Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e31322e302f32322d3232203d3e20323632343836.roa
File:                     3137372e36362e31322e302f32322d3232203d3e20323632343836.roa (raw, json)
Hash identifier:          IrLR4Qs9HxZysw9UmNJp3UZ5lArjGf6P5IWqUmd2eYw=
Subject key identifier:   43:9E:88:5A:00:05:55:B3:A9:3A:3D:75:D1:FD:7C:E9:CA:5C:17:52
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       6011343C19158023BD656CF0C3148618622458A2
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e31322e302f32322d3232203d3e20323632343836.roa
Signing time:             Mon 19 Aug 2024 14:59:16 +0000
ROA not before:           Mon 19 Aug 2024 14:54:16 +0000
ROA not after:            Mon 18 Aug 2025 14:59:16 +0000
asID:                     262486
IP address blocks:        177.66.12.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 21 Aug 2024 22:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:11:34:3c:19:15:80:23:bd:65:6c:f0:c3:14:86:18:62:24:58:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Aug 19 14:54:16 2024 GMT
            Not After : Aug 18 14:59:16 2025 GMT
        Subject: CN=439E885A000555B3A93A3D75D1FD7CE9CA5C1752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:ec:f2:49:7c:dc:2e:93:65:90:bd:cc:13:
                    e7:cf:ba:75:09:7f:b1:b5:f0:07:44:f9:bc:65:f2:
                    09:ea:ca:91:e8:df:f7:2e:2c:c0:c0:33:68:1b:55:
                    a5:57:bd:3f:34:56:81:fc:a0:5d:81:5d:73:a7:32:
                    1f:b7:8d:d7:67:05:c7:44:79:45:1a:82:c5:d1:3c:
                    9a:07:d1:8e:cb:9d:bc:95:9e:f5:4f:ef:8a:38:b1:
                    65:49:5f:57:2d:e6:13:15:22:1a:26:3e:e3:0e:5e:
                    53:82:8e:4a:d1:34:79:91:ba:41:6a:f7:12:2b:28:
                    78:8d:2e:c3:a2:8b:a8:c6:e8:1f:1a:97:b7:1c:e7:
                    c9:a6:21:6f:58:37:19:94:df:f1:bc:7f:dc:6d:ef:
                    ff:13:2d:fc:1b:76:37:42:f5:de:2a:08:d7:f2:df:
                    d8:13:53:60:46:5b:65:28:1c:b1:47:b6:63:40:28:
                    6b:42:b8:a8:23:72:4d:fd:3c:07:6f:42:28:15:37:
                    6d:23:9b:91:65:12:27:c4:b1:3b:e5:ce:2f:07:11:
                    74:5c:9b:d5:b6:c4:60:06:a4:c3:20:b5:86:74:73:
                    51:ad:89:cd:e5:d7:7a:5c:66:51:39:b5:99:ba:91:
                    a0:cb:bf:ba:3c:bb:bf:44:47:65:50:cc:11:40:bd:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9E:88:5A:00:05:55:B3:A9:3A:3D:75:D1:FD:7C:E9:CA:5C:17:52
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e31322e302f32322d3232203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:03:b3:7a:01:9c:e1:a5:6a:fb:ba:83:71:f4:f7:18:31:
         27:e4:7c:71:d5:fa:11:25:82:e2:57:ce:69:4e:65:c4:e4:c7:
         f8:e8:4f:9a:18:f8:49:7d:43:5e:39:e4:d5:81:ff:22:c9:17:
         3a:6f:e8:e0:d6:3f:a2:d0:f5:e0:63:88:3c:ae:c5:b0:46:53:
         39:44:2c:d5:61:cd:b6:77:e1:c7:85:8d:ea:e8:2a:d0:70:37:
         d7:19:31:45:6f:16:c9:2c:90:b6:78:12:19:46:19:42:4f:57:
         3c:69:ab:f5:36:92:21:0f:2a:00:04:a3:20:bd:54:66:9a:f5:
         aa:15:d3:ae:dd:6b:3c:12:ca:19:50:90:c4:9b:ca:ab:d3:ef:
         5f:7f:e1:ad:75:e1:80:ae:a4:e0:25:d1:f7:23:29:98:82:1a:
         cc:9e:10:5c:2e:59:b6:d1:a6:48:d0:b6:56:34:14:b2:6b:5b:
         29:11:40:97:51:3b:8b:d7:89:49:38:65:68:ea:fa:68:af:3e:
         ad:76:1c:53:7f:0e:a5:03:8f:30:67:ac:4c:e2:c3:9c:69:b6:
         d5:7d:10:43:bc:02:af:ba:c5:0c:3f:15:a2:85:85:bf:c1:af:
         5f:e7:3e:ae:b6:14:21:20:d4:de:3c:82:bc:d5:ea:eb:a6:ec:
         ae:8a:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:21 2025 by rpki-client