Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3139302e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          jD36N6wuL7GNInl58Lh/Qqh98K6kR+dZdRbVatZefv8=
Subject key identifier:   51:F2:A0:BA:5C:F1:F7:33:01:9F:8F:B6:61:97:62:11:D9:83:6B:7F
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       6167946322C618A54608C142F608E1E8A093CDF3
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:00 +0000
ROA not before:           Fri 07 Mar 2025 14:36:00 +0000
ROA not after:            Fri 06 Mar 2026 14:41:00 +0000
asID:                     52758
IP address blocks:        177.38.190.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Thu 13 Mar 2025 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:67:94:63:22:c6:18:a5:46:08:c1:42:f6:08:e1:e8:a0:93:cd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:00 2025 GMT
            Not After : Mar  6 14:41:00 2026 GMT
        Subject: CN=51F2A0BA5CF1F733019F8FB661976211D9836B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ad:0f:b3:5a:26:ba:2d:de:c8:41:75:be:02:
                    fc:31:1d:af:64:eb:2b:b4:c4:6d:d5:7d:39:96:df:
                    06:c4:5b:7d:4a:ae:2d:98:fb:0c:e7:b3:74:cd:f4:
                    89:e3:bb:67:8e:cd:2a:3e:81:74:18:59:8a:d9:15:
                    0a:7b:5e:17:ed:e5:af:54:30:1e:ac:74:36:67:a6:
                    8d:4d:11:29:4e:07:b2:f1:40:b3:56:9d:db:34:82:
                    ca:8c:79:02:27:42:cd:cb:ce:fe:a3:f5:d2:3f:88:
                    ca:db:1d:a0:83:6d:fc:a6:cf:2d:4f:11:f6:10:96:
                    12:c6:04:d1:55:39:5f:35:a4:ef:39:34:83:c3:bf:
                    22:a1:82:3a:2c:51:8c:ac:3a:91:20:cb:e3:fe:81:
                    82:f3:22:e6:66:12:10:9f:b4:51:84:d8:86:66:50:
                    18:dc:e3:e1:d0:66:4e:4f:93:21:6e:00:6c:6b:3b:
                    22:2d:38:a9:fa:02:55:72:e1:70:f4:11:94:c9:45:
                    7e:62:c4:03:b7:72:06:dc:5a:a6:6c:8b:9d:c1:7f:
                    55:fa:0c:a2:f8:6a:62:f7:76:33:bf:b2:d7:0c:f9:
                    c9:8b:5e:4d:43:72:1f:aa:5c:da:56:8b:b7:f6:16:
                    cf:8d:e1:60:85:c1:72:94:f5:34:5b:b6:c4:e4:9a:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:A0:BA:5C:F1:F7:33:01:9F:8F:B6:61:97:62:11:D9:83:6B:7F
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:86:e5:ef:49:99:93:63:83:16:03:32:ea:ac:ef:53:b5:
         6a:b2:c2:e2:3c:06:e7:ad:51:bb:24:ad:7c:d8:66:5b:66:f2:
         d4:88:a5:3a:61:74:f2:62:1f:8c:61:77:32:74:46:44:a0:03:
         de:ea:0d:68:ba:18:7a:cf:8b:8e:bc:54:5e:5f:52:8e:54:bc:
         07:15:17:40:0e:ff:c6:94:78:1b:2a:5e:c4:24:a4:d5:2b:d4:
         d5:e3:6e:aa:ca:02:78:14:2f:c8:2e:54:93:93:15:11:53:4e:
         5d:15:a0:94:e2:8a:80:9d:d7:ba:ce:2e:00:24:cc:97:2c:37:
         40:46:b3:34:bb:6d:9c:fe:cd:43:bd:2a:93:59:c2:63:09:65:
         05:22:92:f5:05:00:35:c8:44:26:72:84:7c:78:1c:9b:96:37:
         4d:b8:69:29:c4:85:da:c0:43:0b:93:d8:e6:85:2d:93:c1:2b:
         13:bb:6d:8a:02:da:27:58:ff:6d:81:00:8c:a4:43:cc:c3:7c:
         9a:b4:d1:bb:69:d9:66:d2:b8:59:d8:56:23:32:64:73:2f:2e:
         a4:d7:ff:3d:ad:5b:0e:b8:bf:e7:c4:aa:d1:28:13:50:d3:63:
         da:2f:c7:3f:8d:0b:5f:af:03:7c:8e:48:36:4f:96:51:7b:e9:
         1b:1a:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 20:54:42 2025 by rpki-client