Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34342e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e34342e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          XoV6bdVuqGxUzv+k07Q697LQFkkHe+zQ+upUogKlJXs=
Subject key identifier:   56:9B:C0:0C:E8:EA:69:D1:86:1E:AE:5C:8D:5F:76:5D:7B:38:D0:BC
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       61D83BCC20712ADC26B9D5CDCB1BA10453F70837
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34342e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 17:47:01 +0000
ROA not before:           Fri 30 Aug 2024 17:42:01 +0000
ROA not after:            Fri 29 Aug 2025 17:47:01 +0000
asID:                     272710
IP address blocks:        201.23.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 30 Aug 2024 20:42:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:3b:cc:20:71:2a:dc:26:b9:d5:cd:cb:1b:a1:04:53:f7:08:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 17:42:01 2024 GMT
            Not After : Aug 29 17:47:01 2025 GMT
        Subject: CN=569BC00CE8EA69D1861EAE5C8D5F765D7B38D0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:fd:64:5d:7b:ea:e6:a2:b9:47:37:ce:31:
                    4f:f5:69:c2:41:71:bf:84:e8:19:8c:cc:5a:a0:37:
                    9b:6a:5f:b3:4a:d9:17:e7:0d:1f:26:45:86:48:c8:
                    d0:f2:74:bf:e6:21:6a:ab:0a:eb:2b:99:d1:73:3d:
                    10:9e:e4:a8:9e:0b:96:dc:66:01:b7:95:94:1a:06:
                    96:7f:c6:c7:a0:a6:bc:41:40:ec:9e:1c:0a:a0:24:
                    55:ac:46:a7:cc:88:8a:68:70:aa:4f:f6:e6:f7:50:
                    3f:54:00:99:81:09:1b:1c:66:93:38:21:c5:2d:1c:
                    59:90:32:cb:99:f9:f0:03:cf:ac:94:58:45:74:65:
                    a6:f9:ad:da:86:96:15:38:0d:26:5b:95:00:ac:2e:
                    11:76:63:30:7b:bd:fb:00:d5:1f:01:ae:e2:cb:10:
                    e4:0d:b4:ba:f2:a1:a0:9d:dc:01:86:bd:e8:37:57:
                    eb:89:26:1e:aa:eb:2d:e9:d4:e5:c7:3b:98:60:c0:
                    74:5c:76:b0:91:8b:92:de:cc:e9:a8:8f:5d:74:9c:
                    ad:44:03:d3:20:63:c9:53:15:d3:85:a1:d0:26:76:
                    c5:c9:57:db:8b:ea:ae:54:cb:7a:64:73:23:4d:c8:
                    b7:cb:35:b3:57:5a:34:7c:eb:02:06:bb:fa:9e:7a:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9B:C0:0C:E8:EA:69:D1:86:1E:AE:5C:8D:5F:76:5D:7B:38:D0:BC
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e34342e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:75:c5:b0:2f:fc:d2:bc:8a:1e:9c:83:4c:ae:2e:f4:bf:
         76:d4:af:7f:96:f1:09:a7:7f:43:08:94:eb:d7:d8:f9:e3:4d:
         2d:64:92:4f:da:c5:b1:65:29:1f:7b:78:40:ae:1e:57:27:e6:
         0e:03:c8:b0:ce:52:59:e9:14:b7:ec:0b:7e:f9:35:7b:cd:6b:
         85:d7:f6:4c:30:6a:9a:f6:df:8e:34:f3:e9:73:46:66:63:a3:
         79:48:2a:e0:5c:01:55:65:00:a3:12:22:d2:94:68:63:6b:84:
         17:86:47:1c:b4:88:35:df:aa:bb:74:58:28:be:4a:92:59:58:
         26:9e:a5:30:2e:cf:46:a2:38:d9:8e:a6:84:75:31:b9:72:10:
         af:72:e3:84:9d:97:7b:fd:4b:22:a9:33:c0:55:ca:3c:f7:b0:
         fa:af:2b:fb:51:96:ab:80:f0:fc:81:0b:de:8f:61:e4:5b:39:
         93:27:f7:13:3c:72:41:98:82:d7:73:91:ec:e3:79:f4:9e:ec:
         97:ee:5a:04:b6:93:46:46:98:31:99:74:5b:aa:35:15:ad:55:
         a4:c3:60:7b:a1:64:76:d2:e9:5d:a8:5b:5e:a2:91:13:ec:63:
         02:f0:c9:00:33:86:cd:7d:93:c4:62:6c:ce:c9:6e:1a:cb:71:
         a2:93:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:48 2025 by rpki-client