Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32332d3332203d3e20323633343530.roa
File:                     3137372e39312e3233322e302f32332d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          a0EoO1bqz6Qf4aoaedICUgbXX3suz7ZpMYdfeR+K9zc=
Subject key identifier:   1B:B4:74:DC:F4:2C:23:DA:63:35:2C:22:DD:45:AA:66:A1:D0:F4:EF
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       54213B816D185CF12C15C2F69A1939B8251C0F49
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32332d3332203d3e20323633343530.roa
Signing time:             Wed 05 Feb 2025 13:11:01 +0000
ROA not before:           Wed 05 Feb 2025 13:06:01 +0000
ROA not after:            Wed 04 Feb 2026 13:11:01 +0000
asID:                     263450
IP address blocks:        177.91.232.0/23 maxlen: 32
Validation:               Failed, certificate revoked on Wed 12 Feb 2025 16:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:3b:81:6d:18:5c:f1:2c:15:c2:f6:9a:19:39:b8:25:1c:0f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Feb  5 13:06:01 2025 GMT
            Not After : Feb  4 13:11:01 2026 GMT
        Subject: CN=1BB474DCF42C23DA63352C22DD45AA66A1D0F4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fb:bd:08:1e:5f:eb:ed:07:98:4c:8f:9b:3a:
                    9b:54:6c:3f:0e:82:f8:a1:9a:62:95:0c:39:fa:4b:
                    2b:34:96:09:c3:d9:67:13:20:f0:6f:b3:ea:c1:d1:
                    41:8a:3d:9e:7d:bf:75:c1:2b:ae:12:80:e5:d8:87:
                    64:e4:74:f1:61:1b:62:15:88:16:78:c4:84:a0:1f:
                    4e:ec:5d:be:5a:43:a6:62:a9:bc:b5:28:30:d9:84:
                    ec:7c:df:7c:8c:c3:80:10:1e:0d:e4:87:24:8d:86:
                    3a:ee:d4:a7:8c:ad:79:53:53:ef:0a:e7:bc:0e:7b:
                    a5:c7:f1:a8:f0:06:93:a7:4b:47:f0:fd:1b:c2:97:
                    38:0e:14:06:6e:75:38:60:80:97:67:7c:84:b1:da:
                    7f:80:df:c7:c7:05:99:59:87:00:83:b1:39:d0:4b:
                    66:4d:18:49:8d:0f:4f:38:8b:40:76:15:69:92:f1:
                    a4:c3:47:bb:68:d0:37:28:24:30:6c:65:9a:76:55:
                    fc:bb:12:b4:dd:87:14:87:57:1c:fc:fe:6e:ec:68:
                    fa:dc:4b:a4:f6:5d:03:c5:fb:d8:82:2b:3d:cb:23:
                    46:15:fb:1e:de:6a:43:99:4d:a5:b8:d9:34:49:fa:
                    b6:e8:ba:6c:ff:4e:c3:17:0e:62:b1:22:68:19:07:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:74:DC:F4:2C:23:DA:63:35:2C:22:DD:45:AA:66:A1:D0:F4:EF
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233322e302f32332d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:4e:de:f3:ea:26:07:70:24:9e:c2:dd:97:e6:b7:20:f5:
         26:cd:08:63:cc:7d:e9:ab:5d:31:d4:45:04:20:71:08:56:36:
         04:7d:1f:8a:18:13:f9:e4:33:6c:c9:52:0a:89:c8:c7:8d:ee:
         da:4c:db:92:21:45:7b:77:ea:04:d0:72:50:81:9d:05:4e:1a:
         ec:c0:ec:fc:c0:13:ff:ad:dc:0e:12:a5:41:4c:c8:f6:89:fd:
         0b:4e:9f:1d:e3:e3:b8:0e:7c:3d:86:70:7b:34:28:f9:bf:c4:
         86:1a:5c:96:1b:d7:1e:11:88:36:0d:95:4f:73:e0:54:b8:3a:
         4e:ea:71:c1:72:fb:fa:5f:33:d5:9a:6f:2b:f0:00:c4:3b:6d:
         e0:9f:7f:d6:9a:e0:93:64:bc:8c:d1:76:e8:fc:97:4c:67:82:
         81:56:6a:b3:7d:1e:53:45:5c:18:32:18:8d:a6:ea:c9:a2:93:
         ce:b3:49:f4:6d:29:0a:6d:04:2b:06:66:38:bd:1d:83:ce:63:
         c3:46:cb:a0:6b:c0:3a:11:94:8e:fa:bc:7f:3e:ca:50:65:52:
         a0:05:fd:ac:99:be:84:65:c5:a0:91:9e:45:ad:c6:c6:fc:1f:
         d8:e2:61:06:03:70:91:2a:73:b6:d2:a3:68:0d:63:fe:1a:bd:
         91:41:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:25:17 2025 by rpki-client