Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38352e302f32342d3234203d3e20323635393037.roa
File:                     3133312e3139362e38352e302f32342d3234203d3e20323635393037.roa (raw, json)
Hash identifier:          ohVk05nvqL5og74B71BEJvGLUXzrR8rd67E8+i8bdOY=
Subject key identifier:   6B:3D:66:E6:86:F1:E0:79:84:A6:B0:A3:48:03:63:3F:49:79:7B:3E
Certificate issuer:       /CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
Certificate serial:       4FC509B8A23DBCD42722A496C8AAD19DA74E0383
Authority key identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38352e302f32342d3234203d3e20323635393037.roa
Signing time:             Mon 05 May 2025 11:00:50 +0000
ROA not before:           Mon 05 May 2025 10:55:50 +0000
ROA not after:            Mon 04 May 2026 11:00:50 +0000
asID:                     265907
IP address blocks:        131.196.85.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 May 2025 12:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:09:b8:a2:3d:bc:d4:27:22:a4:96:c8:aa:d1:9d:a7:4e:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
        Validity
            Not Before: May  5 10:55:50 2025 GMT
            Not After : May  4 11:00:50 2026 GMT
        Subject: CN=6B3D66E686F1E07984A6B0A34803633F49797B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:06:39:ac:0f:81:d0:9f:48:38:3a:a3:0c:
                    89:81:78:86:9b:92:16:f9:46:0a:4a:5e:56:8e:0b:
                    23:3f:16:ab:2a:0c:58:c8:47:18:05:f7:56:a6:11:
                    bc:81:84:7c:a7:29:fd:88:f1:f1:83:e9:85:d8:ed:
                    42:7b:ca:e8:25:3a:0e:5e:11:81:b5:c5:e9:f5:d3:
                    09:e3:9d:0d:06:6e:ef:5a:7e:d6:30:34:9b:bf:4a:
                    db:d8:b4:18:dc:8f:6a:f5:12:79:df:62:e0:5c:a1:
                    6f:ed:4d:7e:99:d0:e7:38:b8:56:8e:cc:a8:99:e7:
                    05:74:ce:07:f2:1c:ec:63:0c:68:44:ca:10:2f:c6:
                    8b:73:8a:19:c6:e6:de:bf:04:49:31:d4:c5:90:55:
                    d4:84:7d:68:fe:d5:02:9d:db:0d:43:f3:67:e4:79:
                    36:92:4e:c8:6b:85:81:fd:6c:b9:c9:10:a3:ed:25:
                    05:ee:cb:43:fe:f0:85:ac:ca:eb:f3:0e:4e:d7:30:
                    84:ba:ad:f2:2d:c9:0a:b0:b7:0a:f9:47:77:bb:46:
                    d8:47:ef:13:61:8f:46:42:e6:45:b7:a5:02:50:62:
                    9a:6c:78:40:bb:63:ba:94:cc:44:45:37:ff:9a:30:
                    81:c0:bf:7d:73:86:77:c3:e3:60:7a:a0:cb:fc:3c:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3D:66:E6:86:F1:E0:79:84:A6:B0:A3:48:03:63:3F:49:79:7B:3E
            X509v3 Authority Key Identifier:
                keyid:A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38352e302f32342d3234203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:87:51:66:00:45:34:6a:74:9f:61:98:e8:06:36:8b:42:5a:
         76:56:1e:53:3b:84:45:11:8f:8b:4e:34:cd:0a:84:05:f1:6c:
         d0:49:05:81:ed:fe:cd:dd:a3:4b:e0:ec:25:58:ae:75:42:fb:
         7f:a8:56:a6:bd:f8:0b:0f:c3:91:8a:c6:86:cf:e3:c1:fc:cf:
         73:d0:17:cb:c9:ad:67:82:02:d6:32:1b:d8:7f:19:05:a7:3d:
         7b:3b:76:2c:f2:28:75:d9:b1:7a:ec:63:d9:ee:72:cc:e9:f4:
         ae:4a:d0:31:fc:6b:10:12:cb:95:46:47:b1:0d:49:42:90:c7:
         02:13:e3:7c:f8:12:51:0d:41:87:8d:71:2d:ab:0c:d2:2f:05:
         39:e0:ed:42:06:2e:16:e8:86:c2:63:3e:5e:be:2d:ce:7b:0d:
         3d:1d:41:08:04:4e:b2:d9:41:c3:fd:b6:88:cb:c7:b4:b0:5c:
         d7:b4:86:bd:ce:7c:a2:b0:a4:29:ba:41:78:3c:8f:ec:aa:4a:
         31:98:f6:2b:bf:2b:5f:0d:57:bd:a2:6d:6c:03:bc:33:b6:32:
         0d:db:86:ca:4d:66:9d:2e:e6:40:48:c3:0c:ad:76:af:fc:3a:
         67:92:3a:ae:ca:c6:81:fb:c8:fe:12:6e:5b:3d:20:d7:ff:dc:
         32:7b:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:55:15 2025 by rpki-client