Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          38Rx9Ol1s3N8tgnx51jrE8mQysf3I9O4KuREVF92AQQ=
Subject key identifier:   7F:66:71:D9:71:39:80:B6:08:E4:E6:F0:D9:71:42:F1:EC:31:F6:6A
Certificate issuer:       /CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
Certificate serial:       67821B68EE3BBA5041D6BF572DAB1C75128B7B2A
Authority key identifier: C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
Signing time:             Fri 01 Nov 2024 15:12:02 +0000
ROA not before:           Fri 01 Nov 2024 15:07:02 +0000
ROA not after:            Fri 31 Oct 2025 15:12:02 +0000
asID:                     265419
IP address blocks:        168.195.20.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 19:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:82:1b:68:ee:3b:ba:50:41:d6:bf:57:2d:ab:1c:75:12:8b:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3D3A336BF4C81420EDC1D4CB494D84D3714E13A
        Validity
            Not Before: Nov  1 15:07:02 2024 GMT
            Not After : Oct 31 15:12:02 2025 GMT
        Subject: CN=7F6671D9713980B608E4E6F0D97142F1EC31F66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:78:7b:2e:62:51:07:37:98:49:fe:be:05:
                    33:f5:2f:c2:cc:f0:33:19:c4:83:de:aa:5f:bd:d7:
                    e2:13:31:c6:f8:4a:e8:c6:21:34:81:a7:e7:df:ae:
                    4a:7a:f3:1e:e0:ba:e3:9c:8f:d2:0b:3d:52:54:1b:
                    33:4f:f2:24:a7:e0:fc:8b:6f:e5:4e:93:99:65:fe:
                    a0:fd:37:96:1f:b7:aa:b2:f4:0e:23:98:33:1a:33:
                    78:8f:68:15:e3:bd:32:30:47:17:ee:9a:72:2e:5a:
                    70:fb:1f:20:89:c8:01:68:28:f5:51:be:48:90:93:
                    34:82:f5:98:47:54:6d:65:a8:23:9f:bd:a0:47:ff:
                    9c:2c:7c:67:3f:41:87:c8:0b:53:a6:dc:47:2a:29:
                    48:b8:55:ce:7b:b7:fd:36:f0:a4:ce:56:15:b1:10:
                    6a:2a:2d:70:5a:dd:90:4f:dc:51:b7:b2:87:b6:90:
                    3a:96:76:7b:46:e1:b0:e4:71:74:da:84:f0:ce:69:
                    45:2e:71:7a:a0:fc:ef:b8:c6:1c:17:22:ce:0c:7a:
                    c6:bb:75:53:3a:c5:6e:70:85:61:19:f4:e4:5d:2d:
                    93:41:5b:5a:19:f4:b9:7a:53:c0:36:7a:db:e9:27:
                    8c:2d:cb:3a:d8:8f:c6:b4:c9:6a:34:42:74:7f:ef:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:66:71:D9:71:39:80:B6:08:E4:E6:F0:D9:71:42:F1:EC:31:F6:6A
            X509v3 Authority Key Identifier:
                keyid:C3:D3:A3:36:BF:4C:81:42:0E:DC:1D:4C:B4:94:D8:4D:37:14:E1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3D3A336BF4C81420EDC1D4CB494D84D3714E13A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:78:82:81:5f:5e:20:ac:1e:db:c0:e9:3a:9a:9b:7b:d6:37:
         11:ae:ef:75:05:97:3f:4f:ad:55:79:bc:3a:de:c1:74:75:fb:
         ae:bf:ae:22:3a:39:60:96:6a:a4:41:6f:d2:7d:73:25:82:2f:
         3e:61:4d:b7:26:79:d0:dc:03:a6:b8:5b:44:d1:ed:51:39:f4:
         cf:a1:83:dc:c9:75:fb:e0:bc:a3:ed:c9:97:57:aa:1a:70:58:
         e3:2e:3e:bc:73:a1:f9:db:9d:43:89:e6:fd:e9:a1:ea:c6:60:
         e5:c2:8d:bd:00:fc:d5:4f:f6:37:fd:13:77:8c:8f:73:d9:fd:
         dc:e2:80:1b:04:3a:79:31:4b:e1:fd:34:68:ce:65:0f:5c:59:
         04:d3:94:7b:99:4c:60:fb:78:bd:32:77:5b:80:21:f7:7a:97:
         b9:b3:a1:6f:91:47:be:2e:4b:06:8e:1e:80:63:3a:88:8d:26:
         13:65:91:d3:80:25:ca:3c:07:95:8f:9a:fe:7f:a8:56:89:44:
         b3:d3:07:ba:2b:86:20:50:0a:98:83:19:0a:fe:14:6b:b5:9a:
         3a:33:9c:74:43:3f:ab:e8:31:0f:22:bc:c0:b5:84:1c:64:ce:
         e5:49:1d:fc:22:9b:f2:6f:95:6b:4c:59:5e:c4:bd:76:f2:56:
         36:83:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:57 2025 by rpki-client