Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa
File:                     3137372e31312e302e302f32342d3234203d3e203532393632.roa (raw, json)
Hash identifier:          6B2tnYONjxyUin4RyFw7SnTD5JRkvwGHPcbAOGGyKkY=
Subject key identifier:   90:3C:96:88:EF:D6:73:CB:2D:E6:E7:DD:34:3C:31:15:96:27:45:DB
Certificate issuer:       /CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
Certificate serial:       33365F71FD15D0413D327100AE9BA4AFBF370AEC
Authority key identifier: 5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa
Signing time:             Thu 27 Mar 2025 20:38:47 +0000
ROA not before:           Thu 27 Mar 2025 20:33:47 +0000
ROA not after:            Thu 26 Mar 2026 20:38:47 +0000
asID:                     52962
IP address blocks:        177.11.0.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 29 Mar 2025 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:5f:71:fd:15:d0:41:3d:32:71:00:ae:9b:a4:af:bf:37:0a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C
        Validity
            Not Before: Mar 27 20:33:47 2025 GMT
            Not After : Mar 26 20:38:47 2026 GMT
        Subject: CN=903C9688EFD673CB2DE6E7DD343C3115962745DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:75:38:b2:6e:58:45:15:3f:23:28:a4:1c:
                    fd:67:f6:4f:1c:cf:d8:81:70:2f:a3:99:80:8b:79:
                    5c:81:2a:01:7e:1d:df:66:6a:48:6a:eb:c7:73:1a:
                    43:74:21:7f:99:fe:d4:6f:2e:bb:12:37:a0:58:58:
                    6c:7d:92:ac:7f:4b:01:92:8b:2f:1e:d6:73:3a:94:
                    25:53:85:53:95:10:23:b5:8c:41:0a:26:6a:87:18:
                    5b:f4:25:e3:c1:c2:76:9d:9d:e2:31:e9:b7:06:16:
                    ce:c2:63:f5:c5:b5:fe:39:30:b4:83:fa:29:ea:f2:
                    cb:41:d4:04:1f:71:50:79:9c:6e:15:6c:ff:f3:18:
                    35:52:4f:29:b9:6f:a8:0d:d1:63:64:e6:fa:67:de:
                    2e:ea:d5:03:ec:c8:9d:9d:a9:83:f1:75:31:f5:4f:
                    66:a7:65:f4:08:2a:b3:76:34:ac:52:10:ae:e4:3a:
                    ba:56:99:ef:8b:99:44:b6:a0:84:e6:08:f6:00:7c:
                    11:50:31:8b:37:48:93:a4:61:e1:f8:91:f6:b3:4f:
                    0e:3b:81:e9:15:7d:47:55:fd:23:b5:ac:76:bb:f3:
                    57:91:64:a8:d1:55:52:43:26:78:d2:4a:6b:52:d7:
                    02:a9:21:d9:e6:11:96:48:4a:96:59:b7:60:6b:6b:
                    f3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3C:96:88:EF:D6:73:CB:2D:E6:E7:DD:34:3C:31:15:96:27:45:DB
            X509v3 Authority Key Identifier:
                keyid:5A:EE:39:E0:3A:3D:AE:A5:B7:81:8D:FE:7D:26:45:BC:EC:E4:DD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AEE39E03A3DAEA5B7818DFE7D2645BCECE4DD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1wjVoPUeRweuDAWkfgz4NHFe45z1HEwfqiDAgREJDhR/0/3137372e31312e302e302f32342d3234203d3e203532393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:63:99:1f:7a:5a:0f:5e:86:23:fa:39:e4:40:c5:19:c9:28:
         c9:0f:2f:67:96:4b:7d:67:d1:4a:eb:b9:5d:9b:cf:2a:98:1e:
         85:d3:fe:80:40:f6:31:bb:51:b0:49:a5:0d:22:53:65:83:46:
         68:cd:01:fa:37:de:88:41:48:51:51:cb:39:9a:9e:1e:17:0e:
         d2:7f:43:c9:f2:44:37:34:89:8b:40:9b:9d:4d:89:46:f3:8a:
         ca:17:15:11:1a:8c:d4:59:e9:23:b5:6f:ba:f6:36:16:4b:dd:
         75:f8:26:e0:4f:9c:c9:34:d6:ac:a7:8d:9f:a0:2f:6c:8c:cb:
         72:7e:a5:e2:06:71:24:10:24:c2:09:51:ee:15:aa:3f:42:47:
         1e:49:a5:7a:a3:65:51:af:b6:67:f8:0e:af:ae:f7:e1:a3:4a:
         88:57:2c:ef:f1:52:0e:29:ca:d6:9b:2a:e4:a6:17:82:c1:62:
         83:21:69:d8:a9:5d:0c:1f:a1:09:e0:aa:d3:de:c6:0e:11:72:
         9c:c7:4a:9f:ef:ff:9a:78:49:07:af:a5:d1:12:69:b5:c9:64:
         00:62:b0:25:0b:2c:c0:f6:d9:a1:db:04:25:14:1a:89:5b:b7:
         40:61:af:e6:99:92:ac:36:bc:4b:4c:b2:70:13:63:8c:3f:11:
         9a:f2:87:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:47:22 2025 by rpki-client