Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32312d3332203d3e203631373930.roa
File:                     3230302e32342e38302e302f32312d3332203d3e203631373930.roa (raw, json)
Hash identifier:          Xfyfi2dvx0l9c9cATkjdQQ1ELU3EVeGYsyeuXNZ1Ti8=
Subject key identifier:   AB:0A:53:D7:DE:7F:28:B5:98:E4:21:A3:FE:12:60:27:D8:EE:4F:70
Certificate issuer:       /CN=D45EE207E811FF7831A3054740F4FC376DE9C473
Certificate serial:       0F993F81274AD9D14851E3B52AF6A5C74AE6DF34
Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32312d3332203d3e203631373930.roa
Signing time:             Thu 28 Nov 2024 11:52:24 +0000
ROA not before:           Thu 28 Nov 2024 11:47:24 +0000
ROA not after:            Thu 27 Nov 2025 11:52:24 +0000
asID:                     61790
IP address blocks:        200.24.80.0/21 maxlen: 32
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 23:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:99:3f:81:27:4a:d9:d1:48:51:e3:b5:2a:f6:a5:c7:4a:e6:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473
        Validity
            Not Before: Nov 28 11:47:24 2024 GMT
            Not After : Nov 27 11:52:24 2025 GMT
        Subject: CN=AB0A53D7DE7F28B598E421A3FE126027D8EE4F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:22:9f:84:1b:aa:03:6b:6a:97:b1:4c:6d:
                    b3:63:44:a0:a9:a7:81:37:bc:4a:65:f4:38:43:e0:
                    83:8f:73:2f:57:2c:bb:9f:59:58:9a:5f:07:57:b7:
                    91:3d:75:fb:de:2d:6f:f2:cf:da:7d:ea:61:d7:d7:
                    c1:2e:c0:d1:ae:7f:ea:ba:8e:94:fa:13:ee:ae:21:
                    86:e8:78:f0:51:c8:48:25:08:f8:d8:c4:3c:37:75:
                    4c:f5:56:99:43:d5:a7:4e:fd:fc:a3:8d:86:65:82:
                    eb:7d:0e:bd:7b:6e:fe:d1:d5:33:24:c0:ea:7c:f8:
                    62:f8:87:d8:ea:b1:df:c2:c5:d3:f6:5c:62:ee:8c:
                    92:28:dc:8a:ec:da:46:fd:d6:05:ff:7e:7f:fd:8a:
                    d5:aa:e3:73:4f:07:4c:39:a1:f3:ae:8f:e3:16:e2:
                    3d:05:91:6c:a2:c9:c8:2f:15:5a:f6:93:f1:2f:d0:
                    50:1f:2c:8c:f4:1b:c3:0b:fb:ce:9c:38:13:fa:1a:
                    3a:e5:d2:a9:63:69:83:e3:26:ee:72:48:38:ca:34:
                    6f:81:b1:2a:37:5d:a2:b7:37:f1:aa:ef:81:50:7a:
                    55:c3:88:44:63:f4:c3:5f:46:dd:55:17:d6:13:40:
                    93:a4:dc:b0:f4:b4:af:e6:0b:42:d8:41:9a:e2:49:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:53:D7:DE:7F:28:B5:98:E4:21:A3:FE:12:60:27:D8:EE:4F:70
            X509v3 Authority Key Identifier:
                keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/3230302e32342e38302e302f32312d3332203d3e203631373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:17:bb:9d:d5:f9:bf:45:2a:8b:71:04:c6:18:a6:4c:ae:43:
         c8:f7:07:5e:9f:80:56:07:93:24:b6:83:a6:83:09:8b:a6:7d:
         05:37:e6:42:74:10:8d:b7:db:cb:f0:db:bc:f4:58:c4:e2:b7:
         4f:3b:ad:ba:9c:cf:b5:5b:55:f8:e8:53:35:b9:81:0d:1a:43:
         63:ea:7f:ec:c2:57:96:4d:23:97:45:55:ce:3f:30:ad:12:9a:
         2d:b6:82:cf:22:1c:3a:30:6e:da:1a:d2:b0:6f:f1:30:4f:08:
         b9:9f:d2:74:a5:22:b9:5c:ee:44:cd:c6:55:1e:1e:89:a5:13:
         ff:ab:48:56:72:5d:43:be:22:4c:46:ed:66:3c:35:0f:10:0d:
         53:cf:f7:c4:c3:eb:29:5e:b6:cd:9a:35:a1:06:d1:5d:27:2b:
         b0:3e:12:d8:77:82:bd:da:d5:b4:b5:ad:28:e5:01:35:87:a0:
         60:ec:7b:9b:1f:38:33:7c:7d:40:03:ec:fc:4c:e6:39:3b:30:
         e5:6f:ee:e9:70:23:7f:1b:dc:1a:91:dc:a7:08:d7:7b:49:53:
         a9:1d:39:6c:ad:7a:5c:65:b7:e6:36:31:f4:d6:94:38:0d:e8:
         4b:b9:27:f5:8a:5a:32:fe:7e:de:7a:db:e6:68:18:8e:a0:47:
         0a:a4:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 17:29:00 2025 by rpki-client