Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          fymuUDaOZYihXSYyHQusOB5zvXzMANox4sHJZK9O0zc=
Subject key identifier:   03:4A:DD:79:6B:AC:57:9B:59:8B:B5:E4:3B:2B:A8:0A:0E:CE:FD:91
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       2B56D26A2E4B8C3FF87607FF71FF19148246C8EE
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
Signing time:             Fri 25 Apr 2025 14:34:17 +0000
ROA not before:           Fri 25 Apr 2025 14:29:17 +0000
ROA not after:            Fri 24 Apr 2026 14:34:17 +0000
asID:                     262478
IP address blocks:        177.47.248.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 25 Apr 2025 15:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:56:d2:6a:2e:4b:8c:3f:f8:76:07:ff:71:ff:19:14:82:46:c8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Apr 25 14:29:17 2025 GMT
            Not After : Apr 24 14:34:17 2026 GMT
        Subject: CN=034ADD796BAC579B598BB5E43B2BA80A0ECEFD91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:c7:ef:c4:24:86:fa:7c:d7:6a:e6:82:fa:
                    20:df:2f:7e:75:e6:9e:cd:66:15:d2:b6:e5:d7:f5:
                    25:e2:8f:55:c0:35:51:73:e3:1f:3b:8c:68:8e:5b:
                    21:76:58:f2:55:1d:e2:18:52:c5:7c:ea:8c:af:a8:
                    56:1f:12:54:31:5a:7c:9c:f6:ac:79:2e:48:6e:8b:
                    a5:75:8b:c4:9e:d1:6c:f4:4b:50:bf:f6:6f:51:2e:
                    54:cc:93:45:95:da:44:05:dc:a5:0c:83:10:e9:54:
                    b7:95:10:a2:de:8b:6e:72:7c:23:5c:e1:85:cb:87:
                    06:8a:24:c0:b7:8f:ec:0b:b3:6b:b5:15:6c:8f:dc:
                    2e:bf:89:51:4f:dc:f4:29:ea:64:e8:9d:62:81:24:
                    f5:e8:c5:ac:1c:03:d3:4b:7f:fa:27:7a:d5:be:aa:
                    62:cf:b5:49:8a:35:62:dd:5b:92:2c:81:18:e1:a5:
                    cd:0d:66:22:aa:5f:6f:09:9d:a3:26:46:5d:94:4b:
                    f1:0f:00:b3:a8:8c:35:73:3c:c2:61:46:92:30:e8:
                    ff:96:b5:26:26:c7:ad:08:c8:48:74:a5:7e:1c:2e:
                    02:6a:3b:f0:e5:0b:2f:2b:84:b0:4f:25:75:d0:3a:
                    86:08:14:42:f2:d9:e1:b2:0d:0f:78:ad:b6:8a:68:
                    1d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:DD:79:6B:AC:57:9B:59:8B:B5:E4:3B:2B:A8:0A:0E:CE:FD:91
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:ea:99:2c:90:2f:f4:30:92:07:99:43:ef:c8:0f:3b:21:88:
         2b:c6:25:39:b6:40:9c:4e:4d:58:c9:89:e4:35:bc:c8:11:77:
         02:34:40:e9:c8:81:b2:aa:9f:2b:eb:20:ab:b7:2f:1d:3d:3f:
         20:4c:62:1a:ef:b9:72:eb:b5:cb:b4:c1:45:f7:b8:98:b0:e5:
         13:4c:f0:da:fc:55:ce:e1:07:f8:6f:43:af:80:9f:ad:17:9a:
         22:93:81:49:47:99:dd:85:d9:e6:f0:b8:3e:8d:8d:68:db:db:
         ee:b7:be:f0:63:82:2d:ff:c4:5f:cd:20:40:4a:e6:4e:1b:f7:
         fc:6d:36:b0:38:28:0b:e7:53:ec:eb:bb:3c:5a:83:e4:75:3b:
         cb:d6:37:7a:a0:df:0e:56:d7:c4:c0:68:6d:19:10:20:39:8e:
         09:2e:ce:9c:4f:8e:49:23:ce:64:4d:48:db:be:ca:15:01:20:
         d7:ea:d4:01:99:e3:6f:89:29:17:dd:56:46:b1:fa:f1:14:4e:
         59:9b:38:50:29:8a:53:6a:22:3f:06:40:46:2a:c0:63:fa:8b:
         0f:37:31:ae:79:d0:4f:cc:92:33:0b:3c:b7:6e:76:2d:ac:d7:
         1b:03:42:15:da:3d:97:00:0c:29:63:87:06:e5:a4:ad:88:39:
         de:3a:bd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:30:49 2025 by rpki-client