Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233332e302f32342d3234203d3e20323730363038.roa
File:                     3138362e3231392e3233332e302f32342d3234203d3e20323730363038.roa (raw, json)
Hash identifier:          F2Kjilp8EJMT/H4vvVpFG0qps50p8k90uehFvh9gSjY=
Subject key identifier:   B2:16:A3:DD:B0:C1:4C:41:A2:87:0D:00:6A:50:3F:CE:E3:01:77:AA
Certificate issuer:       /CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
Certificate serial:       11D7FC424301E90CBB0324870D280381A839E79E
Authority key identifier: 60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233332e302f32342d3234203d3e20323730363038.roa
Signing time:             Fri 21 Feb 2025 13:35:43 +0000
ROA not before:           Fri 21 Feb 2025 13:30:43 +0000
ROA not after:            Fri 20 Feb 2026 13:35:43 +0000
asID:                     270608
IP address blocks:        186.219.233.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 25 Feb 2025 19:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d7:fc:42:43:01:e9:0c:bb:03:24:87:0d:28:03:81:a8:39:e7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299
        Validity
            Not Before: Feb 21 13:30:43 2025 GMT
            Not After : Feb 20 13:35:43 2026 GMT
        Subject: CN=B216A3DDB0C14C41A2870D006A503FCEE30177AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:f5:a5:7b:9f:48:02:1c:00:88:76:52:d3:
                    86:50:2b:f7:d7:25:97:f2:2e:a5:0a:74:26:5a:25:
                    31:85:28:d3:4a:26:95:ad:1f:5d:7d:f3:5f:9f:9e:
                    1e:d0:e0:90:ee:43:9f:ec:a7:0f:54:98:c4:c7:94:
                    51:c0:98:00:81:ad:0a:65:d6:2d:ad:3f:71:19:fc:
                    3c:c3:d3:23:5d:f1:85:ce:d9:15:1a:fb:50:2b:7a:
                    0d:b5:af:ce:8f:56:e5:8b:13:7c:ae:70:a3:67:6a:
                    94:64:f3:8e:63:ef:96:51:18:88:0f:e8:bd:73:02:
                    c0:5c:9f:7b:7a:b8:b6:b4:82:a3:5a:45:08:98:19:
                    70:11:69:75:82:cc:07:d7:4a:4d:f4:e5:6f:6f:d4:
                    f0:8a:bb:c9:10:39:16:56:49:99:6e:19:6b:30:64:
                    ec:04:dd:ea:4a:a5:1b:1f:f3:ab:12:64:8c:e3:cf:
                    6a:78:ad:99:de:4d:af:7d:c5:f9:76:d2:ca:27:0e:
                    29:91:06:0b:65:91:5d:b8:9c:ba:bb:c0:2c:7a:be:
                    fd:8b:ca:e3:11:86:07:e0:ea:70:ac:6d:1f:67:19:
                    67:10:eb:10:f7:96:cd:4c:86:be:de:7f:79:e0:71:
                    92:70:fe:ac:d0:b5:0b:b6:0d:72:c6:08:b6:99:b0:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:A3:DD:B0:C1:4C:41:A2:87:0D:00:6A:50:3F:CE:E3:01:77:AA
            X509v3 Authority Key Identifier:
                keyid:60:3E:D9:BF:51:F8:9C:5F:08:53:E2:A3:C5:EA:8B:B0:92:E8:E2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/603ED9BF51F89C5F0853E2A3C5EA8BB092E8E299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4udLC2h9kboUkfQPHhGo1Bpxvb2F4h7UpydE8e1vPV6/0/3138362e3231392e3233332e302f32342d3234203d3e20323730363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:39:00:65:f7:8f:cc:1d:be:45:33:ed:c1:32:8a:b7:7f:d6:
         46:86:e2:87:9c:a2:53:2a:73:ec:d4:31:8b:dd:6f:87:b7:79:
         8b:b4:71:bf:90:5d:5a:c1:7e:08:21:90:9d:08:02:44:63:e8:
         1e:f6:cb:be:17:8c:31:a9:2b:4e:96:20:44:33:8a:84:da:0d:
         4f:1c:b9:5b:00:e5:8e:71:61:93:45:27:cf:75:ef:59:56:ca:
         cf:cf:02:50:3f:22:26:30:a7:6b:61:9b:09:d8:78:76:73:36:
         c4:1a:d5:e1:11:dc:b5:56:d7:6e:78:49:e5:49:46:13:d3:0e:
         06:6a:3d:5f:86:78:00:1e:c3:e4:28:9a:b9:cd:82:01:6a:a3:
         8e:f3:b4:6e:94:dd:00:13:8a:ba:75:67:c8:99:ab:4e:7d:18:
         83:8e:ad:f5:6a:70:b3:fa:55:18:63:b4:5f:cf:5c:e0:75:39:
         2b:9f:ba:f4:54:01:22:ed:95:95:5a:93:68:ab:63:9c:dc:65:
         f2:1d:5a:81:e3:48:8a:e0:90:6c:c0:16:ef:44:c0:11:e0:35:
         e6:90:54:ed:2e:a0:a7:31:2d:93:5c:68:a5:eb:71:2d:ba:40:
         4f:49:77:fa:dd:71:b9:ba:f7:3f:34:93:c0:75:0e:10:4c:1e:
         71:17:53:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:11:24 2025 by rpki-client