Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131382e302f32342d3234203d3e20323633363334.roa
File:                     3137392e3132352e3131382e302f32342d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          4J/QQwyGBbmaTwUrbF5Mf0a0fCm7hJkg4n4nxuKBgRg=
Subject key identifier:   82:C6:5F:8F:73:19:E9:92:1E:73:B5:33:AF:EC:B4:84:94:EA:1F:48
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       4A63FDE5F94B5989B084A8EEC5A9F3B893E5B409
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131382e302f32342d3234203d3e20323633363334.roa
Signing time:             Mon 18 Nov 2024 13:47:00 +0000
ROA not before:           Mon 18 Nov 2024 13:42:00 +0000
ROA not after:            Mon 17 Nov 2025 13:47:00 +0000
asID:                     263634
IP address blocks:        179.125.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:63:fd:e5:f9:4b:59:89:b0:84:a8:ee:c5:a9:f3:b8:93:e5:b4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 18 13:42:00 2024 GMT
            Not After : Nov 17 13:47:00 2025 GMT
        Subject: CN=82C65F8F7319E9921E73B533AFECB48494EA1F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:de:0f:46:90:b9:70:51:ae:2c:2d:3c:30:
                    62:98:e4:71:eb:78:d5:a3:2d:57:b0:20:a9:61:21:
                    2d:f0:23:e2:e4:2f:21:92:58:ec:38:0f:5b:b6:9d:
                    72:e7:9b:34:c8:a4:6f:34:b9:91:98:45:51:72:57:
                    9d:24:8b:10:9d:d5:b6:7a:41:fe:5b:f5:5b:a4:3b:
                    26:e2:0d:2a:02:5b:43:29:6a:7e:99:9d:e3:7f:a7:
                    d4:df:17:b5:82:a9:a6:9e:96:4c:5f:7a:56:7d:d7:
                    39:2c:b0:bc:d3:33:87:d1:7c:49:95:6a:38:e3:6e:
                    62:8b:6f:ad:73:40:70:92:53:f9:ab:d1:50:d8:8b:
                    b3:cb:53:02:44:1f:a3:c3:67:3e:bd:d4:fa:68:3b:
                    b3:d6:70:b7:03:92:10:85:b9:fe:e3:82:b8:15:f4:
                    49:59:99:d5:8f:d5:d4:fa:ca:18:9f:18:9e:55:6d:
                    e1:26:34:13:b9:61:c9:e6:9e:21:35:df:ed:00:81:
                    26:01:ea:81:91:87:ed:bc:ce:d2:c1:4c:7f:dd:93:
                    0c:e2:16:87:a5:33:a3:04:f0:3b:c2:42:2e:eb:b5:
                    3c:5a:2a:4e:ae:a9:78:ed:41:44:a6:f7:a9:71:60:
                    a1:01:64:ad:2d:0a:dc:16:f2:8a:53:9e:88:99:0e:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:5F:8F:73:19:E9:92:1E:73:B5:33:AF:EC:B4:84:94:EA:1F:48
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137392e3132352e3131382e302f32342d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:42:e4:17:31:c1:8b:d0:b4:03:9d:a6:c5:bf:e7:49:8c:6c:
         b6:32:ce:9f:98:8b:31:23:55:61:dc:78:15:cd:65:a0:1b:c1:
         97:eb:51:ab:fb:73:93:dc:8e:f3:b8:b9:3e:2c:ab:34:36:24:
         38:a9:ba:94:2c:c3:8b:88:29:af:51:99:44:e8:2c:ac:c3:3d:
         2e:61:d6:b3:ab:a4:2a:d6:3b:33:df:d2:aa:4f:fd:94:71:df:
         b4:55:d3:8f:84:1f:f0:64:83:05:19:e4:13:04:56:a1:85:5a:
         4b:e2:c6:fb:22:b7:d7:ce:06:3a:05:de:b4:d5:70:79:d8:21:
         4c:12:a4:98:8b:73:79:70:9b:82:d6:f1:58:07:24:09:bb:20:
         2c:be:ca:bc:8a:06:46:fe:54:b4:99:f7:40:4f:4f:9b:0e:4b:
         d1:9b:62:b6:be:0b:99:17:20:0e:ff:60:c3:36:19:ad:2b:51:
         1a:40:27:7d:09:2c:2b:c2:c7:30:cf:1c:ff:ef:52:e4:2f:f8:
         e2:98:be:29:6f:7e:ac:51:4b:33:d7:8f:94:dd:db:47:5c:a9:
         fb:dc:cc:b3:b7:36:af:9e:8a:59:42:e8:b4:a2:ab:b9:d8:5e:
         85:3e:4d:fd:37:da:ee:1a:a7:97:89:fe:48:2d:0d:ea:7f:af:
         ad:78:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org