Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32342d3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f32342d3234203d3e20323636333338.roa (raw, json)
Hash identifier:          drpB228EdlxhJj3BcGqX6r9wrVcaHBl/dxjLNrJHEuc=
Subject key identifier:   E2:9B:2C:36:C6:13:DE:69:DE:AD:08:B0:36:CC:C6:B1:7F:2B:18:B9
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       2BC70393EB060E5DF788DE012403C7C46CAA0BFF
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32342d3234203d3e20323636333338.roa
Signing time:             Fri 24 May 2024 20:07:11 +0000
ROA not before:           Fri 24 May 2024 20:02:11 +0000
ROA not after:            Sat 24 May 2025 20:07:11 +0000
asID:                     266338
IP address blocks:        170.238.184.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 24 May 2025 20:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:03:93:eb:06:0e:5d:f7:88:de:01:24:03:c7:c4:6c:aa:0b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: May 24 20:02:11 2024 GMT
            Not After : May 24 20:07:11 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:c4:0a:af:57:cc:18:11:07:46:b3:7c:dd:
                    15:8e:20:03:4b:29:3f:f7:7a:00:94:44:4e:3c:6c:
                    ed:2f:f9:4e:b7:6c:78:e7:d7:e2:d2:95:f4:fa:cd:
                    e7:da:66:87:ac:d2:8d:ca:07:91:29:93:ed:5d:bf:
                    a6:bc:fd:ce:2c:2a:7f:b4:07:93:87:32:a5:bd:15:
                    f3:75:08:c8:18:7a:01:9d:ee:02:d5:e9:5f:19:73:
                    85:41:d0:f7:4e:8f:88:d6:7a:ed:81:02:4c:7b:3d:
                    34:61:34:0e:fa:f0:bd:c1:4c:47:8d:0c:8b:ca:37:
                    81:f2:42:5c:42:39:fa:30:08:47:fc:d6:84:4a:34:
                    73:dc:93:ee:72:46:7c:b0:a5:72:17:bf:9a:00:9c:
                    80:2a:72:da:b3:61:fd:6a:44:24:de:62:57:0a:ec:
                    84:f4:a6:fc:35:e6:3b:10:20:ed:7b:11:be:49:59:
                    6c:62:d3:de:7d:9f:93:79:c2:b8:32:16:c9:71:7f:
                    cb:82:a2:79:87:d0:4b:c8:1e:3a:a8:00:bf:f9:6f:
                    8f:be:57:50:ff:5b:3c:3e:a2:81:7d:0b:ad:c3:44:
                    02:0d:ab:73:7b:b6:0e:0f:3b:8c:fc:00:62:75:16:
                    62:93:b8:07:41:32:51:99:e7:b0:80:85:56:b5:04:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:2C:36:C6:13:DE:69:DE:AD:08:B0:36:CC:C6:B1:7F:2B:18:B9
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32342d3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:78:5b:af:e7:59:15:69:1b:a4:64:52:7f:86:a9:c3:ea:
         ae:12:31:51:ab:b3:ae:bd:d8:e5:77:bf:c5:03:89:31:22:6c:
         83:33:ff:39:b5:37:40:15:07:dc:b0:19:0e:6f:cd:9f:43:63:
         fc:44:28:08:61:79:cb:8a:e5:a4:5e:d8:2d:91:f5:2e:a3:77:
         2c:31:68:23:fb:01:20:4f:12:a4:05:97:a3:51:8e:a0:7f:99:
         6c:ad:55:61:79:ad:d3:06:a3:5e:a1:4e:5a:0b:e5:0a:29:67:
         77:81:b2:05:30:db:b0:55:c8:c0:84:0d:57:2b:31:6e:3d:d5:
         a4:27:97:92:7e:ab:e6:55:ef:a1:6d:ac:c2:f6:37:6d:ce:04:
         da:66:14:84:b0:ca:66:c1:03:7e:cb:e4:17:70:17:aa:3d:00:
         d4:de:ad:a2:39:08:4d:ba:a0:c4:46:97:0e:a2:a0:0e:52:bb:
         44:bf:0b:ed:18:85:17:8b:03:c9:b5:1d:e5:1f:b6:d1:99:a2:
         96:21:4e:bb:a8:20:a4:2a:3e:1e:26:45:80:28:ce:cc:d1:ef:
         ff:04:be:dc:d9:5b:5f:0f:1d:61:44:b5:eb:64:16:9b:11:2a:
         5d:f0:ca:ac:b1:52:cc:42:99:bb:8e:78:ad:8c:5b:fe:e1:c3:
         97:41:5d:30
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUK8cDk+sGDl33iN4BJAPHxGyqC/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFMEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZC
Q0QzQzYzNTAeFw0yNDA1MjQyMDAyMTFaFw0yNTA1MjQyMDA3MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDdCOUM0MEFBRjU3Q0MxODEx
MDc0NkIzN0NERDE1OEUyMDAzNEIyOTNGRjc3QTAwOTQ0NDRFM0M2Q0VEMkZGOTRF
Qjc2Qzc4RTdEN0UyRDI5NUY0RkFDREU3REE2Njg3QUNEMjhEQ0EwNzkxMjk5M0VE
NURCRkE2QkNGRENFMkMyQTdGQjQwNzkzODczMkE1QkQxNUYzNzUwOEM4MTg3QTAx
OURFRTAyRDVFOTVGMTk3Mzg1NDFEMEY3NEU4Rjg4RDY3QUVEODEwMjRDN0IzRDM0
NjEzNDBFRkFGMEJEQzE0QzQ3OEQwQzhCQ0EzNzgxRjI0MjVDNDIzOUZBMzAwODQ3
RkNENjg0NEEzNDczREM5M0VFNzI0NjdDQjBBNTcyMTdCRjlBMDA5QzgwMkE3MkRB
QjM2MUZENkE0NDI0REU2MjU3MEFFQzg0RjRBNkZDMzVFNjNCMTAyMEVEN0IxMUJF
NDk1OTZDNjJEM0RFN0Q5RjkzNzlDMkI4MzIxNkM5NzE3RkNCODJBMjc5ODdEMDRC
QzgxRTNBQTgwMEJGRjk2RjhGQkU1NzUwRkY1QjNDM0VBMjgxN0QwQkFEQzM0NDAy
MERBQjczN0JCNjBFMEYzQjhDRkMwMDYyNzUxNjYyOTNCODA3NDEzMjUxOTlFN0Iw
ODA4NTU2QjUwNDg5RDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA17nECq9XzBgRB0azfN0VjiADSyk/93oAlEROPGztL/lOt2x459fi
0pX0+s3n2maHrNKNygeRKZPtXb+mvP3OLCp/tAeThzKlvRXzdQjIGHoBne4C1elf
GXOFQdD3To+I1nrtgQJMez00YTQO+vC9wUxHjQyLyjeB8kJcQjn6MAhH/NaESjRz
3JPuckZ8sKVyF7+aAJyAKnLas2H9akQk3mJXCuyE9Kb8NeY7ECDtexG+SVlsYtPe
fZ+TecK4MhbJcX/LgqJ5h9BLyB46qAC/+W+PvldQ/1s8PqKBfQutw0QCDatze7YO
DzuM/ABidRZik7gHQTJRmeewgIVWtQSJ0wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FOKbLDbGE95p3q0IsDbMxrF/Kxi5MB8GA1UdIwQYMBaAFE7gqjnlZzIFthWxM3wk
6G+808Y1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NNNjFZWDQ4Rnh2cTlV
VEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVFMEFBMzlFNTY3MzIw
NUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RUUwQUEzOUU1NjczMjA1QjYxNUIxMzM3QzI0RTg2RkJDRDND
NjM1LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTTYxWVg0OEZ4dnE5VVRLNTdh
R1E1WmZoSzFqOHBqaW9ocFVLTnBla0g1NS8xLzMxMzczMDJlMzIzMzM4MmUzMTM4
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMzMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq7rgwDQYJKoZIhvcNAQELBQADggEBAAjweFuv51kVaRukZFJ/hqnD6q4SMVGr
s6692OV3v8UDiTEibIMz/zm1N0AVB9ywGQ5vzZ9DY/xEKAhhecuK5aRe2C2R9S6j
dywxaCP7ASBPEqQFl6NRjqB/mWytVWF5rdMGo16hTloL5QopZ3eBsgUw27BVyMCE
DVcrMW491aQnl5J+q+ZV76FtrML2N23OBNpmFISwymbBA37L5BdwF6o9ANTeraI5
CE26oMRGlw6ioA5Su0S/C+0YhReLA8m1HeUfttGZopYhTruoIKQqPh4mRYAozszR
7/8EvtzZW18PHWFEtetkFpsRKl3wyqyxUsxCmbuOeK2MW/7hw5dBXTA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 23:58:04 2025 by rpki-client