d:35:09:17:55:92:04:8c:26:99:f0:d5:f3:36:e5:
                    4d:5a:4d:c7:94:1b:28:c0:98:c6:71:67:93:33:25:
                    eb:92:8e:3e:20:b6:3c:3a:5a:db:f9:e8:76:b6:11:
                    3e:33:83:f6:2e:fd:eb:ed:64:11:54:6d:d0:4b:d6:
                    8d:70:db:d4:9e:12:a2:62:30:ef:4c:a2:ce:29:33:
                    22:03:f1:dd:13:7a:b1:f9:ce:78:5a:5f:53:cc:51:
                    c0:d8:fe:79:c4:dd:a3:a8:45:ed:25:3f:8a:1b:e5:
                    67:97:cf:8b:3a:9b:eb:2a:38:52:15:d8:7a:eb:00:
                    48:64:f0:09:f6:10:95:4f:82:d6:a6:06:40:a4:6e:
                    42:b2:7e:01:c5:67:a2:f4:34:ec:93:b3:28:bf:72:
                    5c:84:b5:4e:f5:7f:32:12:7a:9e:bf:51:5b:46:4e:
                    47:29:30:4f:c8:12:d9:3b:9e:f4:ed:2e:6a:c7:d5:
                    7f:3b:6e:c4:a7:b2:f0:b4:7b:0e:04:07:92:a0:e2:
                    07:bf:ca:57:c6:ae:33:7a:98:bf:0a:3d:dd:39:50:
                    e4:eb:01:c0:86:e5:37:54:d1:ce:1f:3a:15:93:1c:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:CA:97:CD:21:09:B6:8F:1F:BE:4F:88:89:76:C5:32:F4:E5:BE
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131342e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:63:11:bf:3b:b3:c0:ae:b5:88:e7:f6:38:82:29:17:4c:
         e8:55:0b:b3:e6:1b:44:3a:87:76:70:c5:0f:d0:82:86:74:0f:
         e7:f1:bc:3c:81:7b:dd:26:af:28:7e:de:7b:66:eb:0d:1b:1b:
         30:ba:35:f0:ef:84:0c:2a:b2:83:9f:9b:a1:24:a7:7d:d8:03:
         07:c5:b0:8d:59:23:2b:b3:60:b7:ba:5e:12:a3:1e:09:dd:1c:
         a7:c9:4a:2b:cd:ad:66:1e:d5:1f:49:d6:e4:92:46:8e:22:60:
         3f:ff:69:09:fb:84:c3:c8:b4:1e:72:14:f1:21:f2:ab:66:83:
         4f:d0:41:db:42:39:0a:20:3b:b5:7e:24:0e:bc:39:84:9b:24:
         22:0c:28:39:0a:24:2b:32:6a:ba:88:3a:01:c2:f2:99:a9:92:
         0b:ab:fe:6e:76:4f:30:d0:9d:78:d3:08:f4:aa:44:94:a0:95:
         82:54:cb:64:a6:cb:0e:d2:be:25:fa:46:3a:e6:9d:82:97:9f:
         8b:b4:b8:72:6c:35:68:13:fb:89:34:6b:cd:9e:48:4d:39:2a:
         eb:49:46:aa:54:d8:4f:a9:dd:1e:e6:f3:24:72:d5:9c:fe:03:
         a2:94:09:3a:37:3f:05:f0:c5:81:eb:d6:05:1d:cb:fa:ed:5d:
         62:8c:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org