Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
File:                     3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa (raw, json)
Hash identifier:          m8/Ozm6c65icj067T1C9d507C1qJsx69gwNrp0VfF2I=
Subject key identifier:   94:8C:EF:13:90:7E:E8:9F:3D:F2:A0:6E:34:09:B8:D2:8C:72:45:96
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       4A07786E2D3804DCB419D1D0185EBD217A759594
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa
Signing time:             Wed 26 Mar 2025 14:53:50 +0000
ROA not before:           Wed 26 Mar 2025 14:48:50 +0000
ROA not after:            Wed 25 Mar 2026 14:53:50 +0000
asID:                     270596
IP address blocks:        187.17.136.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 14 Apr 2025 21:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:07:78:6e:2d:38:04:dc:b4:19:d1:d0:18:5e:bd:21:7a:75:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Mar 26 14:48:50 2025 GMT
            Not After : Mar 25 14:53:50 2026 GMT
        Subject: CN=948CEF13907EE89F3DF2A06E3409B8D28C724596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:e7:8a:9d:3e:50:1f:56:81:8d:e3:2c:e8:
                    ce:7e:6d:6d:b6:0e:bc:a0:33:a6:20:0d:28:61:88:
                    5f:b9:c5:85:c9:52:c1:f3:92:c6:3e:66:3b:e3:94:
                    c8:ae:78:b5:9f:c8:99:c6:ef:20:27:d2:7e:d9:09:
                    3e:8b:53:66:59:94:6b:fb:4e:16:8d:4d:dc:15:af:
                    ca:f4:19:d8:a8:d2:fb:20:56:13:8d:c0:b2:2b:38:
                    e6:5c:d5:d6:42:c5:e4:e7:78:b3:d0:ea:e2:64:71:
                    85:8b:01:b5:62:77:9a:96:89:ec:f5:ba:0f:5f:1b:
                    cc:07:b8:69:2c:01:ad:a1:e0:3e:3e:37:6a:4b:bb:
                    bc:aa:57:51:3b:72:1c:ae:53:97:c6:c3:28:22:53:
                    0b:b8:f4:e4:00:9d:a5:8b:e4:d9:f2:a2:40:9a:57:
                    de:fb:29:55:c3:a4:9b:76:5a:32:4c:92:e3:4a:5a:
                    d9:ee:89:08:08:3e:96:25:df:3e:0d:9f:67:32:02:
                    4f:3e:35:51:aa:1e:4c:27:f8:2a:65:d9:20:a1:ee:
                    d4:6d:48:f8:ef:61:48:59:11:0f:2e:ec:14:b8:e3:
                    4d:47:6a:ba:2d:02:63:6a:5d:3a:27:0b:6c:e2:9b:
                    87:95:ba:ad:c9:d3:3d:59:1e:5f:f7:36:7b:a8:4d:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8C:EF:13:90:7E:E8:9F:3D:F2:A0:6E:34:09:B8:D2:8C:72:45:96
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3234203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:5f:5f:7b:d4:89:8b:87:9c:c9:40:0e:e5:8d:83:14:fa:
         18:cb:d6:ec:1e:54:af:b9:7d:14:04:4c:e9:3e:01:42:be:22:
         7c:b2:c4:de:7a:74:10:25:f6:3c:94:32:12:0f:32:d6:ec:99:
         78:b0:73:24:e9:10:1c:36:d5:0a:61:23:98:10:90:60:a0:65:
         00:3f:f5:d8:1b:fb:6b:81:cb:62:09:8a:2f:d4:dd:42:30:2b:
         c2:a3:39:80:47:7e:58:42:98:3f:f1:0f:ed:f3:91:f6:18:e1:
         36:e2:34:72:53:b4:2f:84:ff:28:18:c6:94:63:90:4c:ad:a9:
         c8:ab:8d:96:0e:c4:54:88:85:63:67:60:55:aa:dd:d9:b6:f5:
         50:0e:55:4e:f8:73:65:27:03:71:2e:0a:23:39:9f:37:3a:a0:
         2c:6d:94:a9:e2:f2:ee:23:82:ae:35:2a:91:ca:19:b8:fa:ae:
         ad:15:d8:27:8f:67:d8:74:61:85:b7:5b:38:70:9e:25:f3:4e:
         ab:a9:01:ac:02:df:4f:5d:66:2b:4c:56:e3:9a:80:a3:a9:c3:
         36:a6:17:06:17:2d:67:4c:72:e0:7d:9a:06:d1:4a:ca:ac:40:
         84:e5:31:5c:e6:37:36:d5:40:83:f3:9f:36:90:1f:01:77:05:
         7e:48:19:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:06:26 2025 by rpki-client