Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3233203d3e20323633343530.roa
File:                     3137372e39312e3233342e302f32332d3233203d3e20323633343530.roa (raw, json)
Hash identifier:          2wRnkNGrPku5TbITs2mDX70BGlelNYI/e6GVaZE7Q5U=
Subject key identifier:   D3:A3:3D:84:4E:D7:80:39:AD:22:23:02:04:67:36:0B:D2:81:84:80
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       6A49134836C41D8C7EC404BC802371901A1574BD
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3233203d3e20323633343530.roa
Signing time:             Wed 24 Apr 2024 19:08:01 +0000
ROA not before:           Wed 24 Apr 2024 19:03:01 +0000
ROA not after:            Wed 23 Apr 2025 19:08:01 +0000
asID:                     263450
IP address blocks:        177.91.234.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:49:13:48:36:c4:1d:8c:7e:c4:04:bc:80:23:71:90:1a:15:74:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Apr 24 19:03:01 2024 GMT
            Not After : Apr 23 19:08:01 2025 GMT
        Subject: CN=D3A33D844ED78039AD2223020467360BD2818480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:78:18:7b:b6:82:9a:a4:62:43:4b:7e:e9:
                    1b:20:e4:57:fc:5c:2d:f9:ce:bb:43:f2:86:91:26:
                    b6:42:e5:fe:2c:c8:1a:5c:17:2d:d1:a3:35:d2:a5:
                    86:ba:d9:6d:7a:f2:20:59:a9:b5:c3:e9:f4:1a:c8:
                    21:8c:30:8f:45:13:9b:eb:53:85:af:1e:fa:d2:1c:
                    9c:91:cd:b3:f0:56:be:9f:ec:76:76:25:42:60:a7:
                    a0:08:24:1a:67:e4:cd:0c:d7:ed:56:3e:95:5f:69:
                    ae:88:6e:6c:da:10:cc:50:62:9e:6d:1e:d1:7e:e8:
                    89:f7:89:cc:c4:c3:33:f7:3d:df:8a:ba:0f:44:f0:
                    7e:1e:70:27:d3:c9:51:ef:03:aa:63:02:82:8f:00:
                    0e:14:49:bc:f2:fb:49:c2:c3:d9:4c:10:42:20:4d:
                    cc:c5:ce:2c:06:83:bc:27:f7:87:48:98:7f:36:a8:
                    e1:4c:23:6f:84:4f:9a:d1:63:29:8b:dd:93:8f:4f:
                    1d:81:34:5d:1e:73:1d:5b:97:31:0f:cd:e4:db:81:
                    3b:f5:ae:5d:b5:d0:17:77:d1:a7:6c:d1:4d:e8:9f:
                    0d:36:96:d6:be:0e:55:53:17:7b:1d:f5:55:76:1c:
                    ae:0c:3c:94:1e:6a:37:ab:73:bf:ee:24:d5:d3:ff:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:3D:84:4E:D7:80:39:AD:22:23:02:04:67:36:0B:D2:81:84:80
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3137372e39312e3233342e302f32332d3233203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:14:9b:99:84:a8:70:ea:24:26:00:62:ff:a1:22:3e:f4:6e:
         73:90:6c:c3:58:a9:29:ac:4b:1a:27:83:8f:8d:7c:7d:58:b1:
         a4:81:4f:e8:36:bd:ad:5c:47:0f:ff:e5:21:73:07:aa:3f:02:
         f4:91:2d:cb:fb:22:ae:b3:e9:f4:8c:0e:c7:a7:30:ea:f4:a8:
         8d:62:d2:34:2a:b4:1b:ab:b8:fa:c3:5d:a9:47:b0:0f:1d:b2:
         cb:af:af:ce:d3:09:79:5f:e7:41:63:94:7b:5b:c3:20:d7:8c:
         2b:91:e6:a7:68:73:b5:43:fc:ae:d3:3c:d0:a0:0b:8d:f8:ae:
         c6:4a:2f:9f:eb:76:61:91:97:f9:3c:be:2a:5b:78:3c:88:e2:
         2d:0f:a8:d3:f7:0c:f2:2e:38:98:c2:d8:b1:35:8a:b8:e9:c4:
         a5:88:90:8d:74:f6:fa:41:6f:9b:64:5e:b7:09:ee:f8:8d:d8:
         40:27:c9:e6:3f:c3:e4:b2:c3:14:3c:e7:83:2e:2f:a4:55:57:
         d6:6d:d9:65:9d:39:f9:ba:40:7d:46:2d:82:f5:64:ec:9d:67:
         70:6c:d3:3b:a0:e2:59:cf:4f:42:8a:19:10:e2:34:29:7c:9a:
         f4:e2:5c:2a:2e:ad:3b:02:42:9e:f2:7c:cf:10:ed:32:c1:bb:
         0b:c1:0d:b6
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUakkTSDbEHYx+xAS8gCNxkBoVdL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0
NjY1N0M3MTAeFw0yNDA0MjQxOTAzMDFaFw0yNTA0MjMxOTA4MDFaMDMxMTAvBgNV
BAMTKEQzQTMzRDg0NEVENzgwMzlBRDIyMjMwMjA0NjczNjBCRDI4MTg0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VHgYe7aCmqRiQ0t+6Rsg5Ff8
XC35zrtD8oaRJrZC5f4syBpcFy3RozXSpYa62W168iBZqbXD6fQayCGMMI9FE5vr
U4WvHvrSHJyRzbPwVr6f7HZ2JUJgp6AIJBpn5M0M1+1WPpVfaa6IbmzaEMxQYp5t
HtF+6In3iczEwzP3Pd+Kug9E8H4ecCfTyVHvA6pjAoKPAA4USbzy+0nCw9lMEEIg
TczFziwGg7wn94dImH82qOFMI2+ET5rRYymL3ZOPTx2BNF0ecx1blzEPzeTbgTv1
rl210Bd30ads0U3onw02lta+DlVTF3sd9VV2HK4MPJQeajerc7/uJNXT/6VZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU06M9hE7XgDmtIiMCBGc2C9KBhIAwHwYDVR0j
BBgwFoAUXoJwX/hXMkmE4Qh6r8zmvUZlfHEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD
LzAvNUU4MjcwNUZGODU3MzI0OTg0RTEwODdBQUZDQ0U2QkQ0NjY1N0M3MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RTgyNzA1RkY4NTczMjQ5ODRF
MTA4N0FBRkNDRTZCRDQ2NjU3QzcxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9a
Umk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVDLzAvMzEz
NzM3MmUzOTMxMmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzMz
NDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxW+owDQYJKoZIhvcNAQELBQADggEBABYUm5mEqHDq
JCYAYv+hIj70bnOQbMNYqSmsSxong4+NfH1YsaSBT+g2va1cRw//5SFzB6o/AvSR
Lcv7Iq6z6fSMDsenMOr0qI1i0jQqtBuruPrDXalHsA8dssuvr87TCXlf50FjlHtb
wyDXjCuR5qdoc7VD/K7TPNCgC434rsZKL5/rdmGRl/k8vipbeDyI4i0PqNP3DPIu
OJjC2LE1irjpxKWIkI109vpBb5tkXrcJ7viN2EAnyeY/w+SywxQ854MuL6RVV9Zt
2WWdOfm6QH1GLYL1ZOydZ3Bs0zug4lnPT0KKGRDiNCl8mvTiXCourTsCQp7yfM8Q
7TLBuwvBDbY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:28 2025 by rpki-client