Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135332e302f32342d3234203d3e20323635323639.roa
File:                     3138372e36322e3135332e302f32342d3234203d3e20323635323639.roa (raw, json)
Hash identifier:          HhFMONKssAOOiA+7/rc2QeZkpmTj9OFdnTGbeGcHgok=
Subject key identifier:   16:73:94:35:96:B6:14:D7:6D:C4:D9:DD:82:D6:3B:90:7D:DA:4D:F2
Certificate issuer:       /CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
Certificate serial:       19B21AC76F4207F04115046352332E24386C15EC
Authority key identifier: 72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135332e302f32342d3234203d3e20323635323639.roa
Signing time:             Sat 16 Nov 2024 13:18:14 +0000
ROA not before:           Sat 16 Nov 2024 13:13:14 +0000
ROA not after:            Sat 15 Nov 2025 13:18:14 +0000
asID:                     265269
IP address blocks:        187.62.153.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 16 Feb 2025 21:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b2:1a:c7:6f:42:07:f0:41:15:04:63:52:33:2e:24:38:6c:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Validity
            Not Before: Nov 16 13:13:14 2024 GMT
            Not After : Nov 15 13:18:14 2025 GMT
        Subject: CN=1673943596B614D76DC4D9DD82D63B907DDA4DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:ca:33:25:e3:cc:39:9d:af:cc:36:1a:ff:
                    c7:84:8c:ee:ce:cd:96:88:38:00:82:88:b3:aa:11:
                    96:8d:9f:a2:34:f0:18:7d:65:9f:82:2f:6f:ad:89:
                    45:73:69:b1:0c:bc:ad:9f:cf:bb:f9:fe:46:41:bc:
                    d5:4f:23:45:10:66:a8:0d:22:36:55:f3:85:b7:5f:
                    5a:01:16:a9:5f:8c:26:e3:f4:b0:58:88:d8:3a:d8:
                    05:50:96:8c:b7:6f:0d:c7:f3:6a:dc:db:67:13:2d:
                    87:45:dd:43:1c:98:ae:bd:9d:cb:6f:59:d8:7a:e4:
                    1b:a6:b3:4f:25:5d:84:93:72:15:3c:6e:af:cb:a3:
                    ed:49:28:58:93:44:64:1a:56:49:cb:11:8b:91:c4:
                    3d:3e:18:c0:c1:d0:7c:8c:2a:c1:ba:80:24:ef:4c:
                    91:c7:94:e3:23:1d:14:e9:41:37:cc:44:fa:e0:40:
                    11:69:f5:2c:07:f2:18:a2:f0:62:6a:cf:57:d7:1d:
                    20:63:e9:c1:fe:46:5a:4e:2b:7b:db:5b:61:63:11:
                    5c:44:f9:de:76:ef:32:a9:dd:23:cf:16:87:ce:49:
                    c9:fb:16:a3:f2:d4:7d:2f:fb:4e:42:ba:1e:d7:32:
                    53:7b:e3:2c:5a:b3:e5:8a:e3:1a:9e:1f:4a:ef:e4:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:73:94:35:96:B6:14:D7:6D:C4:D9:DD:82:D6:3B:90:7D:DA:4D:F2
            X509v3 Authority Key Identifier:
                keyid:72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/3138372e36322e3135332e302f32342d3234203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:28:38:57:47:d0:5a:db:c6:cf:c5:26:2b:c3:ce:79:49:b3:
         cf:7f:66:2d:db:86:10:18:ae:14:cb:5b:b2:63:33:53:2a:e3:
         d8:16:d6:e3:6b:82:31:95:e5:86:c7:2b:3b:99:84:6b:18:d2:
         63:f8:7c:73:fd:70:1d:05:0a:97:53:32:b3:70:ee:e4:50:c0:
         94:a3:ff:d4:03:d4:cd:1a:c5:8c:83:85:82:b3:47:87:98:df:
         3e:18:45:a6:6f:92:ff:f5:7d:49:7f:d1:af:e9:2d:b3:97:9d:
         dd:d1:7c:d6:35:4f:e4:1d:af:2a:b9:b5:08:bb:0a:e4:39:6a:
         57:67:6b:85:f8:40:3b:ee:ea:16:3a:6c:b6:7f:aa:c3:71:96:
         0e:39:d4:c8:82:a8:54:eb:3a:f7:f5:c4:e7:01:ca:3b:f8:4d:
         98:de:63:0f:e5:74:c9:d5:eb:1d:eb:77:38:77:a3:5a:47:65:
         ef:0f:55:ac:8b:7e:c2:48:0d:67:91:1c:9f:25:e2:df:97:33:
         58:2c:c3:3c:97:a3:ab:50:18:bb:5e:0d:ba:81:b2:b4:fb:d3:
         db:40:54:1d:e8:2c:08:24:b3:78:d3:ea:a9:f0:7c:7a:9f:ef:
         23:28:38:05:95:fa:fe:96:ca:b9:b3:87:f1:12:74:cf:a6:21:
         ad:2b:7b:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGbIax29CB/BBFQRjUjMuJDhsFewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJENTI5MDBDOEQyNzcxQTU1ODI5MEE3NDkyQjZFQUQ5
ODJGNkI4RTAeFw0yNDExMTYxMzEzMTRaFw0yNTExMTUxMzE4MTRaMDMxMTAvBgNV
BAMTKDE2NzM5NDM1OTZCNjE0RDc2REM0RDlERDgyRDYzQjkwN0REQTRERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTMozJePMOZ2vzDYa/8eEjO7O
zZaIOACCiLOqEZaNn6I08Bh9ZZ+CL2+tiUVzabEMvK2fz7v5/kZBvNVPI0UQZqgN
IjZV84W3X1oBFqlfjCbj9LBYiNg62AVQloy3bw3H82rc22cTLYdF3UMcmK69nctv
Wdh65Bums08lXYSTchU8bq/Lo+1JKFiTRGQaVknLEYuRxD0+GMDB0HyMKsG6gCTv
TJHHlOMjHRTpQTfMRPrgQBFp9SwH8hii8GJqz1fXHSBj6cH+RlpOK3vbW2FjEVxE
+d527zKp3SPPFofOScn7FqPy1H0v+05Cuh7XMlN74yxas+WK4xqeH0rv5J1/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFnOUNZa2FNdtxNndgtY7kH3aTfIwHwYDVR0j
BBgwFoAUctUpAMjSdxpVgpCnSSturZgva44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXalVyMVN5Z1VDbXFacllFWkwyS0p6aWdvRVJ5UWc0ZEFxbWFmTGFB
VXQvMS83MkQ1MjkwMEM4RDI3NzFBNTU4MjkwQTc0OTJCNkVBRDk4MkY2QjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDUyOTAwQzhEMjc3MUE1
NTgyOTBBNzQ5MkI2RUFEOTgyRjZCOEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2pVcjFTeWdVQ21xWnJZRVpMMktKemlnb0VSeVFnNGRBcW1hZkxhQVV0LzEv
MzEzODM3MmUzNjMyMmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7PpkwDQYJKoZIhvcNAQELBQADggEBAJEoOFdH
0Frbxs/FJivDznlJs89/Zi3bhhAYrhTLW7JjM1Mq49gW1uNrgjGV5YbHKzuZhGsY
0mP4fHP9cB0FCpdTMrNw7uRQwJSj/9QD1M0axYyDhYKzR4eY3z4YRaZvkv/1fUl/
0a/pLbOXnd3RfNY1T+Qdryq5tQi7CuQ5aldna4X4QDvu6hY6bLZ/qsNxlg451MiC
qFTrOvf1xOcByjv4TZjeYw/ldMnV6x3rdzh3o1pHZe8PVayLfsJIDWeRHJ8l4t+X
M1gswzyXo6tQGLteDbqBsrT709tAVB3oLAgks3jT6qnwfHqf7yMoOAWV+v6Wyrmz
h/ESdM+mIa0rewQ=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:36 2025 by rpki-client