Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38372e302f32342d3234203d3e20323635393037.roa
File:                     3133312e3139362e38372e302f32342d3234203d3e20323635393037.roa (raw, json)
Hash identifier:          mqVjQ3SRdorwk0MrjCl9vODaj1NQTj36srRwnI5U8P4=
Subject key identifier:   72:A1:F6:00:DF:58:C8:0A:DF:AE:63:4F:35:4F:4B:9E:ED:AC:F4:C9
Certificate issuer:       /CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
Certificate serial:       304FF50B1D27E57B7AEC591E22AE432D09CDEE61
Authority key identifier: A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38372e302f32342d3234203d3e20323635393037.roa
Signing time:             Mon 05 May 2025 11:01:05 +0000
ROA not before:           Mon 05 May 2025 10:56:05 +0000
ROA not after:            Mon 04 May 2026 11:01:05 +0000
asID:                     265907
IP address blocks:        131.196.87.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 May 2025 12:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:f5:0b:1d:27:e5:7b:7a:ec:59:1e:22:ae:43:2d:09:cd:ee:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78
        Validity
            Not Before: May  5 10:56:05 2025 GMT
            Not After : May  4 11:01:05 2026 GMT
        Subject: CN=72A1F600DF58C80ADFAE634F354F4B9EEDACF4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:46:88:5d:18:74:98:6d:b4:2f:84:e1:8e:
                    79:94:45:b7:db:b9:12:41:b4:9f:13:55:a4:a3:5f:
                    e0:8e:e3:33:69:e7:7e:64:9f:4c:ba:07:4d:16:e3:
                    35:76:c1:01:70:0f:c3:a2:3b:46:8a:09:e2:48:23:
                    79:d7:bc:be:4c:50:5f:00:e5:5c:7a:e3:f2:30:ed:
                    a5:41:e0:22:d1:1b:92:c8:b5:6f:ee:11:02:e3:cb:
                    6e:2c:b7:71:8e:77:13:9e:e3:10:4e:a7:c3:48:83:
                    5b:de:9d:70:84:3a:58:c1:d4:b3:cc:90:4b:37:6c:
                    27:36:80:a5:95:a2:0e:79:64:e8:f6:95:64:4d:7e:
                    7f:7a:85:f5:9c:d6:e2:d1:bb:54:c8:11:e0:7e:50:
                    59:38:ca:64:2e:75:bc:1b:c0:e0:56:27:b1:fd:f9:
                    bb:39:d2:d6:a2:83:37:ec:d4:b5:d3:7d:fd:0e:84:
                    f1:81:d8:ee:ea:c6:7a:98:f3:1c:9b:15:c3:2c:2c:
                    57:73:74:2b:75:09:5c:c8:19:14:e9:7c:45:d7:33:
                    16:e7:12:f6:16:a1:bf:45:4b:5a:9a:b0:c5:a1:c2:
                    02:6a:04:f7:66:1f:e1:bd:5d:85:25:32:1e:eb:aa:
                    2b:4d:31:f2:3c:66:e6:72:13:73:d7:e3:ae:bb:e4:
                    82:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A1:F6:00:DF:58:C8:0A:DF:AE:63:4F:35:4F:4B:9E:ED:AC:F4:C9
            X509v3 Authority Key Identifier:
                keyid:A2:ED:72:0D:77:9C:3C:48:35:6C:6B:5A:3D:EA:2A:10:CB:0F:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2ED720D779C3C48356C6B5A3DEA2A10CB0F9F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38372e302f32342d3234203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:b2:fc:00:59:10:a5:2e:3d:0d:3e:cc:23:d5:6b:25:c4:
         2c:0c:42:92:ff:2e:86:b0:d6:64:50:14:01:77:3c:8b:59:e4:
         6a:7f:52:fe:09:c8:f8:1e:13:11:51:86:fd:b8:bd:c1:97:13:
         80:fe:5a:9a:ab:f4:5f:0d:ce:83:bd:17:d8:fa:5c:7f:62:26:
         a7:9e:f9:3b:44:33:a5:6a:12:78:56:02:ea:c2:79:d3:ec:22:
         8a:88:bd:99:7f:11:57:b9:5a:47:26:ac:d7:0f:44:c3:7e:13:
         f5:73:72:2f:96:3d:01:60:f2:26:7f:36:5a:af:55:70:cb:1f:
         4a:39:f1:a0:90:2c:ee:a4:3e:bd:be:a0:37:db:04:41:d1:db:
         5b:58:cd:e2:ee:38:35:79:dd:1b:78:73:f0:af:90:5f:0d:db:
         72:09:1c:97:67:85:ba:ab:41:57:d9:b8:eb:d6:b5:0f:c2:96:
         a3:a9:61:da:51:e6:81:6e:d5:74:d1:35:5e:4a:81:71:d2:21:
         95:5f:34:d4:24:b0:f9:e7:d8:10:64:d4:29:e2:70:42:fc:da:
         61:38:e2:14:18:96:70:26:5c:f8:fb:30:1d:88:df:f7:93:6e:
         45:c1:78:6d:51:17:bc:f5:cc:81:fa:dc:9b:c0:78:a2:0d:4a:
         73:96:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:16:28 2025 by rpki-client