Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa
File:                     3137302e38312e3130302e302f32322d3234203d3e203631363138.roa (raw, json)
Hash identifier:          X7WL32KpSk0n5izSEkr/RzKMogZ28wRsInpAys1t8S8=
Subject key identifier:   47:7A:F9:62:32:28:4F:EC:B3:04:FC:BA:77:72:FF:26:33:69:7F:83
Certificate issuer:       /CN=749E21CDD000362F14CB5C6E5B975EFE08776886
Certificate serial:       60AE9E55B92500F64C77D71064021F6A35B065D6
Authority key identifier: 74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa
Signing time:             Sun 04 May 2025 22:54:21 +0000
ROA not before:           Sun 04 May 2025 22:49:21 +0000
ROA not after:            Sun 03 May 2026 22:54:21 +0000
asID:                     61618
IP address blocks:        170.81.100.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 May 2025 21:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ae:9e:55:b9:25:00:f6:4c:77:d7:10:64:02:1f:6a:35:b0:65:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749E21CDD000362F14CB5C6E5B975EFE08776886
        Validity
            Not Before: May  4 22:49:21 2025 GMT
            Not After : May  3 22:54:21 2026 GMT
        Subject: CN=477AF96232284FECB304FCBA7772FF2633697F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:3a:2f:10:75:8c:84:b1:39:19:57:e0:d0:
                    d3:73:b8:7b:24:d4:c3:df:4f:c2:63:e9:c8:80:0f:
                    15:c5:5f:56:21:cb:f6:fe:4d:63:e9:c5:0f:23:ee:
                    4a:84:27:b7:35:d0:6d:f4:d6:e3:32:45:a1:a6:f5:
                    8d:ac:77:2e:00:35:ac:df:3f:d4:e9:93:4b:4e:78:
                    db:32:ca:d6:bc:3d:45:6a:53:e8:20:b1:bf:51:b2:
                    5c:1d:52:25:24:2f:55:b8:1f:0a:c1:8d:91:f0:2e:
                    b2:79:44:9b:8a:d1:1e:7e:52:4f:1b:e8:a0:e9:a0:
                    e4:13:6f:3a:17:cb:7b:31:96:ce:d0:31:5b:1d:26:
                    21:18:ba:9f:c1:b9:2d:a7:9a:93:23:66:04:9b:e1:
                    c5:7a:34:4c:71:b1:d9:2b:64:a7:b7:4c:97:0e:53:
                    2c:3e:71:f9:2b:1e:e8:8b:ed:99:6a:62:a6:35:d8:
                    cd:d6:1a:ff:0d:22:f3:b4:8d:32:b4:61:d2:1e:06:
                    7c:a6:dc:6f:26:85:90:df:c3:f0:3c:9d:22:b1:99:
                    6e:74:94:60:8d:18:e3:ca:d5:77:cb:9e:4a:5d:12:
                    85:8a:10:79:1c:e0:4d:18:f8:6b:bd:2b:63:9a:7d:
                    a0:07:e6:a7:4a:21:2c:8c:89:ca:2b:cc:d8:ac:1e:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7A:F9:62:32:28:4F:EC:B3:04:FC:BA:77:72:FF:26:33:69:7F:83
            X509v3 Authority Key Identifier:
                keyid:74:9E:21:CD:D0:00:36:2F:14:CB:5C:6E:5B:97:5E:FE:08:77:68:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/749E21CDD000362F14CB5C6E5B975EFE08776886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/749E21CDD000362F14CB5C6E5B975EFE08776886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/0/3137302e38312e3130302e302f32322d3234203d3e203631363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:58:c3:66:11:5c:9e:77:9d:06:74:34:af:db:da:b7:3c:
         49:24:46:96:b9:9b:d3:53:6e:a6:d5:13:f7:b8:84:b3:b6:11:
         43:36:3b:d1:a5:b8:6e:c0:d1:ed:29:bd:f0:fe:ee:c9:c1:f5:
         e8:b1:8a:4c:86:6b:13:bf:9b:f1:f6:e9:66:9d:22:18:2a:ae:
         71:f5:4b:01:15:cf:e4:8e:2c:e1:69:7f:5e:a4:45:22:cf:69:
         2f:be:fd:3c:be:46:9e:a0:13:67:30:d7:80:8d:e5:f8:4b:df:
         83:5e:ba:86:56:b8:3c:79:74:5b:92:93:0b:e4:4b:d8:83:e5:
         c9:1e:2a:8b:b8:03:98:71:d9:0d:d0:fb:a7:26:32:1c:cc:4b:
         bb:08:53:54:84:bd:a5:8a:37:11:79:cd:c7:5a:c9:40:00:17:
         58:86:45:9c:c8:6b:4f:3f:a0:b2:99:70:04:63:00:01:8b:2f:
         ca:83:36:1a:16:e3:18:31:0a:34:6c:c9:c2:6a:f7:d2:5c:00:
         4b:4e:ab:01:65:b5:13:ce:49:93:57:c9:7e:44:fc:f4:bd:15:
         73:f8:36:ed:1b:6f:ec:89:f4:ad:0f:25:3e:d4:f4:81:fb:0b:
         9b:71:6b:78:8e:e7:96:e3:11:2a:33:dc:a5:b4:da:11:51:35:
         34:58:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:34:25 2025 by rpki-client