Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138372e302f32342d3234203d3e20323732373932.roa
File:                     3230312e3138322e3138372e302f32342d3234203d3e20323732373932.roa (raw, json)
Hash identifier:          NLaoMdTONrCYxeq2ksG3D/oqR7w0G9/Hjaij2PymFnU=
Subject key identifier:   12:C7:66:B5:D9:65:87:E2:0B:95:80:D7:84:88:1D:F4:33:20:D0:84
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       6223414474B603215ACE45B4FFBDA852FCF74421
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138372e302f32342d3234203d3e20323732373932.roa
Signing time:             Wed 04 Dec 2024 00:57:23 +0000
ROA not before:           Wed 04 Dec 2024 00:52:23 +0000
ROA not after:            Wed 03 Dec 2025 00:57:23 +0000
asID:                     272792
IP address blocks:        201.182.187.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 19 Dec 2024 01:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:23:41:44:74:b6:03:21:5a:ce:45:b4:ff:bd:a8:52:fc:f7:44:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Dec  4 00:52:23 2024 GMT
            Not After : Dec  3 00:57:23 2025 GMT
        Subject: CN=12C766B5D96587E20B9580D784881DF43320D084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:7f:90:e7:27:d3:db:19:c1:fc:8c:9a:57:
                    a2:0b:c0:92:64:fc:e7:b7:d0:cd:a7:d7:17:78:a2:
                    03:bb:55:90:c5:ea:11:57:e4:c3:04:f7:2a:32:9b:
                    98:13:27:22:cc:ef:7c:13:52:ea:96:d9:b8:c1:e2:
                    9f:e9:e7:34:c7:37:ee:33:65:36:de:90:a3:55:51:
                    90:9a:d3:6e:ec:bb:af:65:54:0e:63:41:03:07:81:
                    25:c6:5e:f7:ca:1d:3b:f6:75:37:d0:fe:47:10:dc:
                    fa:d2:e9:05:9d:ea:45:fb:56:8e:fb:20:33:be:db:
                    ac:7d:e0:ee:66:0a:47:46:63:15:4d:48:50:cb:93:
                    d4:c3:ae:7d:a9:9b:6a:64:8d:b3:fd:76:fe:87:54:
                    9f:49:f7:b4:56:6a:3c:43:99:3b:09:f4:b3:fa:65:
                    4a:8f:4b:96:c5:0a:08:aa:8f:84:86:d2:a2:cb:11:
                    96:f3:05:04:4f:cc:11:e6:fb:4f:70:be:6c:33:fa:
                    3d:73:77:af:d6:db:fe:c9:91:08:18:e5:c1:26:ad:
                    f3:56:de:98:be:3e:c6:36:e9:f3:a1:c8:13:f1:fe:
                    e5:65:db:65:f8:7e:45:0a:e6:4f:03:d2:45:7e:b9:
                    66:cf:f3:79:5b:ed:74:18:88:19:fd:53:3b:26:4e:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C7:66:B5:D9:65:87:E2:0B:95:80:D7:84:88:1D:F4:33:20:D0:84
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138372e302f32342d3234203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:70:ed:3f:46:01:95:99:1e:53:2b:57:97:dd:46:f2:22:c3:
         25:b1:64:fb:22:a7:10:c1:0a:3a:b5:35:be:d4:52:71:5a:78:
         d5:69:67:b0:8e:d1:bf:0f:61:1d:46:66:55:b9:18:6e:41:99:
         2c:4b:dd:c7:28:9c:d5:e7:e0:38:64:41:a2:4c:4e:b3:7a:4e:
         1b:30:61:fd:f0:44:64:f0:f6:61:6f:c6:b0:59:1f:06:6f:47:
         13:34:ec:b6:22:2b:43:77:0e:b0:38:24:1e:cb:07:d7:dc:f3:
         de:a6:3f:8c:f8:c2:a2:e1:7c:0c:4c:b3:f4:bf:48:5d:35:3d:
         3c:12:d5:01:41:85:4d:a4:51:02:94:a9:79:3c:9b:7d:56:d9:
         26:65:25:bc:48:8f:bd:1b:3c:b2:46:e5:90:dd:c6:4a:66:9f:
         41:18:7e:30:56:55:14:78:08:2a:26:a1:85:12:52:7c:82:de:
         f6:79:be:29:87:7e:64:fa:8d:1f:41:09:23:a9:30:d8:c2:a5:
         86:ab:39:30:45:ce:b7:86:b3:a1:06:99:0f:78:10:d9:76:f5:
         b8:e5:7c:3b:13:05:70:7e:ba:ac:6b:93:43:fe:c4:f0:dc:da:
         22:47:f8:68:fa:02:68:e4:23:41:cc:c2:99:9d:54:c0:c0:fc:
         d5:83:98:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:16:07 2025 by rpki-client