Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32332d3233203d3e20323730343934.roa
File:                     32342e3135322e342e302f32332d3233203d3e20323730343934.roa (raw, json)
Hash identifier:          Ig0/nopXR7tmJ8Y5pz9rJUAV49tUeArPy4FzWNuRFCI=
Subject key identifier:   5D:D3:74:A1:44:BD:7A:E6:59:B1:55:75:89:CE:3C:03:A7:DB:34:8A
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       3F825D4F4F087C6DF9E4FF10FC7ABE08C471687B
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32332d3233203d3e20323730343934.roa
Signing time:             Fri 21 Feb 2025 21:50:47 +0000
ROA not before:           Fri 21 Feb 2025 21:45:47 +0000
ROA not after:            Fri 20 Feb 2026 21:50:47 +0000
asID:                     270494
IP address blocks:        24.152.4.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Tue 25 Feb 2025 19:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:5d:4f:4f:08:7c:6d:f9:e4:ff:10:fc:7a:be:08:c4:71:68:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Feb 21 21:45:47 2025 GMT
            Not After : Feb 20 21:50:47 2026 GMT
        Subject: CN=5DD374A144BD7AE659B1557589CE3C03A7DB348A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:e0:55:26:4f:08:b6:ca:70:ca:2d:e6:04:
                    45:42:2d:fb:b5:b2:61:11:0a:bd:14:a1:d8:53:b8:
                    52:f9:a5:51:76:32:b9:c5:ef:bb:8b:2f:47:a3:1b:
                    b5:21:75:9f:db:b3:70:5f:22:05:43:97:82:b5:ed:
                    4e:6c:7f:81:c2:16:bf:c6:fd:67:c3:ca:9c:86:7c:
                    56:18:3a:63:37:1d:bb:d8:3f:0e:d6:f8:2f:a0:2c:
                    1f:1a:bb:4c:16:0e:83:17:f4:0a:2e:a2:dd:15:49:
                    49:37:c3:30:3b:f8:4a:3a:c1:fb:03:e4:81:ad:22:
                    66:fe:68:e2:e2:0f:47:9c:dd:5a:a4:1a:ad:79:8f:
                    d5:f2:01:d8:74:d4:79:01:ca:f1:f7:ff:58:19:73:
                    77:65:e1:f6:ef:bb:ed:9c:9c:9d:0a:d9:7f:85:e3:
                    93:fc:ac:c5:91:c2:bd:25:07:74:3f:81:55:54:e2:
                    1c:6b:86:29:08:8b:1d:60:42:34:52:05:84:3f:30:
                    cf:17:0c:8b:11:a6:ea:82:4f:dc:4d:de:af:95:a3:
                    24:9a:84:b3:88:9d:61:07:55:cc:e4:8c:51:2e:e7:
                    f1:a7:70:6f:a1:a3:e8:22:e7:5e:48:9f:1b:bf:ed:
                    89:80:30:98:13:cc:54:3a:02:c2:b9:52:e0:69:e0:
                    2e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:74:A1:44:BD:7A:E6:59:B1:55:75:89:CE:3C:03:A7:DB:34:8A
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32332d3233203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:89:8b:ea:e6:51:38:a9:48:66:9f:0e:fe:6a:67:32:8e:
         f9:87:c6:3d:91:d3:ae:5a:54:37:29:79:0f:88:88:27:89:20:
         6c:f1:41:38:95:aa:e3:ed:19:52:1d:21:b0:85:74:df:ab:16:
         bf:0f:82:bf:fd:10:fb:b0:41:1f:24:99:be:7e:70:cd:89:c8:
         0e:bb:7b:9b:47:c7:ff:9c:22:87:60:61:de:d9:8c:dd:32:0a:
         b7:f5:f1:41:68:ae:90:ab:e9:a1:b5:67:27:ce:6c:22:47:e7:
         ce:fc:46:d3:55:43:3f:f5:00:45:0f:74:54:9b:3b:99:f5:6e:
         a8:2d:8b:f7:95:c2:2d:e7:64:74:25:94:ce:56:2b:29:da:ea:
         2b:c2:8d:22:f9:03:58:bc:57:3e:17:4c:b2:51:f4:ca:3f:c6:
         53:e2:f5:7e:0a:b2:66:13:a9:2d:f3:ae:d8:a0:24:b3:27:96:
         f1:d9:bb:82:f1:6e:24:b2:c2:c1:04:d1:da:bb:06:c4:0d:27:
         9d:f3:7e:25:fc:63:54:16:84:44:9a:6a:e2:53:81:3b:32:11:
         25:f2:ab:6f:f9:30:f6:57:74:07:61:9c:fa:87:d6:af:28:89:
         e9:b8:16:b4:b9:5a:e5:99:bb:4d:e2:c7:37:be:cc:b7:5d:28:
         3b:f6:59:77
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP4JdT08IfG355P8Q/Hq+CMRxaHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU4N0E2QjRBODY3RkIyNDZBRjNGMzA3ODA4REM5OTU5
MjEyOTIzMjAeFw0yNTAyMjEyMTQ1NDdaFw0yNjAyMjAyMTUwNDdaMDMxMTAvBgNV
BAMTKDVERDM3NEExNDRCRDdBRTY1OUIxNTU3NTg5Q0UzQzAzQTdEQjM0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrOBVJk8Itspwyi3mBEVCLfu1
smERCr0UodhTuFL5pVF2MrnF77uLL0ejG7UhdZ/bs3BfIgVDl4K17U5sf4HCFr/G
/WfDypyGfFYYOmM3HbvYPw7W+C+gLB8au0wWDoMX9Aouot0VSUk3wzA7+Eo6wfsD
5IGtImb+aOLiD0ec3VqkGq15j9XyAdh01HkByvH3/1gZc3dl4fbvu+2cnJ0K2X+F
45P8rMWRwr0lB3Q/gVVU4hxrhikIix1gQjRSBYQ/MM8XDIsRpuqCT9xN3q+VoySa
hLOInWEHVczkjFEu5/GncG+ho+gi515Inxu/7YmAMJgTzFQ6AsK5UuBp4C5RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXdN0oUS9euZZsVV1ic48A6fbNIowHwYDVR0j
BBgwFoAU/oemtKhn+yRq8/MHgI3JlZISkjIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0Z1dkJLZ0FBU0ZrdDZSTjF4QTJDNko0Tkx2cGF1YkZGRnJGNXd1bmpY
akEvMC9GRTg3QTZCNEE4NjdGQjI0NkFGM0YzMDc4MDhEQzk5NTkyMTI5MjMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFODdBNkI0QTg2N0ZCMjQ2
QUYzRjMwNzgwOERDOTk1OTIxMjkyMzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGdXZCS2dBQVNGa3Q2Uk4xeEEyQzZKNE5MdnBhdWJGRkZyRjV3dW5qWGpBLzAv
MzIzNDJlMzEzNTMyMmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMDM0
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEARiYBDANBgkqhkiG9w0BAQsFAAOCAQEAeVyJi+rmUTip
SGafDv5qZzKO+YfGPZHTrlpUNyl5D4iIJ4kgbPFBOJWq4+0ZUh0hsIV036sWvw+C
v/0Q+7BBHySZvn5wzYnIDrt7m0fH/5wih2Bh3tmM3TIKt/XxQWiukKvpobVnJ85s
IkfnzvxG01VDP/UARQ90VJs7mfVuqC2L95XCLedkdCWUzlYrKdrqK8KNIvkDWLxX
PhdMslH0yj/GU+L1fgqyZhOpLfOu2KAksyeW8dm7gvFuJLLCwQTR2rsGxA0nnfN+
JfxjVBaERJpq4lOBOzIRJfKrb/kw9ld0B2Gc+ofWryiJ6bgWtLla5Zm7TeLHN77M
t10oO/ZZdw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 17:14:32 2025 by rpki-client