Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35382e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          hQxe45GLJP3ML9a0hO/OekxHAc2b5AtEONxqCmNGpfA=
Subject key identifier:   16:5F:DA:7B:2A:96:0E:D3:13:2A:DC:0F:20:9C:F4:9E:B1:7F:68:D6
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       465BD34F5F875DA0780C82DE1702615376ABDE7C
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
Signing time:             Mon 16 Dec 2024 19:56:55 +0000
ROA not before:           Mon 16 Dec 2024 19:51:55 +0000
ROA not after:            Mon 15 Dec 2025 19:56:55 +0000
asID:                     271700
IP address blocks:        189.84.58.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 09 Jan 2025 17:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5b:d3:4f:5f:87:5d:a0:78:0c:82:de:17:02:61:53:76:ab:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Dec 16 19:51:55 2024 GMT
            Not After : Dec 15 19:56:55 2025 GMT
        Subject: CN=165FDA7B2A960ED3132ADC0F209CF49EB17F68D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:7d:d1:aa:5a:0a:1b:ca:85:4f:90:d5:3c:
                    1f:bd:79:7b:f9:a9:7a:79:9a:fb:63:86:b5:66:3f:
                    b0:92:e3:9e:d8:58:19:56:82:cb:9b:1c:58:77:0e:
                    b1:0d:af:11:b7:5a:c8:f9:82:79:dd:f8:fd:49:cb:
                    bc:e0:99:10:5e:a9:b7:cc:02:ad:52:85:6f:d9:10:
                    37:7b:a4:fa:67:12:4e:6b:dc:f6:0f:b9:eb:c1:b3:
                    07:95:63:4e:8c:2b:bc:fb:b5:18:d1:ef:4b:5f:7b:
                    18:81:0f:e7:54:f0:d2:bf:09:0d:e6:db:2e:bb:4f:
                    06:18:49:9c:77:fa:e3:11:3c:c2:72:d5:67:d1:31:
                    21:f4:50:4b:83:72:1f:8b:e0:c0:07:b4:1e:6a:c1:
                    2a:73:9d:17:02:bf:99:c3:93:bf:15:66:41:d6:a2:
                    64:91:22:cb:70:44:ea:3e:e8:ba:57:b9:99:97:3d:
                    52:2a:b5:3c:98:18:91:df:f6:ee:02:da:70:9e:c8:
                    07:c9:0c:35:ee:5f:5e:ac:35:07:00:5f:5f:77:02:
                    4b:1b:3b:04:d5:84:c0:e6:95:0f:98:0b:28:c2:6e:
                    5b:88:b0:d8:c3:40:7f:8d:5b:13:76:62:17:8c:4a:
                    0a:3c:9e:3e:ca:cf:ae:96:ae:4d:87:7c:fd:2d:cd:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:DA:7B:2A:96:0E:D3:13:2A:DC:0F:20:9C:F4:9E:B1:7F:68:D6
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:2f:54:f1:1a:66:b1:5a:a2:05:7c:47:4f:ca:92:fa:cd:
         d6:87:c2:05:cb:68:0f:e6:d1:15:00:4b:2d:55:e3:5a:b5:83:
         8b:d6:9d:2e:40:aa:ca:cb:6d:c8:ce:ef:64:fc:8c:5a:aa:59:
         15:31:08:f7:58:72:3c:71:d0:ad:7b:be:38:db:a5:2d:86:f3:
         0d:a5:c6:0b:91:56:d6:d7:0d:a0:f8:4c:0c:c1:56:53:3c:f2:
         cd:fd:52:46:c2:5a:0a:47:8a:3d:98:f6:f3:95:70:95:5a:8c:
         d4:e5:6f:b0:98:46:73:c4:65:c2:d2:da:25:4e:f9:23:72:4a:
         81:4f:8f:d1:bb:b7:39:b5:90:f0:ac:67:c0:03:40:ac:8d:d2:
         eb:0c:2c:bf:bf:25:fd:70:68:5c:9e:23:f5:0c:f0:06:2c:0a:
         5b:1c:20:64:d4:e0:07:f7:d5:ec:6d:71:4f:ea:ed:da:1a:3f:
         56:a5:09:1c:0f:f8:b4:8d:55:08:38:cc:cd:69:db:58:b4:b3:
         9e:c4:41:df:65:fe:df:3c:a3:ef:b5:a4:31:1e:41:28:20:51:
         2d:43:30:cd:d9:2a:88:c0:3a:0a:33:8b:1e:5c:5c:54:1c:d4:
         dd:29:d5:49:ad:d8:c5:04:99:32:2f:f2:14:39:7b:ed:eb:a2:
         79:e9:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:28:01 2025 by rpki-client