Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33392e302f32342d3234203d3e20323633313531.roa
File:                     3137302e3233392e33392e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          pLmUS5DE28z2amJmOs5caJ4aUFJlIXn63QIq5NyfS08=
Subject key identifier:   4A:55:B6:45:85:50:39:F3:D0:3E:FC:C3:71:C4:D9:6F:2B:5C:23:37
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       45EA13DADC550B544E26520C7589F6C5CA43DC98
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33392e302f32342d3234203d3e20323633313531.roa
Signing time:             Mon 10 Mar 2025 15:22:22 +0000
ROA not before:           Mon 10 Mar 2025 15:17:22 +0000
ROA not after:            Mon 09 Mar 2026 15:22:22 +0000
asID:                     263151
IP address blocks:        170.239.39.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ea:13:da:dc:55:0b:54:4e:26:52:0c:75:89:f6:c5:ca:43:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Mar 10 15:17:22 2025 GMT
            Not After : Mar  9 15:22:22 2026 GMT
        Subject: CN=4A55B645855039F3D03EFCC371C4D96F2B5C2337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:0c:d6:cc:83:d6:b9:6d:45:24:03:44:93:
                    50:b6:65:c9:75:ee:a3:2c:86:83:71:92:10:f9:6d:
                    56:d2:a3:5f:34:e4:22:d2:94:bf:6e:b6:2e:4a:53:
                    aa:9d:3c:27:03:f3:d1:3a:be:75:d0:4b:1e:c0:04:
                    2b:e4:33:f7:bf:e7:ce:a4:26:29:7a:a8:9e:39:e0:
                    d7:eb:7a:2e:f3:11:0e:12:bc:bf:5a:be:61:cf:94:
                    8d:4a:5f:e5:79:16:53:a7:dd:63:6c:3f:f0:69:a9:
                    b5:10:c6:94:58:3d:8d:c6:65:89:32:fe:0b:27:02:
                    35:e9:15:8b:7f:78:74:6a:a0:73:e9:7b:ec:ec:d2:
                    81:1d:fd:c6:6e:16:b1:09:28:13:bb:1c:73:e7:e3:
                    2a:b7:49:ea:b8:29:1a:1e:91:8d:7e:d7:d9:0a:39:
                    af:bf:2b:cb:50:64:12:a0:d1:e3:23:6d:ef:73:af:
                    e7:ab:67:2d:25:4a:a9:e8:36:c2:ff:c7:c2:8f:6c:
                    4d:32:eb:99:30:8d:76:b7:31:bb:e2:e3:5c:3f:9c:
                    07:a5:5a:94:a6:38:56:52:ae:f9:c9:a0:06:ee:61:
                    74:56:ba:32:c6:b3:ac:24:41:da:1f:88:83:1b:35:
                    6a:62:3c:b5:d5:73:95:fe:39:67:ca:01:2a:53:2f:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:B6:45:85:50:39:F3:D0:3E:FC:C3:71:C4:D9:6F:2B:5C:23:37
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137302e3233392e33392e302f32342d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:c8:a7:fb:48:4e:e4:95:99:ba:e5:de:bd:47:b5:53:25:08:
         91:47:10:99:f5:43:56:85:59:3b:3d:83:57:c5:ed:ef:66:1e:
         93:22:e2:0d:de:f3:7b:52:04:c2:98:a4:65:68:31:72:d5:e6:
         70:ed:dd:0f:7c:61:55:fd:b1:10:4f:67:fe:c1:74:11:e7:91:
         89:3c:78:71:85:9c:b0:89:a7:3e:af:7a:0b:18:f8:f3:04:83:
         4b:bd:1b:67:f9:17:f2:c0:24:7e:e6:bf:a1:bf:4d:c2:be:34:
         fc:ad:9d:df:b0:e5:fa:8d:f5:45:19:c3:a3:ba:c8:93:13:d2:
         28:cc:ed:5c:70:fc:8f:21:f7:13:7e:de:f4:54:3e:1a:7e:d6:
         fa:96:5c:4e:19:10:43:26:be:7d:ba:dc:02:10:e9:c0:bd:a1:
         18:6e:a1:c1:43:c9:a2:ea:8f:a5:18:7f:2e:8b:d4:f1:d8:9b:
         a1:6d:73:82:7e:d2:1c:76:fd:27:b2:fe:4a:ee:a0:59:36:f7:
         eb:65:3a:ed:22:d7:75:78:fd:71:33:51:12:1b:48:88:be:9e:
         13:34:79:a4:23:cc:b4:5d:e4:f0:65:f0:4d:a7:fc:72:12:18:
         ee:3a:e9:a7:93:73:74:2c:04:3e:fd:dc:b1:b4:56:d9:f5:ca:
         e3:9c:0a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:56:41 2025 by rpki-client