Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa
File:                     3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          vlEP1hxaSpb2OAbuVV8HNg8MhKaGyrmY3AFI0HCPKeE=
Subject key identifier:   6E:F8:E8:AC:39:38:62:CF:26:BE:13:90:80:52:6B:A3:54:D0:54:3F
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       46A41CC3EEDEC68DE2314FF3BFEA4A63D9E5933C
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa
Signing time:             Wed 24 Apr 2024 14:35:09 +0000
ROA not before:           Wed 24 Apr 2024 14:30:09 +0000
ROA not after:            Wed 23 Apr 2025 14:35:09 +0000
asID:                     271238
IP address blocks:        190.171.72.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 Aug 2024 22:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:1c:c3:ee:de:c6:8d:e2:31:4f:f3:bf:ea:4a:63:d9:e5:93:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Apr 24 14:30:09 2024 GMT
            Not After : Apr 23 14:35:09 2025 GMT
        Subject: CN=6EF8E8AC393862CF26BE139080526BA354D0543F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:93:e7:21:c9:b8:69:49:3a:5e:66:a2:d4:
                    de:ec:8a:c0:8d:62:a5:32:ae:83:5b:d3:06:69:39:
                    a7:08:a2:f9:1b:4a:c0:0d:bc:bd:ac:e3:05:00:4f:
                    c0:7f:29:b4:af:07:50:14:b7:50:17:c0:53:fd:0f:
                    b1:e9:6f:c0:51:e6:ce:a6:54:de:13:0d:dd:55:f1:
                    34:8d:da:66:f1:b8:8a:de:91:68:1f:23:fa:21:29:
                    ab:e1:2f:1e:97:c4:b4:4f:b1:94:96:29:cc:0a:1f:
                    48:57:5b:f1:ed:a0:d3:1f:da:a8:14:c2:a6:07:4f:
                    31:23:06:b1:58:5e:8a:7c:7a:b5:c6:cd:81:8a:de:
                    98:fd:8a:11:7a:30:22:a6:64:ef:59:d8:fb:b1:16:
                    c4:1f:54:5a:b9:3e:87:49:8a:2e:6a:0e:f4:fb:02:
                    6a:ba:64:50:57:c1:5f:9d:00:3c:cd:a4:86:39:5d:
                    6f:9d:04:88:22:17:d2:03:13:61:88:cc:33:e9:19:
                    e4:63:68:cd:06:a9:21:dd:5e:07:88:fb:ae:c9:03:
                    ce:3a:32:cf:6b:cb:a2:00:c7:2e:85:6a:f2:15:38:
                    7b:ff:96:13:63:58:ce:20:80:9a:40:d1:4c:eb:2b:
                    0c:11:4d:d8:80:dd:8f:4d:bf:50:74:33:9c:dd:f3:
                    00:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:E8:AC:39:38:62:CF:26:BE:13:90:80:52:6B:A3:54:D0:54:3F
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:0c:e5:5c:d3:63:bc:1f:3e:9e:77:c0:e1:17:c7:7c:b9:
         75:19:36:33:ff:88:37:cf:3e:ce:48:8a:c1:5f:98:5d:8b:1d:
         e8:8f:bf:00:4a:78:db:e8:2e:3f:f3:29:4c:d2:bb:c9:c6:fd:
         81:5d:ef:69:d3:7c:86:4a:41:d0:f2:61:02:59:95:67:3f:3d:
         87:c6:15:44:41:03:51:ee:d9:92:38:d0:0a:73:e4:58:9d:9d:
         5d:8a:b4:a2:d5:d3:2d:1e:5b:6f:a9:56:aa:53:5c:2a:a0:97:
         48:be:c7:b1:a6:7a:ff:c6:21:c9:3e:4f:5f:19:a9:6c:83:1b:
         f0:9d:d0:0a:f1:5a:fd:e8:01:61:ee:da:5a:d2:ec:50:4a:4f:
         fe:b5:f2:03:de:f1:a0:50:38:a5:09:8e:69:63:fe:00:29:cc:
         d0:88:6d:63:d7:a5:c1:89:a5:f6:e6:85:e5:35:87:67:d3:12:
         3d:85:31:98:6a:62:b5:b3:ef:ba:0f:d2:b4:da:54:9d:67:f0:
         d3:13:b0:0e:a1:26:d0:c5:6f:c8:b8:00:af:8b:a1:eb:6e:e9:
         f4:77:c9:a3:8a:fd:a0:5e:04:2b:20:cf:95:30:43:89:b4:3c:
         ea:06:d1:9e:e5:24:6d:1c:f3:9f:8f:28:fa:24:cc:1c:be:aa:
         9c:45:c8:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURqQcw+7exo3iMU/zv+pKY9nlkzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0
OTYxQkU3MTAeFw0yNDA0MjQxNDMwMDlaFw0yNTA0MjMxNDM1MDlaMDMxMTAvBgNV
BAMTKDZFRjhFOEFDMzkzODYyQ0YyNkJFMTM5MDgwNTI2QkEzNTREMDU0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjPJPnIcm4aUk6Xmai1N7sisCN
YqUyroNb0wZpOacIovkbSsANvL2s4wUAT8B/KbSvB1AUt1AXwFP9D7Hpb8BR5s6m
VN4TDd1V8TSN2mbxuIrekWgfI/ohKavhLx6XxLRPsZSWKcwKH0hXW/HtoNMf2qgU
wqYHTzEjBrFYXop8erXGzYGK3pj9ihF6MCKmZO9Z2PuxFsQfVFq5PodJii5qDvT7
Amq6ZFBXwV+dADzNpIY5XW+dBIgiF9IDE2GIzDPpGeRjaM0GqSHdXgeI+67JA846
Ms9ry6IAxy6FavIVOHv/lhNjWM4ggJpA0UzrKwwRTdiA3Y9Nv1B0M5zd8wAFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbvjorDk4Ys8mvhOQgFJro1TQVD8wHwYDVR0j
BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ
c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz
QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHWU5xZVFYR0N1cldkMXd2U2FBaGgxaU0zRXlDRXRtdlpERFM4VnQ0UHNnLzAv
MzEzOTMwMmUzMTM3MzEyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+q0gwDQYJKoZIhvcNAQELBQADggEBABKgDOVc
02O8Hz6ed8DhF8d8uXUZNjP/iDfPPs5IisFfmF2LHeiPvwBKeNvoLj/zKUzSu8nG
/YFd72nTfIZKQdDyYQJZlWc/PYfGFURBA1Hu2ZI40Apz5FidnV2KtKLV0y0eW2+p
VqpTXCqgl0i+x7Gmev/GIck+T18ZqWyDG/Cd0ArxWv3oAWHu2lrS7FBKT/618gPe
8aBQOKUJjmlj/gApzNCIbWPXpcGJpfbmheU1h2fTEj2FMZhqYrWz77oP0rTaVJ1n
8NMTsA6hJtDFb8i4AK+Loetu6fR3yaOK/aBeBCsgz5UwQ4m0POoG0Z7lJG0c85+P
KPokzBy+qpxFyBs=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:11 2025 by rpki-client