Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32342d3234203d3e20323634333230.roa
File:                     3133382e3132322e3132302e302f32342d3234203d3e20323634333230.roa (raw, json)
Hash identifier:          jHH6t3w3mkdXJ7I7Zdu2Q0OipIGoKhjxK4S5Yjafiao=
Subject key identifier:   FF:77:A7:41:D0:7C:CD:14:8B:D9:EE:67:CF:03:F2:F9:9F:82:69:03
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       2D6959A1C8A9B9EE5AE37A9A7B0D21E98B6B06BC
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32342d3234203d3e20323634333230.roa
Signing time:             Mon 02 Dec 2024 22:40:07 +0000
ROA not before:           Mon 02 Dec 2024 22:35:07 +0000
ROA not after:            Mon 01 Dec 2025 22:40:07 +0000
asID:                     264320
IP address blocks:        138.122.120.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 03 Dec 2024 14:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:69:59:a1:c8:a9:b9:ee:5a:e3:7a:9a:7b:0d:21:e9:8b:6b:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Dec  2 22:35:07 2024 GMT
            Not After : Dec  1 22:40:07 2025 GMT
        Subject: CN=FF77A741D07CCD148BD9EE67CF03F2F99F826903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:93:e1:fc:a1:d2:6d:34:c8:f6:4c:9c:4a:
                    4f:3f:43:f7:8e:3b:50:c5:25:c5:4c:59:52:ad:d0:
                    c7:e6:2e:3f:a2:90:57:34:ef:47:91:55:2d:65:b8:
                    73:85:f1:da:74:cd:1d:af:ee:a1:7b:0e:3b:ac:9c:
                    5b:b5:ba:dc:92:e0:23:8c:5b:c5:74:0e:4a:34:8d:
                    0b:00:f2:ba:82:0e:f0:6c:93:3c:cf:a6:5b:00:e7:
                    73:de:27:da:9c:e9:93:28:a2:8c:9a:31:e8:bf:91:
                    b8:98:a5:f4:e9:a5:cc:7f:78:a7:39:ae:03:9e:b6:
                    a9:19:43:6b:cc:5e:d2:5f:42:09:bf:34:33:bf:a1:
                    11:c1:53:65:f6:59:02:92:da:5a:3f:70:8a:27:e8:
                    91:55:f3:e5:79:61:30:a5:da:36:f2:b5:43:e3:11:
                    4a:dc:00:c8:c2:81:9d:94:c1:5e:86:1d:78:aa:51:
                    46:41:65:d5:85:03:4b:e4:9b:98:a2:07:68:9b:43:
                    8d:e3:95:b6:df:a8:fd:bc:e5:35:41:f2:93:53:44:
                    ba:e2:87:c3:a9:d4:83:7d:5f:dd:9d:12:ff:60:d9:
                    ad:f4:93:30:37:7b:18:67:b5:0d:5c:da:e0:73:03:
                    78:6d:af:fa:68:75:87:1b:36:f8:21:da:d9:64:15:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:A7:41:D0:7C:CD:14:8B:D9:EE:67:CF:03:F2:F9:9F:82:69:03
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32342d3234203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:00:61:e5:d7:57:7b:ef:ab:9d:4e:97:6b:16:6e:92:f4:
         29:95:ea:c8:ef:fe:7b:75:ea:63:32:3d:7d:1f:73:e4:f4:24:
         d1:ae:41:69:fb:44:b2:e7:c6:58:a5:da:03:58:e1:19:26:71:
         bd:ef:1e:1f:bd:3e:d0:c8:f9:7e:8e:5e:e6:6b:58:03:b1:c7:
         f3:dc:91:75:9e:51:86:69:f0:24:aa:34:7f:a7:65:39:37:a2:
         81:47:da:59:6d:24:1d:8c:ad:41:0b:6f:9e:c0:2e:f6:55:fe:
         1e:06:91:8f:3d:60:5f:34:96:fe:ec:4f:96:df:90:a5:ed:4d:
         79:5a:7d:c2:fe:28:7c:5c:53:fb:78:42:57:e7:ed:c1:e7:03:
         b5:14:54:13:ab:a5:d3:66:aa:df:be:8d:de:18:d4:f1:83:88:
         5d:12:ee:40:3f:78:f4:44:1b:ae:04:9b:70:f7:8a:14:d6:2f:
         e6:1b:52:5c:54:bc:15:6c:69:f2:e2:8a:59:d1:7b:59:e2:16:
         ba:88:7c:cf:77:c4:ac:2c:29:14:c0:d0:48:1b:3d:3c:1b:fe:
         55:e2:d6:29:8c:2d:64:d2:57:cd:5f:62:a9:97:02:b2:4b:03:
         93:69:a6:66:35:e5:ee:0d:01:a3:05:60:cf:3f:17:4c:d0:d4:
         c3:ee:c6:c8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULWlZocipue5a43qaew0h6YtrBrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFRjE3NTVDQTEyODA3NjZCNDg3QzY2NDQ0Q0ZGMjAz
MkIyQUU3NzAeFw0yNDEyMDIyMjM1MDdaFw0yNTEyMDEyMjQwMDdaMDMxMTAvBgNV
BAMTKEZGNzdBNzQxRDA3Q0NEMTQ4QkQ5RUU2N0NGMDNGMkY5OUY4MjY5MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRpPh/KHSbTTI9kycSk8/Q/eO
O1DFJcVMWVKt0MfmLj+ikFc070eRVS1luHOF8dp0zR2v7qF7DjusnFu1utyS4COM
W8V0Dko0jQsA8rqCDvBskzzPplsA53PeJ9qc6ZMoooyaMei/kbiYpfTppcx/eKc5
rgOetqkZQ2vMXtJfQgm/NDO/oRHBU2X2WQKS2lo/cIon6JFV8+V5YTCl2jbytUPj
EUrcAMjCgZ2UwV6GHXiqUUZBZdWFA0vkm5iiB2ibQ43jlbbfqP285TVB8pNTRLri
h8Op1IN9X92dEv9g2a30kzA3exhntQ1c2uBzA3htr/podYcbNvgh2tlkFUkDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/3enQdB8zRSL2e5nzwPy+Z+CaQMwHwYDVR0j
BBgwFoAUTu8XVcoSgHZrSHxmREz/IDKyrncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTlveUVwNHRiNG85MTlKU3VCSkRxS01oRzlFYjk1VmRBaVVCWTVzaTZl
TWQvMC80RUVGMTc1NUNBMTI4MDc2NkI0ODdDNjY0NDRDRkYyMDMyQjJBRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFRUYxNzU1Q0ExMjgwNzY2
QjQ4N0M2NjQ0NENGRjIwMzJCMkFFNzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5b3lFcDR0YjRvOTE5SlN1QkpEcUtNaEc5RWI5NVZkQWlVQlk1c2k2ZU1kLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6eDANBgkqhkiG9w0BAQsFAAOCAQEAWhMA
YeXXV3vvq51Ol2sWbpL0KZXqyO/+e3XqYzI9fR9z5PQk0a5BaftEsufGWKXaA1jh
GSZxve8eH70+0Mj5fo5e5mtYA7HH89yRdZ5RhmnwJKo0f6dlOTeigUfaWW0kHYyt
QQtvnsAu9lX+HgaRjz1gXzSW/uxPlt+Qpe1NeVp9wv4ofFxT+3hCV+ftwecDtRRU
E6ul02aq376N3hjU8YOIXRLuQD949EQbrgSbcPeKFNYv5htSXFS8FWxp8uKKWdF7
WeIWuoh8z3fErCwpFMDQSBs9PBv+VeLWKYwtZNJXzV9iqZcCsksDk2mmZjXl7g0B
owVgzz8XTNDUw+7GyA==
-----END CERTIFICATE-----
Generated at Mon May 12 23:25:04 2025 by rpki-client