Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3234203d3e20323633343530.roa
File:                     3137372e39312e3233322e302f32322d3234203d3e20323633343530.roa (raw, json)
Hash identifier:          5MTXZO2GkN/0tos4UQdhbwtxCbm+3V+5uqM5+wvkdVA=
Subject key identifier:   39:16:A6:9E:89:05:61:F4:B3:DB:09:94:7B:A6:E9:61:AA:3E:DE:2C
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       704561DE8893CA09B659529E341A57566FE472E3
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3234203d3e20323633343530.roa
Signing time:             Wed 05 Jun 2024 19:21:35 +0000
ROA not before:           Wed 05 Jun 2024 19:16:35 +0000
ROA not after:            Wed 04 Jun 2025 19:21:35 +0000
asID:                     263450
IP address blocks:        177.91.232.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 05 Feb 2025 13:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:61:de:88:93:ca:09:b6:59:52:9e:34:1a:57:56:6f:e4:72:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Jun  5 19:16:35 2024 GMT
            Not After : Jun  4 19:21:35 2025 GMT
        Subject: CN=3916A69E890561F4B3DB09947BA6E961AA3EDE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:ba:4c:51:3b:5a:38:63:dc:c6:65:e7:47:
                    61:3f:11:d5:57:0e:dd:f7:11:42:e7:67:05:e4:40:
                    ed:3d:78:fc:cf:60:d2:b7:a4:40:d4:04:14:bb:91:
                    1a:a4:69:2f:a4:66:a5:bd:6b:ac:a8:85:db:4b:4a:
                    4b:b8:df:4f:4d:46:7b:43:ed:83:35:da:47:2f:fc:
                    cd:d2:c4:f0:92:73:a8:14:4d:76:3f:cf:8a:9f:c9:
                    c5:45:cd:85:1a:63:3d:f4:21:fa:5a:d0:86:e9:96:
                    e7:49:8c:e5:a8:f7:26:d1:c5:e6:ad:f7:14:8c:87:
                    91:44:11:65:94:f6:f3:5f:4d:22:1a:9a:88:b0:85:
                    15:d7:43:c0:aa:e2:f6:b1:fb:5e:51:04:cd:65:ce:
                    db:85:e6:f5:7c:89:3f:7f:15:ca:b2:59:66:e9:24:
                    7d:0e:f8:0d:e4:9a:71:0b:6e:97:14:fc:af:7e:7c:
                    c7:38:b3:79:df:4e:bb:68:d3:a3:50:36:33:a6:37:
                    79:ed:7d:13:55:35:65:a8:61:3b:20:f0:06:9f:15:
                    5a:47:35:e6:a9:29:75:21:55:ea:a4:6f:c0:25:86:
                    96:09:a4:a5:4b:a0:8a:6f:2f:e0:94:9d:b4:60:86:
                    32:17:25:26:2b:d8:30:5e:8d:31:9d:39:fd:45:50:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:A6:9E:89:05:61:F4:B3:DB:09:94:7B:A6:E9:61:AA:3E:DE:2C
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32322d3234203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:ff:7f:40:a7:0b:f9:e5:1a:7e:4d:ed:99:44:2b:b4:ee:
         e3:ff:0f:82:47:2d:f1:e4:84:e6:c3:7d:ad:2e:a8:f5:85:03:
         70:bb:91:ff:76:6f:10:87:98:c1:35:45:ef:b8:15:53:f7:1f:
         5c:a7:45:c7:51:d4:1a:3a:bf:34:98:bd:3e:b1:94:5c:ac:a8:
         d5:ac:af:90:87:17:14:4e:ce:16:d9:b0:96:ed:de:8f:4d:56:
         5a:f8:83:d1:ce:0d:e7:83:04:bf:c6:f1:3a:54:79:8b:05:32:
         ef:b9:fe:2e:92:07:36:75:c9:d2:ee:68:23:b1:ac:ad:88:23:
         42:58:45:f8:c1:95:6e:56:8f:73:63:0e:a6:06:74:23:50:17:
         d8:5d:4f:2b:e9:3d:03:cf:a0:63:d4:6b:fb:b4:bd:65:61:b0:
         c6:5d:ed:28:7b:e6:b4:98:3d:13:fe:22:42:52:77:80:3c:e1:
         fb:46:c5:41:a4:84:1c:ce:e5:e9:e0:b8:84:19:da:b1:23:ae:
         cb:62:2b:63:d4:fa:a1:46:e6:a3:03:59:a5:38:52:93:b7:39:
         23:00:6d:67:07:6b:fd:95:4a:d7:31:6e:ea:a2:f4:e4:06:ff:
         b7:39:94:88:d5:8f:59:60:e7:50:d0:e4:52:6d:98:a5:19:f1:
         82:e7:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:23:27 2025 by rpki-client