Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa
File:                     3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          Utq1VUYH1EnoaODh/u1wNTnBjxa2Rr6ZTpfz5TkpDQ8=
Subject key identifier:   BE:E1:40:FC:A0:20:A4:F3:2D:6C:78:81:4E:9E:A8:15:EB:81:CE:7F
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       7533EB51FF15025686FC8B686355075D38B3616F
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa
Signing time:             Mon 10 Mar 2025 15:22:12 +0000
ROA not before:           Mon 10 Mar 2025 15:17:12 +0000
ROA not after:            Mon 09 Mar 2026 15:22:12 +0000
asID:                     263151
IP address blocks:        191.242.177.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 10 Mar 2025 15:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:33:eb:51:ff:15:02:56:86:fc:8b:68:63:55:07:5d:38:b3:61:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Mar 10 15:17:12 2025 GMT
            Not After : Mar  9 15:22:12 2026 GMT
        Subject: CN=BEE140FCA020A4F32D6C78814E9EA815EB81CE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2c:3f:a6:52:ca:d6:c0:b5:d3:c9:b9:c0:da:
                    d6:3b:77:e5:22:cf:d1:41:f9:99:3c:35:29:e2:bb:
                    38:a3:50:eb:9a:97:4a:e8:ba:88:c9:9d:b1:be:64:
                    a5:c9:c9:4c:86:be:bd:f3:81:6c:b4:ef:d7:5f:c8:
                    8e:62:86:a4:0c:0d:42:ca:ec:e4:b5:e6:f8:62:4d:
                    0d:28:42:90:a9:f3:e8:a7:a7:75:96:f7:ca:52:43:
                    45:9d:fd:4d:40:7e:00:7d:60:0d:4e:a1:19:11:20:
                    6d:ba:fa:46:6e:26:e4:97:4e:8b:9f:02:c0:92:0f:
                    34:78:a7:98:27:2e:47:94:87:5b:72:b3:5b:01:37:
                    e9:97:61:23:1c:4b:46:1b:8d:cb:f6:f6:bd:42:75:
                    57:93:41:95:69:ff:a3:38:b7:a3:57:7c:aa:b2:aa:
                    6e:df:b6:eb:da:1c:b2:84:5a:1a:b4:fd:bd:bf:06:
                    c8:55:fb:73:a3:7b:13:59:86:1d:d4:4b:9b:9d:7d:
                    b8:b9:82:cc:80:10:17:15:7f:10:09:cb:73:19:bb:
                    a3:d3:d8:07:d7:16:af:4d:7b:2d:82:3a:81:3f:ba:
                    84:e3:89:18:69:82:14:5d:b0:20:1e:19:4f:80:f5:
                    85:f3:13:84:d2:b5:d3:69:6d:65:fb:58:60:9b:32:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:40:FC:A0:20:A4:F3:2D:6C:78:81:4E:9E:A8:15:EB:81:CE:7F
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137372e302f32342d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:25:d6:34:63:4f:97:fd:c8:9f:36:05:14:d4:ce:d3:da:
         d9:04:d5:07:93:8d:10:3f:68:a1:71:c4:e9:3b:db:d4:5e:8e:
         86:37:7f:48:90:b6:86:a3:6e:3e:f6:92:90:ce:41:3e:a1:54:
         6c:35:51:c3:73:5d:10:cd:53:fd:6a:1c:3e:77:40:64:de:e9:
         22:8a:d8:d7:5e:9b:4f:32:2d:2b:08:15:35:08:96:5c:82:59:
         21:18:ad:90:6b:9f:16:e3:5e:f6:2e:24:13:d1:4e:f9:da:b6:
         40:3d:69:38:85:37:a3:42:4d:6a:32:fc:bc:9c:f3:0b:e4:51:
         27:56:b3:b9:85:07:7e:f8:6f:7b:c7:51:b4:9a:38:2f:cb:f5:
         e1:f8:0e:e8:5d:80:97:e3:f9:13:99:40:b8:34:d2:28:dd:27:
         67:8b:95:aa:19:d4:08:ee:92:fd:26:c2:70:73:47:68:f8:d0:
         43:0a:e9:31:56:01:55:b3:37:1c:7f:cf:40:8b:21:b6:5a:31:
         a0:e3:49:a6:79:91:65:da:aa:c9:80:62:43:b0:f6:25:e0:96:
         5a:de:0d:e9:53:07:d7:1a:24:41:0a:a6:d1:b0:96:07:0b:6e:
         ab:7c:cc:55:0b:02:e0:37:da:ef:21:26:5a:8a:12:19:d6:09:
         4e:b6:40:c7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdTPrUf8VAlaG/ItoY1UHXTizYW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBRDg3NjExRkREQzlDOTlCMjE1N0ZCQzUwMzQzMERF
ODc0NURCRDAeFw0yNTAzMTAxNTE3MTJaFw0yNjAzMDkxNTIyMTJaMDMxMTAvBgNV
BAMTKEJFRTE0MEZDQTAyMEE0RjMyRDZDNzg4MTRFOUVBODE1RUI4MUNFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLD+mUsrWwLXTybnA2tY7d+Ui
z9FB+Zk8NSniuzijUOual0rouojJnbG+ZKXJyUyGvr3zgWy079dfyI5ihqQMDULK
7OS15vhiTQ0oQpCp8+inp3WW98pSQ0Wd/U1AfgB9YA1OoRkRIG26+kZuJuSXTouf
AsCSDzR4p5gnLkeUh1tys1sBN+mXYSMcS0Ybjcv29r1CdVeTQZVp/6M4t6NXfKqy
qm7ftuvaHLKEWhq0/b2/BshV+3OjexNZhh3US5udfbi5gsyAEBcVfxAJy3MZu6PT
2AfXFq9Ney2COoE/uoTjiRhpghRdsCAeGU+A9YXzE4TStdNpbWX7WGCbMsjXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvuFA/KAgpPMtbHiBTp6oFeuBzn8wHwYDVR0j
BBgwFoAUiK2HYR/dycmbIVf7xQNDDeh0Xb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMC84OEFEODc2MTFGRERDOUM5OUIyMTU3RkJDNTAzNDMwREU4NzQ1REJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QUQ4NzYxMUZEREM5Qzk5
QjIxNTdGQkM1MDM0MzBERTg3NDVEQkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzAv
MzEzOTMxMmUzMjM0MzIyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/ysTANBgkqhkiG9w0BAQsFAAOCAQEAPgkl
1jRjT5f9yJ82BRTUztPa2QTVB5ONED9ooXHE6Tvb1F6Ohjd/SJC2hqNuPvaSkM5B
PqFUbDVRw3NdEM1T/WocPndAZN7pIorY116bTzItKwgVNQiWXIJZIRitkGufFuNe
9i4kE9FO+dq2QD1pOIU3o0JNajL8vJzzC+RRJ1azuYUHfvhve8dRtJo4L8v14fgO
6F2Al+P5E5lAuDTSKN0nZ4uVqhnUCO6S/SbCcHNHaPjQQwrpMVYBVbM3HH/PQIsh
tloxoONJpnmRZdqqyYBiQ7D2JeCWWt4N6VMH1xokQQqm0bCWBwtuq3zMVQsC4Dfa
7yEmWooSGdYJTrZAxw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:45:03 2025 by rpki-client