Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3234203d3e203233373634.roa
File:                     3133312e3232312e38302e302f32322d3234203d3e203233373634.roa (raw, json)
Hash identifier:          sMSkIA1IXfuJay+AdMGQSQhtTEYoPqyivLcnsCDlPag=
Subject key identifier:   1B:C3:E6:1E:66:30:8B:76:A1:D7:3A:7F:A7:14:58:CB:75:BA:27:25
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       3F534364E968F51E181FDCB55CA9A8ACA3C5E12C
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3234203d3e203233373634.roa
Signing time:             Fri 25 Oct 2024 19:26:14 +0000
ROA not before:           Fri 25 Oct 2024 19:21:14 +0000
ROA not after:            Fri 24 Oct 2025 19:26:14 +0000
asID:                     23764
IP address blocks:        131.221.80.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 20 Nov 2024 18:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:53:43:64:e9:68:f5:1e:18:1f:dc:b5:5c:a9:a8:ac:a3:c5:e1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Oct 25 19:21:14 2024 GMT
            Not After : Oct 24 19:26:14 2025 GMT
        Subject: CN=1BC3E61E66308B76A1D73A7FA71458CB75BA2725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:ca:bc:20:d1:c2:93:a8:68:63:b4:51:31:
                    bc:08:52:33:d3:34:02:3f:c1:73:ba:fc:4a:db:8b:
                    9a:d5:70:e5:c7:25:a1:af:77:d0:8a:ba:21:61:ea:
                    da:d1:c8:ac:bd:af:58:c8:c3:a2:1e:d6:fb:fb:36:
                    8b:7e:e5:50:de:6f:4b:05:84:c6:16:4c:03:68:e1:
                    d9:57:02:58:5c:37:67:15:c5:0f:f0:ca:39:cc:85:
                    e1:d0:b4:66:cb:19:70:cc:09:65:90:89:aa:a7:d8:
                    a4:59:ba:70:99:5e:a5:d4:f5:2a:91:16:56:f2:20:
                    18:42:4a:d4:ee:60:dc:31:b0:85:0a:b8:e2:d3:a5:
                    cf:8b:db:4a:a8:3b:c2:df:43:8d:98:a3:26:35:2f:
                    cd:04:45:58:a2:5b:7e:0e:6e:f2:fa:f6:cc:2c:e2:
                    8d:04:b0:5f:2b:47:6b:f2:84:55:88:3f:6b:42:5c:
                    03:da:39:87:b2:f3:10:33:7a:8f:76:cb:8c:e6:e2:
                    b4:e7:8e:60:14:99:08:64:c7:ff:5b:2b:f1:af:53:
                    b2:79:e5:26:2d:01:9d:80:67:96:6f:64:b7:1c:63:
                    b9:45:6e:75:ac:c2:22:6c:1c:4a:73:fb:62:c5:21:
                    c5:03:56:78:38:d1:19:5c:9c:f8:89:f0:8b:0e:87:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:E6:1E:66:30:8B:76:A1:D7:3A:7F:A7:14:58:CB:75:BA:27:25
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38302e302f32322d3234203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:48:96:eb:19:8a:35:a0:9c:86:98:a2:bb:c2:75:97:98:c4:
         1f:3e:0c:d3:58:33:62:1a:d1:db:31:80:34:0d:28:bd:f9:44:
         90:c5:5d:72:c0:7e:72:d6:c8:7e:44:30:ef:cb:f1:53:fc:bc:
         ef:6b:59:8b:52:1d:c0:37:38:0b:b6:bc:cb:f8:fa:0d:84:63:
         cb:c5:f5:a9:04:54:48:55:66:de:98:c2:9e:08:ce:33:a2:7c:
         63:94:55:9a:de:30:ba:63:e7:51:46:38:0e:86:eb:a0:38:34:
         78:f5:03:de:5d:98:42:0f:83:54:23:80:10:55:05:ab:fe:5c:
         e3:9e:99:7b:98:7e:45:8b:03:c6:ef:7b:ba:be:74:be:b0:79:
         9d:d2:62:f7:8e:79:b6:d5:98:18:9b:ea:ed:47:47:d1:b5:7f:
         7d:a5:98:98:af:72:5c:ce:23:00:00:40:a2:57:32:67:81:eb:
         c7:31:50:fe:62:4e:47:4b:c2:f1:80:f3:91:61:8b:71:6f:55:
         e6:a5:5e:da:50:64:8e:69:59:ac:64:22:3d:74:96:9e:64:aa:
         18:d2:f6:3c:90:83:c2:03:21:0a:ef:c7:09:3b:3c:02:70:1b:
         73:9f:84:9a:f7:d0:83:96:f6:e0:c4:ca:23:bb:68:3e:33:fa:
         d0:8a:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:42:54 2025 by rpki-client