Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3233203d3e20323633393830.roa
File:                     3139312e33372e322e302f32332d3233203d3e20323633393830.roa (raw, json)
Hash identifier:          IJv0aY2Vc1GFYuxnQGWe5AfytEmCGwcpMEom6hbSTXo=
Subject key identifier:   5A:4F:DF:71:81:C6:D5:A8:D7:5C:5D:BA:17:39:EE:4D:30:F7:9E:FA
Certificate issuer:       /CN=B12447B85424C8CE3169B0E67CABACBC33124F16
Certificate serial:       4D5F5557B54E3FEEABB8B68B359C45A198062982
Authority key identifier: B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3233203d3e20323633393830.roa
Signing time:             Thu 16 Jan 2025 12:00:40 +0000
ROA not before:           Thu 16 Jan 2025 11:55:40 +0000
ROA not after:            Thu 15 Jan 2026 12:00:40 +0000
asID:                     263980
IP address blocks:        191.37.2.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 16 Jan 2025 12:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5f:55:57:b5:4e:3f:ee:ab:b8:b6:8b:35:9c:45:a1:98:06:29:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12447B85424C8CE3169B0E67CABACBC33124F16
        Validity
            Not Before: Jan 16 11:55:40 2025 GMT
            Not After : Jan 15 12:00:40 2026 GMT
        Subject: CN=5A4FDF7181C6D5A8D75C5DBA1739EE4D30F79EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:39:6b:df:45:82:b7:14:08:e0:f7:f5:1d:
                    cc:8d:dc:fe:d8:1f:81:95:30:cf:e6:fa:f7:bb:6f:
                    c9:0c:fd:21:b0:cf:1e:45:1d:70:89:92:67:7b:47:
                    3f:cc:4c:44:2a:f5:3d:c0:20:9d:4b:7a:4d:fe:e0:
                    e1:aa:09:00:06:ef:28:18:ee:b3:bd:d5:b6:79:0c:
                    8e:ef:11:84:e3:cb:0e:4f:b6:3b:ba:98:22:28:6b:
                    60:11:1f:60:11:5e:a2:23:0c:2f:49:d9:78:f3:8a:
                    ec:bf:b7:bd:da:f1:89:61:96:45:42:cf:97:87:60:
                    13:7c:21:32:db:87:f6:d1:f0:8c:21:8b:c2:4d:63:
                    4b:3e:78:d4:78:c0:7f:32:07:eb:f5:42:78:f5:72:
                    7b:f8:c8:4c:5b:14:ff:9e:ef:55:67:73:2f:32:83:
                    2d:79:a6:88:e6:2f:fa:6e:4f:a1:7f:06:f7:59:e5:
                    4a:31:2c:78:c8:7c:95:21:74:bc:b8:c6:3b:c1:cd:
                    4c:66:72:4f:37:22:db:44:7a:f4:93:46:ab:8c:ca:
                    a4:65:81:80:16:6c:d0:18:06:05:17:b5:56:86:26:
                    67:77:10:7e:2d:03:7a:6f:eb:ea:58:81:01:b7:28:
                    bd:35:39:58:b8:9b:03:4e:31:8b:a2:f7:7a:98:6c:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4F:DF:71:81:C6:D5:A8:D7:5C:5D:BA:17:39:EE:4D:30:F7:9E:FA
            X509v3 Authority Key Identifier:
                keyid:B1:24:47:B8:54:24:C8:CE:31:69:B0:E6:7C:AB:AC:BC:33:12:4F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/B12447B85424C8CE3169B0E67CABACBC33124F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12447B85424C8CE3169B0E67CABACBC33124F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e322e302f32332d3233203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:9e:4b:7c:fd:00:d4:09:59:14:63:5c:0f:3e:77:3a:04:
         df:70:a9:82:2c:c6:e5:55:92:cd:e8:7c:43:4b:98:8a:b3:74:
         c2:ac:83:2f:1e:2a:8e:c5:c7:c6:25:00:92:43:f0:0c:da:44:
         61:bf:94:10:10:2b:ff:94:fe:e2:c5:ad:54:23:de:a8:e4:e1:
         da:20:3f:26:1d:7d:f3:f0:f9:13:25:5d:3f:9c:53:cd:c5:93:
         f9:84:5a:61:ad:77:b8:75:90:43:99:ed:ad:80:cf:aa:76:fa:
         80:f2:93:c5:4a:b9:67:d4:d2:cc:43:05:04:b9:c4:d9:4e:e3:
         de:c4:25:00:ea:7b:6a:9e:c2:63:d7:0a:fa:a6:2a:7e:7f:9c:
         26:09:ed:83:52:11:58:ea:63:9a:8f:25:19:79:9c:77:1e:4f:
         e0:21:62:e9:9f:df:30:28:21:ed:b9:9c:25:60:5d:01:72:3f:
         a2:ea:26:90:2d:7c:17:74:7d:73:4c:02:9e:8e:16:51:cf:3c:
         1d:c4:d4:cf:90:38:dc:5c:ce:d4:ba:96:60:e5:c6:54:11:7d:
         22:40:9d:39:15:e3:44:2a:fe:9d:fa:ff:5e:ba:86:2d:61:4e:
         63:5f:bb:dd:06:b2:20:70:ef:45:c5:25:01:68:71:95:22:32:
         32:93:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:55:15 2025 by rpki-client