Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32342d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131362e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          p8LnzHgI9rk+P5PmxUOpg6RmpeTMcI2IqVIgIG/XX2w=
Subject key identifier:   DE:DE:B8:A5:CF:90:E4:17:81:D5:2C:C6:48:5B:C0:A6:4A:20:41:AA
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       4CA0478FBB88E28DCB3CC68BDB1A510DF1FB90A2
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:46:57 +0000
ROA not before:           Mon 18 Nov 2024 13:41:57 +0000
ROA not after:            Mon 17 Nov 2025 13:46:57 +0000
asID:                     263634
IP address blocks:        179.125.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a0:47:8f:bb:88:e2:8d:cb:3c:c6:8b:db:1a:51:0d:f1:fb:90:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:41:57 2024 GMT
            Not After : Nov 17 13:46:57 2025 GMT
        Subject: CN=DEDEB8A5CF90E41781D52CC6485BC0A64A2041AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:bb:ac:ec:62:8d:4f:c5:a0:fc:60:0b:fd:
                    36:b2:83:ac:5d:63:3b:40:0c:7e:22:5d:34:59:79:
                    f2:ff:67:1b:66:cd:62:17:59:86:00:66:d0:a2:8e:
                    fa:33:57:b0:85:f2:27:67:4d:45:ea:c0:37:4f:42:
                    e2:58:c2:88:77:2c:14:f5:87:b9:e5:d6:98:02:4c:
                    57:47:9a:f5:d9:92:9d:0c:a3:35:c9:59:34:ec:38:
                    87:0a:e5:e5:42:34:8b:4a:d4:47:b4:b9:8d:18:b7:
                    d9:9c:93:ec:73:44:62:7b:60:7d:c4:9c:31:fe:db:
                    23:67:8e:27:22:0f:fa:cc:d1:e3:5c:97:01:55:e9:
                    9d:9e:62:d0:37:56:f4:81:38:bb:ce:e6:ec:7c:70:
                    36:3b:bc:24:3d:22:65:37:82:f2:8f:62:e3:74:1f:
                    55:aa:cc:09:b5:15:eb:2b:a1:38:c9:d0:2f:2f:a9:
                    6d:6d:5e:90:ed:b0:31:05:81:dc:5c:5b:6a:77:ce:
                    25:9d:94:3a:7a:f0:5a:56:90:34:eb:63:cc:e1:ad:
                    45:ce:d5:fd:ca:5f:c7:2d:9a:62:39:57:89:68:f4:
                    66:bc:d0:d8:47:ef:d9:df:c8:66:fb:5a:c2:41:ed:
                    45:58:de:bc:b2:0f:63:5e:ff:75:1b:21:6e:14:2c:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DE:B8:A5:CF:90:E4:17:81:D5:2C:C6:48:5B:C0:A6:4A:20:41:AA
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131362e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:d1:44:6d:dc:77:87:ee:a3:d6:5d:16:02:95:68:21:47:
         d9:01:ec:a7:2a:60:db:3d:14:18:4f:83:97:6c:c8:d2:1b:9c:
         34:17:c2:41:54:19:37:89:df:13:37:d7:23:43:90:e9:b1:98:
         74:a2:83:3d:c2:1e:c5:3a:dc:d8:12:c8:19:dd:b6:b4:c5:07:
         ec:1d:08:c4:cc:6d:de:53:6b:e3:3a:dd:2a:19:db:32:39:64:
         53:6f:3d:21:da:a2:a2:fa:84:29:fc:aa:a4:8f:e9:f1:4c:7e:
         21:83:14:d3:18:b1:d9:c8:73:99:ff:5f:3c:76:c9:da:a6:99:
         0b:d3:c8:81:dc:83:89:09:12:2c:18:70:44:ff:2b:e4:75:ee:
         e5:71:d7:d5:0d:51:28:ed:20:7a:9c:1f:cd:3d:c5:60:44:30:
         81:f0:1f:ec:71:3e:b7:0e:39:54:13:d2:7f:3d:11:25:70:84:
         a2:24:d2:1d:b5:8b:2b:04:e9:34:32:a7:9c:52:75:0f:16:df:
         6f:eb:b5:c1:33:05:ac:02:f8:40:f4:72:40:02:fc:46:c3:62:
         90:53:45:fa:23:9d:4d:69:58:81:dd:5b:d4:9e:f0:8b:cd:a9:
         fc:d0:03:ca:4c:6b:0b:9f:71:43:19:03:31:7b:2c:0e:52:a5:
         8d:37:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org