Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32342d3234203d3e20323635393037.roa
File:                     3133312e3139362e38342e302f32342d3234203d3e20323635393037.roa (raw, json)
Hash identifier:          zn7HNAHjBRuBFJNR6JTFInhBt2Ynd7lO/VL6FBH4gLo=
Subject key identifier:   15:7A:5A:23:64:C1:E0:86:02:2B:E1:4C:94:8A:14:EE:58:A8:6B:D1
Certificate issuer:       /CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
Certificate serial:       0E39395253C85D3073663E006A541D94CFF1E55B
Authority key identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32342d3234203d3e20323635393037.roa
Signing time:             Mon 28 Apr 2025 19:10:09 +0000
ROA not before:           Mon 28 Apr 2025 19:05:09 +0000
ROA not after:            Mon 27 Apr 2026 19:10:09 +0000
asID:                     265907
IP address blocks:        131.196.84.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 May 2025 12:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:39:39:52:53:c8:5d:30:73:66:3e:00:6a:54:1d:94:cf:f1:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
        Validity
            Not Before: Apr 28 19:05:09 2025 GMT
            Not After : Apr 27 19:10:09 2026 GMT
        Subject: CN=157A5A2364C1E086022BE14C948A14EE58A86BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:1f:59:bf:12:a9:84:0e:a6:66:ef:91:20:
                    74:33:3c:00:51:66:b0:54:39:a1:68:88:49:95:f0:
                    0d:fc:cf:a3:8f:e2:69:45:83:96:27:e9:1f:d6:d4:
                    76:d7:9e:55:29:30:17:8a:58:dc:9b:fa:8e:f5:17:
                    21:0b:c6:b5:9e:ba:14:85:ff:9c:a5:3f:09:6e:45:
                    20:89:23:96:51:a8:b8:cb:55:53:54:0e:49:b5:3a:
                    11:42:a7:ed:8d:51:c8:b2:f0:ff:50:2b:e0:d3:b0:
                    13:35:08:a3:5b:9e:3b:85:3a:7c:43:f0:59:7d:ef:
                    02:22:8b:f3:95:9f:70:00:1a:7d:28:d7:02:e1:8d:
                    be:fd:3d:24:28:ec:b9:2d:33:0e:d3:ac:64:71:23:
                    a6:46:17:82:f6:2e:ed:82:42:0f:00:15:26:17:f4:
                    f1:ae:a9:0f:7c:38:74:69:ea:8f:eb:ca:56:5b:0e:
                    57:bb:ec:bd:5a:5b:22:cb:98:b1:7d:46:5b:83:f2:
                    a8:7b:34:ee:97:f0:24:f9:e1:ea:bf:46:02:93:49:
                    91:7b:d0:c3:de:32:86:49:54:f8:24:5e:75:f8:39:
                    c2:63:61:a3:91:f6:1f:ca:d8:03:65:18:b1:10:f3:
                    78:54:1d:49:a6:6c:cf:29:aa:cc:f2:50:95:c5:3a:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:5A:23:64:C1:E0:86:02:2B:E1:4C:94:8A:14:EE:58:A8:6B:D1
            X509v3 Authority Key Identifier:
                keyid:A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32342d3234203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:07:e1:ac:38:88:eb:bc:34:27:66:9a:d3:37:bc:91:9b:9f:
         10:22:24:6c:58:f4:ff:d1:e0:78:80:9c:ae:9d:8c:3a:21:ba:
         fa:8d:37:eb:74:47:71:95:8c:08:17:01:59:a1:7e:e4:bb:53:
         ad:39:38:77:6d:43:df:6b:36:04:8e:c4:5a:44:ed:65:1d:2b:
         e0:e8:02:00:d0:72:79:33:05:ef:5c:41:62:5a:5d:30:c3:b0:
         4f:17:f3:87:fe:8e:f2:5a:1d:ff:4a:37:ea:48:f2:3e:c8:e4:
         73:b0:32:ad:8a:ae:d3:97:25:e5:ed:d1:2a:dd:eb:ed:f3:59:
         71:84:d2:8a:27:db:c5:93:79:37:40:8f:20:86:21:29:cf:e5:
         b8:43:32:e6:67:f9:dd:6f:a9:97:21:e9:65:e4:dc:f7:f8:7f:
         22:94:e4:f2:97:b2:af:eb:19:7d:02:0f:87:d8:aa:27:78:b2:
         24:5a:04:37:94:54:0c:89:e9:78:d2:08:03:18:2b:23:3e:54:
         30:ff:12:2d:84:18:6d:35:58:29:2e:07:ab:f0:a3:70:93:38:
         41:66:be:54:64:d8:e1:6b:a4:34:8d:07:2d:16:8e:d5:82:97:
         d3:65:07:26:c2:bc:d0:02:97:f2:31:4b:1d:37:b8:4c:2d:33:
         9f:76:27:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:45:17 2025 by rpki-client