Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37352e302f32342d3234203d3e20323731323338.roa
File:                     3139302e3137312e37352e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          pXvDUBCCt7gxSufARnJZMn8dzVdWy7J9KBYzLeDWOoY=
Subject key identifier:   A4:B7:48:60:C6:75:77:D5:66:5E:DB:7E:77:92:CB:90:AF:6D:CB:FE
Certificate issuer:       /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
Certificate serial:       66B64C3F4E7DC34936A1BDAEE145551D8ABEE7D9
Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37352e302f32342d3234203d3e20323731323338.roa
Signing time:             Wed 24 Apr 2024 14:35:27 +0000
ROA not before:           Wed 24 Apr 2024 14:30:27 +0000
ROA not after:            Wed 23 Apr 2025 14:35:27 +0000
asID:                     271238
IP address blocks:        190.171.75.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 Aug 2024 22:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:4c:3f:4e:7d:c3:49:36:a1:bd:ae:e1:45:55:1d:8a:be:e7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71
        Validity
            Not Before: Apr 24 14:30:27 2024 GMT
            Not After : Apr 23 14:35:27 2025 GMT
        Subject: CN=A4B74860C67577D5665EDB7E7792CB90AF6DCBFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:f3:f1:6c:57:8f:6c:bd:1f:25:ad:79:3b:
                    f7:29:ce:73:60:b5:35:80:4c:40:be:c8:53:96:5b:
                    e9:b1:88:d0:ab:95:cb:6e:7b:c9:e8:89:15:84:5f:
                    0b:be:f5:f1:96:a8:b6:52:56:99:43:c4:d3:80:46:
                    59:05:65:60:e6:7d:99:04:ef:ce:e0:11:b2:e7:8b:
                    fa:a1:8b:fe:1a:29:3e:fe:6f:2f:7f:23:e0:ff:4d:
                    9c:0e:01:fd:0a:bb:b5:8b:b4:b9:85:ba:0a:9f:88:
                    5a:6f:2f:2f:9e:15:90:7f:c9:ed:96:12:35:ce:42:
                    f4:ca:d6:0f:2c:e7:20:9a:4c:c3:ff:3e:da:95:4e:
                    ea:97:3c:17:51:ee:86:e8:ab:0c:d0:56:79:dc:38:
                    3d:7f:b6:c9:a1:f6:ff:d0:79:68:ea:42:14:5e:56:
                    a9:b3:fc:b0:36:3e:dc:b2:d8:8d:b3:96:1d:a0:59:
                    b2:91:d2:3f:4b:c3:09:8f:4a:c3:11:43:1e:db:3c:
                    68:b8:a4:f7:2b:21:68:ef:2b:9c:69:73:f2:42:ab:
                    89:63:47:8f:e3:b8:2e:79:35:6a:34:76:0d:24:3b:
                    96:72:c6:0e:f7:57:5b:bd:a7:a9:a9:5a:e3:a7:f5:
                    42:ce:ef:e2:32:77:39:38:5a:64:fd:f5:79:ce:ce:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:48:60:C6:75:77:D5:66:5E:DB:7E:77:92:CB:90:AF:6D:CB:FE
            X509v3 Authority Key Identifier:
                keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37352e302f32342d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:69:5d:a8:00:d0:97:da:ec:34:94:29:40:85:67:f6:9e:b9:
         ca:36:f0:f5:24:bf:7e:fb:52:9b:40:c2:24:1d:69:fb:29:31:
         ef:ab:c0:e0:bb:ea:49:17:ae:01:5d:fa:a2:55:5f:a1:9d:b4:
         dc:01:c9:e8:05:06:50:c7:8e:c2:57:58:3b:c3:74:f3:10:36:
         0d:55:01:6e:1d:f8:99:44:72:f1:b4:77:73:9f:7c:42:0a:54:
         6a:8c:f1:54:fa:11:02:9b:71:de:e5:d5:12:59:ef:d9:44:21:
         76:53:c5:19:a2:d1:46:e4:9e:2a:7b:63:4e:96:82:7c:e5:b0:
         a5:28:91:ec:0f:f3:f9:61:60:ef:33:b3:56:0a:a4:10:b1:df:
         0e:c4:1e:f0:80:8a:eb:9b:2b:f1:ec:0c:d9:2b:ac:77:72:8c:
         b6:a7:c1:b3:9c:c0:de:11:f1:68:a2:4c:d7:f1:e4:c2:0b:88:
         c3:99:9b:83:8d:0f:73:ce:7e:8c:5c:29:39:41:92:5c:5d:18:
         83:c7:f7:56:9a:cd:61:ed:22:d4:f1:2a:ab:7e:7b:c7:44:1a:
         d4:79:a5:ed:95:dc:b1:ef:12:8c:7b:a5:cb:66:cd:a7:69:fd:
         0e:96:bc:0a:dd:9b:4d:cf:61:33:6d:ac:62:77:1d:a2:08:b6:
         b1:d6:0a:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZrZMP059w0k2ob2u4UVVHYq+59kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0
OTYxQkU3MTAeFw0yNDA0MjQxNDMwMjdaFw0yNTA0MjMxNDM1MjdaMDMxMTAvBgNV
BAMTKEE0Qjc0ODYwQzY3NTc3RDU2NjVFREI3RTc3OTJDQjkwQUY2RENCRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyPPxbFePbL0fJa15O/cpznNg
tTWATEC+yFOWW+mxiNCrlctue8noiRWEXwu+9fGWqLZSVplDxNOARlkFZWDmfZkE
787gEbLni/qhi/4aKT7+by9/I+D/TZwOAf0Ku7WLtLmFugqfiFpvLy+eFZB/ye2W
EjXOQvTK1g8s5yCaTMP/PtqVTuqXPBdR7oboqwzQVnncOD1/tsmh9v/QeWjqQhRe
Vqmz/LA2Ptyy2I2zlh2gWbKR0j9LwwmPSsMRQx7bPGi4pPcrIWjvK5xpc/JCq4lj
R4/juC55NWo0dg0kO5Zyxg73V1u9p6mpWuOn9ULO7+Iydzk4WmT99XnOzmP9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpLdIYMZ1d9VmXtt+d5LLkK9ty/4wHwYDVR0j
BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ
c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz
QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHWU5xZVFYR0N1cldkMXd2U2FBaGgxaU0zRXlDRXRtdlpERFM4VnQ0UHNnLzAv
MzEzOTMwMmUzMTM3MzEyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+q0swDQYJKoZIhvcNAQELBQADggEBAARpXagA
0Jfa7DSUKUCFZ/aeuco28PUkv377UptAwiQdafspMe+rwOC76kkXrgFd+qJVX6Gd
tNwByegFBlDHjsJXWDvDdPMQNg1VAW4d+JlEcvG0d3OffEIKVGqM8VT6EQKbcd7l
1RJZ79lEIXZTxRmi0Ubknip7Y06WgnzlsKUokewP8/lhYO8zs1YKpBCx3w7EHvCA
iuubK/HsDNkrrHdyjLanwbOcwN4R8WiiTNfx5MILiMOZm4OND3POfoxcKTlBklxd
GIPH91aazWHtItTxKqt+e8dEGtR5pe2V3LHvEox7pctmzadp/Q6WvArdm03PYTNt
rGJ3HaIItrHWCkY=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:10 2025 by rpki-client