Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3233203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32322d3233203d3e20323633353138.roa (raw, json)
Hash identifier:          KbYdIJcNNl2Xzb7IGmobrfDxmbF9f60xL5Fbg+4GWlk=
Subject key identifier:   44:B2:C4:A2:77:CE:D8:C1:40:85:DC:86:B3:61:B1:00:ED:5F:1F:4F
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       524DE44EA23E4F68213ADB84EF4EF182568412FD
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3233203d3e20323633353138.roa
Signing time:             Thu 23 Jan 2025 20:48:42 +0000
ROA not before:           Thu 23 Jan 2025 20:43:42 +0000
ROA not after:            Thu 22 Jan 2026 20:48:42 +0000
asID:                     263518
IP address blocks:        168.197.84.0/22 maxlen: 23
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 17:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:e4:4e:a2:3e:4f:68:21:3a:db:84:ef:4e:f1:82:56:84:12:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Jan 23 20:43:42 2025 GMT
            Not After : Jan 22 20:48:42 2026 GMT
        Subject: CN=44B2C4A277CED8C14085DC86B361B100ED5F1F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b0:5b:96:8a:70:01:4e:51:a3:70:56:f8:74:
                    f3:b7:2e:91:e4:84:ec:f6:d7:8d:66:10:0b:ba:bb:
                    1c:5e:7a:4c:ab:f0:ce:70:c9:30:f8:3f:c4:20:b4:
                    85:e7:71:7d:de:0d:63:78:12:a5:34:ef:14:5f:de:
                    ed:6b:9c:c0:7a:5f:d8:9f:50:cd:0a:91:01:40:8c:
                    86:6c:5d:c8:74:e8:73:f8:02:f7:62:13:9d:57:d6:
                    3d:a6:00:e2:30:3e:5a:f4:e0:42:0e:5d:58:2d:ab:
                    59:1e:ca:d3:6e:a3:a8:fd:26:7d:1d:0f:29:e9:7b:
                    2f:4d:f7:aa:a6:f3:1b:66:dd:93:51:35:8f:76:9c:
                    15:95:b7:f7:79:4e:89:2f:79:96:e0:d2:3f:2b:bf:
                    6b:c2:60:b4:03:c1:85:bc:d3:9a:e9:4e:4b:a0:0a:
                    66:2a:9b:75:b1:e6:ee:37:1c:c5:70:4f:a9:a6:33:
                    50:33:4f:d2:17:be:80:14:8f:8b:69:d9:89:87:2b:
                    fa:6d:9a:67:ae:60:6e:2d:4f:4a:a8:78:a2:27:14:
                    ae:98:2f:79:14:29:73:6b:48:66:bf:1f:99:50:2c:
                    f3:25:39:ea:83:6a:d5:a1:ee:65:6a:5b:5b:20:02:
                    23:88:f1:86:e7:c4:31:73:d2:f4:15:a5:17:bb:06:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:C4:A2:77:CE:D8:C1:40:85:DC:86:B3:61:B1:00:ED:5F:1F:4F
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32322d3233203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:53:2e:1c:70:fc:ab:91:62:75:42:9a:2e:40:a7:b8:65:71:
         98:f0:24:12:b3:9a:ee:82:0a:be:1e:10:d9:7f:14:a4:f0:37:
         31:93:6c:2d:2b:e3:50:eb:83:73:78:f7:48:88:4a:01:58:e7:
         45:14:5c:28:ab:fd:0d:17:8c:7a:6b:0d:ac:55:30:94:ca:74:
         5e:4d:fa:d5:d9:65:29:71:07:46:aa:40:38:3e:35:04:a6:b2:
         88:b4:93:ed:c7:86:02:bb:45:cf:c5:b0:62:05:21:3b:83:14:
         a1:53:ca:01:60:e9:7b:80:76:04:1b:30:07:56:3f:c6:d0:cd:
         79:bc:9f:41:ab:9c:f1:da:ea:28:60:24:65:23:6b:76:89:c9:
         db:7b:9b:11:a9:05:61:cd:b2:e2:9e:ef:36:ce:73:c9:bf:5f:
         8c:2e:f4:5a:48:26:0f:1d:07:29:32:a5:63:65:f8:4d:75:a0:
         fb:e3:e5:6d:b0:e2:f8:e2:ab:47:44:b2:90:82:44:dc:ee:97:
         74:e7:e3:a3:df:18:40:90:e7:63:7f:55:1e:b0:2e:70:2c:0d:
         7d:5b:be:0d:18:12:7f:8a:f8:4e:96:e9:ed:5e:91:a8:01:f9:
         55:07:7b:e7:bf:08:b3:6f:f5:53:17:15:69:63:06:e1:9e:ef:
         cd:9d:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:50 2025 by rpki-client