Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3233372e302f32342d3234203d3e20323632373733.roa
File:                     3138372e39352e3233372e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          b5NMy8PmEc90xw/54daZSK+Ba5Hen4Q8629M8KqMP8k=
Subject key identifier:   59:58:6B:68:B2:92:5B:D5:D7:1C:AB:C6:75:59:EB:03:47:15:2A:7A
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       27140460D0A9FD66DD2BCCBA7043144F60B35E17
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3233372e302f32342d3234203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:39:31 +0000
ROA not before:           Mon 09 Sep 2024 14:34:31 +0000
ROA not after:            Mon 08 Sep 2025 14:39:31 +0000
asID:                     262773
IP address blocks:        187.95.237.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 09 Sep 2024 15:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:14:04:60:d0:a9:fd:66:dd:2b:cc:ba:70:43:14:4f:60:b3:5e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:34:31 2024 GMT
            Not After : Sep  8 14:39:31 2025 GMT
        Subject: CN=59586B68B2925BD5D71CABC67559EB0347152A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:3f:df:e5:50:37:f0:af:36:8c:ae:f3:e3:
                    bc:64:18:d0:c8:78:67:ef:cd:de:c2:9c:c4:7b:8e:
                    9f:23:b1:51:4c:97:da:31:54:20:ae:96:66:93:70:
                    c9:2b:85:b6:06:bf:77:1d:cd:ca:2d:39:59:1b:f0:
                    08:5a:78:c4:9a:a6:31:2e:cd:ca:83:44:f8:41:37:
                    ca:e3:48:a8:2c:30:9b:12:a4:85:d7:f8:de:62:23:
                    3e:cf:c3:e7:a7:cc:d0:f6:d6:3e:4b:22:5b:11:1b:
                    bc:4a:51:9a:30:dd:b4:d4:12:51:d1:a5:37:c5:2f:
                    03:4f:75:f4:2f:5a:c9:23:9b:b2:74:c2:33:d7:99:
                    8a:72:19:c9:31:bc:cb:88:61:c8:64:93:43:82:1e:
                    71:01:fc:84:95:17:4f:b3:8f:b0:6e:d8:b4:28:48:
                    3b:39:01:3c:b3:fc:3b:84:ee:5c:0b:3f:c0:5b:67:
                    3f:3a:b4:40:00:e0:9a:0d:84:bd:72:42:5d:77:b4:
                    f2:fb:b5:03:56:ba:78:c7:44:fe:c2:40:45:28:42:
                    29:8c:d8:c3:bf:2c:c4:36:50:27:84:d7:7e:5f:af:
                    5e:b6:e3:17:9f:01:e7:42:36:8d:e6:7e:67:cb:ca:
                    56:a6:90:ba:54:26:34:ce:da:fc:35:98:72:bc:54:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:6B:68:B2:92:5B:D5:D7:1C:AB:C6:75:59:EB:03:47:15:2A:7A
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e39352e3233372e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:cd:2e:4f:92:c2:b2:4f:e8:f8:9a:44:ef:ce:bd:0f:32:
         b4:62:68:29:ca:93:9c:f8:db:bb:c7:47:b8:c4:1c:30:43:41:
         d4:30:cc:05:1e:26:e6:3b:83:48:5c:c8:18:8a:ce:02:4a:ee:
         da:54:28:b2:db:30:f0:54:82:ce:52:a0:a0:d0:07:96:11:6f:
         f4:2a:de:81:55:79:70:56:01:91:bc:9a:d2:e6:b3:1e:ef:75:
         54:0c:c2:8f:f9:c7:a9:94:ca:21:97:20:4a:44:e2:5b:c0:69:
         32:06:10:78:84:42:83:14:1b:a9:96:2f:d7:37:c6:56:29:77:
         e5:05:5e:37:32:4d:c6:6b:9e:9f:78:cc:81:25:61:f3:fa:2c:
         6f:73:43:ea:da:57:24:fa:e3:06:b1:18:a3:b2:96:c5:f2:33:
         2f:16:78:69:80:9e:1a:91:00:ae:fe:9f:e2:9f:d3:61:41:b1:
         05:18:3e:0a:df:7f:2b:07:c6:31:31:d3:b6:6a:e0:e7:21:08:
         1f:99:d2:40:c8:bc:7b:6c:35:17:7a:10:52:4d:59:5d:f1:5c:
         f3:ac:8d:53:10:42:2e:f5:10:2f:d9:8d:07:e6:0b:cf:59:59:
         f4:2f:96:80:8e:6d:73:ad:ff:c8:7c:54:ee:e5:02:42:6d:2e:
         15:a1:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:36 2025 by rpki-client