Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3138342e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          u55gOehpErPLP5+e7+u71pbHRk90Dk+UDQXFUTlttcI=
Subject key identifier:   26:B7:26:8A:62:49:76:61:C0:19:9A:78:D6:96:FB:EC:E1:F4:67:17
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       293393696EA71967EB2715B33ED5C91153CC2428
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:00 +0000
ROA not before:           Fri 07 Mar 2025 14:36:00 +0000
ROA not after:            Fri 06 Mar 2026 14:41:00 +0000
asID:                     52758
IP address blocks:        177.38.184.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 18:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:33:93:69:6e:a7:19:67:eb:27:15:b3:3e:d5:c9:11:53:cc:24:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:00 2025 GMT
            Not After : Mar  6 14:41:00 2026 GMT
        Subject: CN=26B7268A62497661C0199A78D696FBECE1F46717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:60:a5:72:3c:b7:90:a7:7f:5c:7e:6e:69:
                    72:e2:60:c3:29:90:82:31:25:f7:b8:6f:51:21:eb:
                    6b:ea:1e:15:c9:39:46:03:49:0c:2c:2e:29:5e:5b:
                    a8:73:5d:e1:97:5e:c2:03:d5:0e:c3:62:f0:53:97:
                    ff:6e:8f:4c:74:25:d7:61:84:27:1c:f1:2d:ad:5b:
                    69:2a:06:df:7b:fd:94:3e:a8:cc:92:ac:48:f9:c3:
                    7b:dc:be:44:c6:8b:1b:c8:42:c4:9f:72:19:4a:9c:
                    5b:1e:0e:6e:63:2e:6d:41:9e:77:49:1b:df:06:26:
                    42:79:d3:e1:45:c2:02:a7:3c:ca:7f:98:58:61:61:
                    34:e2:7a:1b:99:ea:10:f3:91:c7:6f:c7:a8:68:69:
                    87:2e:b8:b1:0b:12:5f:24:b5:7d:6a:ae:09:1f:2e:
                    c3:3c:41:cd:e2:95:41:fa:ba:0f:6b:48:ca:41:77:
                    df:ca:5a:5d:0e:2c:eb:15:a6:78:f2:3a:3e:5e:8f:
                    38:32:44:d5:aa:eb:b9:b6:bb:8f:d6:5a:a7:c3:8c:
                    91:88:11:b8:11:68:3e:53:e6:19:76:51:80:d1:bd:
                    e5:a8:16:cf:2f:3d:ab:39:fb:83:b0:25:49:2b:20:
                    43:08:27:5a:65:1f:85:59:d6:91:82:75:d3:4a:27:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B7:26:8A:62:49:76:61:C0:19:9A:78:D6:96:FB:EC:E1:F4:67:17
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:0f:5c:dc:8e:1c:37:66:19:3b:eb:0c:f8:f4:41:62:dd:be:
         ab:ff:ac:29:80:bf:0f:e4:8d:3a:97:c6:4c:9d:30:2d:af:12:
         89:ee:76:d1:76:ca:89:2c:5f:f7:68:7a:d3:4c:4d:98:71:7e:
         d2:96:86:89:f4:f8:66:fa:0d:46:37:1a:cd:eb:a5:b6:f8:47:
         f0:7b:04:68:06:06:ae:59:08:74:47:69:16:5d:c0:fd:22:9b:
         a5:4e:d9:fb:4a:21:56:45:1d:68:36:aa:c6:64:0d:c1:5a:72:
         b1:c1:30:57:11:ef:01:27:bf:36:a8:9f:d0:0a:46:11:01:9f:
         fd:39:98:17:8b:4a:40:c0:d0:e1:f0:13:96:30:de:fb:47:c1:
         b7:8e:31:18:8f:9d:38:34:45:be:0f:ab:da:7c:d2:dc:ce:e6:
         4f:f5:15:2c:cc:b6:55:57:62:2f:9a:01:89:8c:77:1e:4e:6a:
         cc:9e:cf:3a:d2:eb:77:c2:60:0f:71:f3:ae:0c:80:fb:4c:f2:
         ad:a4:27:da:50:a0:4c:94:b0:2a:f9:1d:f2:cf:d7:5b:be:1a:
         5a:89:72:e5:7d:1e:70:be:40:dc:20:84:83:6e:f6:b5:cb:db:
         50:6e:15:21:ca:23:4e:71:7a:ee:98:99:30:a0:68:63:5b:76:
         99:53:c4:58
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKTOTaW6nGWfrJxWzPtXJEVPMJCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNTAzMDcxNDM2MDBaFw0yNjAzMDYxNDQxMDBaMDMxMTAvBgNV
BAMTKDI2QjcyNjhBNjI0OTc2NjFDMDE5OUE3OEQ2OTZGQkVDRTFGNDY3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz2Clcjy3kKd/XH5uaXLiYMMp
kIIxJfe4b1Eh62vqHhXJOUYDSQwsLileW6hzXeGXXsID1Q7DYvBTl/9uj0x0Jddh
hCcc8S2tW2kqBt97/ZQ+qMySrEj5w3vcvkTGixvIQsSfchlKnFseDm5jLm1BnndJ
G98GJkJ50+FFwgKnPMp/mFhhYTTiehuZ6hDzkcdvx6hoaYcuuLELEl8ktX1qrgkf
LsM8Qc3ilUH6ug9rSMpBd9/KWl0OLOsVpnjyOj5ejzgyRNWq67m2u4/WWqfDjJGI
EbgRaD5T5hl2UYDRveWoFs8vPas5+4OwJUkrIEMIJ1plH4VZ1pGCddNKJ1QLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJrcmimJJdmHAGZp41pb77OH0ZxcwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzEzNzM3MmUzMzM4MmUzMTM4MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSa4MA0GCSqGSIb3DQEBCwUAA4IBAQCuD1zcjhw3
Zhk76wz49EFi3b6r/6wpgL8P5I06l8ZMnTAtrxKJ7nbRdsqJLF/3aHrTTE2YcX7S
loaJ9Phm+g1GNxrN66W2+EfwewRoBgauWQh0R2kWXcD9IpulTtn7SiFWRR1oNqrG
ZA3BWnKxwTBXEe8BJ782qJ/QCkYRAZ/9OZgXi0pAwNDh8BOWMN77R8G3jjEYj504
NEW+D6vafNLczuZP9RUszLZVV2IvmgGJjHceTmrMns860ut3wmAPcfOuDID7TPKt
pCfaUKBMlLAq+R3yz9dbvhpaiXLlfR5wvkDcIISDbva1y9tQbhUhyiNOcXrumJkw
oGhjW3aZU8RY
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:32:23 2025 by rpki-client