Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa
File:                     3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa (raw, json)
Hash identifier:          uAZ9z5w91p4bgYFrDDSY+dVDN/1ZD+EHwZnCOPYCjYA=
Subject key identifier:   3F:A7:40:1E:66:8C:ED:5A:DA:4F:DC:18:66:2D:23:EB:FD:3A:12:89
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       6F99274623D45ACE1E1755DEA3EF9FA596EA4E4D
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa
Signing time:             Tue 03 Dec 2024 18:24:23 +0000
ROA not before:           Tue 03 Dec 2024 18:19:23 +0000
ROA not after:            Tue 02 Dec 2025 18:24:23 +0000
asID:                     264320
IP address blocks:        138.122.121.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 23 Jan 2025 20:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:27:46:23:d4:5a:ce:1e:17:55:de:a3:ef:9f:a5:96:ea:4e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Dec  3 18:19:23 2024 GMT
            Not After : Dec  2 18:24:23 2025 GMT
        Subject: CN=3FA7401E668CED5ADA4FDC18662D23EBFD3A1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:97:7b:ec:fd:a2:b3:39:d9:32:fd:42:5f:
                    61:b7:e5:c2:8b:e8:0e:92:30:46:7c:7d:eb:77:4c:
                    bd:be:a5:a9:d7:14:d5:3a:3b:7f:91:89:39:13:53:
                    5c:98:bc:16:74:f5:72:c4:e8:ca:65:c2:9f:7b:35:
                    70:9f:8d:f6:d8:92:e1:57:c1:5f:7c:5d:48:ff:29:
                    2e:4f:60:2d:2a:3b:f0:08:fc:a4:bd:43:b3:f1:f6:
                    6a:65:76:6b:61:c5:15:22:d3:b8:1b:c4:ad:7c:b6:
                    fd:3f:12:98:9f:69:cd:c7:26:e2:63:29:3f:13:a1:
                    dc:21:5a:96:58:25:58:c7:7c:eb:27:13:a4:41:91:
                    65:ae:c5:6c:67:66:97:1b:31:9a:8e:3c:c9:2b:49:
                    58:cd:f5:95:95:c8:db:27:ef:df:19:1a:05:dc:13:
                    27:53:7a:fa:47:04:fa:56:6f:32:0c:fb:62:a0:63:
                    b7:b8:7f:f5:8e:58:1c:16:e8:5c:c6:ea:9c:41:59:
                    05:b7:a6:38:6f:34:47:f7:42:34:66:f2:b2:40:3f:
                    bc:8a:45:92:6c:49:a6:73:cc:31:3c:c4:cd:4c:ab:
                    72:be:99:e4:c6:2e:ad:8b:ca:f4:ef:7a:da:57:a1:
                    ad:8a:14:d6:53:ee:7e:c3:0f:eb:a5:36:c9:a0:57:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:40:1E:66:8C:ED:5A:DA:4F:DC:18:66:2D:23:EB:FD:3A:12:89
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132312e302f32342d3234203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:98:55:14:76:78:4d:cc:35:25:5f:50:50:cc:d4:ff:5a:
         d3:c4:48:25:96:51:c3:04:02:f1:12:83:01:0a:65:10:b1:af:
         29:0d:d9:53:08:d6:b6:8e:5e:b6:1b:db:c6:ab:14:f5:82:8d:
         68:8a:dc:bc:b6:b0:37:45:c5:67:5f:b3:7c:96:15:bb:7d:de:
         66:d8:3d:98:d0:85:69:12:62:91:fd:21:d8:fe:07:83:ae:e7:
         9e:37:94:c2:0f:38:e0:15:a8:e3:03:9d:25:4b:17:0b:1d:c7:
         c8:fa:16:c5:92:59:70:e2:2f:9e:ee:9f:5c:6f:d7:a4:32:01:
         74:b7:73:63:39:ad:d6:a4:71:a3:9d:a0:8a:91:a1:d4:27:66:
         6e:4b:fb:a5:12:1f:a7:21:b8:20:a3:89:20:4a:82:b6:03:d9:
         6e:1b:23:3d:16:11:8d:9a:ce:61:89:86:ab:aa:b9:af:2d:3d:
         ec:49:44:c9:ef:56:74:3c:5a:02:62:17:cc:9c:b1:33:98:01:
         a8:53:87:73:06:89:d5:2e:49:fe:a1:c7:f1:08:91:85:d9:8f:
         7c:e2:c1:c1:23:ab:cb:a7:4a:98:f8:33:ac:af:2d:38:d8:ac:
         20:e9:7e:40:a1:ac:26:13:dd:86:c1:4c:7c:8b:ec:0e:2b:85:
         83:de:96:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb5knRiPUWs4eF1Xeo++fpZbqTk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFRjE3NTVDQTEyODA3NjZCNDg3QzY2NDQ0Q0ZGMjAz
MkIyQUU3NzAeFw0yNDEyMDMxODE5MjNaFw0yNTEyMDIxODI0MjNaMDMxMTAvBgNV
BAMTKDNGQTc0MDFFNjY4Q0VENUFEQTRGREMxODY2MkQyM0VCRkQzQTEyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gJd77P2isznZMv1CX2G35cKL
6A6SMEZ8fet3TL2+panXFNU6O3+RiTkTU1yYvBZ09XLE6Mplwp97NXCfjfbYkuFX
wV98XUj/KS5PYC0qO/AI/KS9Q7Px9mpldmthxRUi07gbxK18tv0/Epifac3HJuJj
KT8TodwhWpZYJVjHfOsnE6RBkWWuxWxnZpcbMZqOPMkrSVjN9ZWVyNsn798ZGgXc
EydTevpHBPpWbzIM+2KgY7e4f/WOWBwW6FzG6pxBWQW3pjhvNEf3QjRm8rJAP7yK
RZJsSaZzzDE8xM1Mq3K+meTGLq2LyvTvetpXoa2KFNZT7n7DD+ulNsmgVzbNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUP6dAHmaM7VraT9wYZi0j6/06EokwHwYDVR0j
BBgwFoAUTu8XVcoSgHZrSHxmREz/IDKyrncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTlveUVwNHRiNG85MTlKU3VCSkRxS01oRzlFYjk1VmRBaVVCWTVzaTZl
TWQvMC80RUVGMTc1NUNBMTI4MDc2NkI0ODdDNjY0NDRDRkYyMDMyQjJBRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFRUYxNzU1Q0ExMjgwNzY2
QjQ4N0M2NjQ0NENGRjIwMzJCMkFFNzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5b3lFcDR0YjRvOTE5SlN1QkpEcUtNaEc5RWI5NVZkQWlVQlk1c2k2ZU1kLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6eTANBgkqhkiG9w0BAQsFAAOCAQEAvEOY
VRR2eE3MNSVfUFDM1P9a08RIJZZRwwQC8RKDAQplELGvKQ3ZUwjWto5ethvbxqsU
9YKNaIrcvLawN0XFZ1+zfJYVu33eZtg9mNCFaRJikf0h2P4Hg67nnjeUwg844BWo
4wOdJUsXCx3HyPoWxZJZcOIvnu6fXG/XpDIBdLdzYzmt1qRxo52gipGh1Cdmbkv7
pRIfpyG4IKOJIEqCtgPZbhsjPRYRjZrOYYmGq6q5ry097ElEye9WdDxaAmIXzJyx
M5gBqFOHcwaJ1S5J/qHH8QiRhdmPfOLBwSOry6dKmPgzrK8tONisIOl+QKGsJhPd
hsFMfIvsDiuFg96WkA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:25:58 2025 by rpki-client