Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3231203d3e203238353834.roa
File:                     3137372e33392e3136302e302f32312d3231203d3e203238353834.roa (raw, json)
Hash identifier:          yAwSNZ49O2fYPcO7W6fpAvq15gLzVTFhg2khMxvZcBQ=
Subject key identifier:   99:B9:F3:0F:A9:4B:DB:F9:84:32:D3:9F:BF:70:E0:17:AB:73:9D:9F
Certificate issuer:       /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial:       5A94DA588D4B9CBCA054D8DC5B3C51FBB88CCB49
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3231203d3e203238353834.roa
Signing time:             Tue 08 Apr 2025 16:23:07 +0000
ROA not before:           Tue 08 Apr 2025 16:18:07 +0000
ROA not after:            Tue 07 Apr 2026 16:23:07 +0000
asID:                     28584
IP address blocks:        177.39.160.0/21 maxlen: 21
Validation:               Failed, certificate revoked on Tue 08 Apr 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:da:58:8d:4b:9c:bc:a0:54:d8:dc:5b:3c:51:fb:b8:8c:cb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
        Validity
            Not Before: Apr  8 16:18:07 2025 GMT
            Not After : Apr  7 16:23:07 2026 GMT
        Subject: CN=99B9F30FA94BDBF98432D39FBF70E017AB739D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:9e:31:fd:7c:82:86:90:c8:98:49:fe:aa:
                    78:cc:5a:e1:c8:ec:3f:27:12:6b:5a:a4:54:72:13:
                    9f:77:d1:8b:56:33:8c:b9:74:4f:3f:9a:b9:70:18:
                    fb:15:0b:b0:81:9e:3d:bf:66:36:64:89:1c:85:6e:
                    bd:24:2f:4c:85:92:1e:fe:9c:41:7e:39:8d:97:75:
                    7c:90:83:5c:c0:22:55:b1:15:91:7b:72:a7:3c:4c:
                    24:57:cd:09:c3:13:35:5c:8e:4a:ca:da:d6:5a:38:
                    b8:35:59:ab:b4:6b:32:f7:86:73:47:c5:d2:c1:70:
                    56:4d:55:6d:1f:c7:18:dd:77:2f:4d:88:39:15:0b:
                    b3:d4:28:82:16:f0:56:0a:86:f8:55:96:8e:97:9f:
                    b2:94:63:38:58:6e:2f:94:c5:50:ab:a3:69:43:c2:
                    e8:0b:dd:d5:84:25:dc:f9:8d:9b:82:8f:82:f9:f8:
                    cf:a3:2a:c8:dd:54:8d:1e:40:5c:a4:50:2e:26:29:
                    a6:04:06:7e:5e:b7:d3:ad:50:f8:be:da:c9:fa:0d:
                    93:41:00:43:73:89:6a:74:98:9d:63:a5:fc:f6:54:
                    53:bd:bc:00:5a:98:ce:8a:b8:b2:b3:fb:ed:ce:6a:
                    d5:d5:f1:91:6f:e0:48:01:72:d2:a3:ac:a9:78:a4:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:F3:0F:A9:4B:DB:F9:84:32:D3:9F:BF:70:E0:17:AB:73:9D:9F
            X509v3 Authority Key Identifier:
                keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3137372e33392e3136302e302f32312d3231203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:9f:6b:fa:ef:43:93:50:4c:90:44:f4:06:f3:56:69:bf:
         1f:ee:6f:0c:64:b6:05:d2:3b:b2:d1:08:ed:54:21:34:ae:bb:
         f8:38:34:e8:ca:d4:ca:d3:30:f4:73:7a:22:cf:82:af:5a:a3:
         a9:4a:1f:c8:f2:a1:39:37:26:81:f4:07:c9:8f:95:b4:94:ed:
         e4:01:3f:06:cc:a4:4d:14:a7:4b:e8:95:52:e5:c5:56:3e:a4:
         ee:ed:41:44:5b:8b:f7:aa:69:32:5c:2e:b7:18:09:51:63:2b:
         d6:32:7a:c0:e7:bc:fc:22:a2:74:24:92:77:74:1a:b5:6b:b7:
         63:c7:34:8e:76:ff:2e:31:d4:fc:72:d8:bf:19:74:8f:fd:b8:
         66:b5:f4:e3:7a:29:3b:ae:a8:6f:9a:01:f6:f2:ce:a7:d9:7b:
         c1:d8:2c:38:8b:e4:f8:c6:bc:92:76:ee:69:2f:99:0c:eb:42:
         3e:8c:d0:29:03:01:86:07:84:38:55:d1:63:ca:b3:d1:1d:fa:
         53:e2:c9:bc:b6:ab:23:fc:9e:da:34:e5:e2:19:49:51:a9:eb:
         f2:9a:55:d0:d6:de:8c:3e:79:b0:b3:6a:0c:c7:b2:cd:9e:6d:
         29:3a:5e:b5:73:e4:a9:05:d9:b8:dd:13:cb:86:94:45:77:11:
         07:57:a1:28
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWpTaWI1LnLygVNjcWzxR+7iMy0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIzMzk2MUUwNTU5RjIzOUFFRDRGNTA0MzcwODdFRjY4
MzdEQzVFMzAeFw0yNTA0MDgxNjE4MDdaFw0yNjA0MDcxNjIzMDdaMDMxMTAvBgNV
BAMTKDk5QjlGMzBGQTk0QkRCRjk4NDMyRDM5RkJGNzBFMDE3QUI3MzlEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIp4x/XyChpDImEn+qnjMWuHI
7D8nEmtapFRyE5930YtWM4y5dE8/mrlwGPsVC7CBnj2/ZjZkiRyFbr0kL0yFkh7+
nEF+OY2XdXyQg1zAIlWxFZF7cqc8TCRXzQnDEzVcjkrK2tZaOLg1Wau0azL3hnNH
xdLBcFZNVW0fxxjddy9NiDkVC7PUKIIW8FYKhvhVlo6Xn7KUYzhYbi+UxVCro2lD
wugL3dWEJdz5jZuCj4L5+M+jKsjdVI0eQFykUC4mKaYEBn5et9OtUPi+2sn6DZNB
AENziWp0mJ1jpfz2VFO9vABamM6KuLKz++3OatXV8ZFv4EgBctKjrKl4pDM5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmbnzD6lL2/mEMtOfv3DgF6tznZ8wHwYDVR0j
BBgwFoAUEjOWHgVZ8jmu1PUENwh+9oN9xeMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFtVWMycnQ4RVVTbkRRb1JyWWdnUVJNNExWbW5kM2dmTnRVc2dwMVhR
a1AvMC8xMjMzOTYxRTA1NTlGMjM5QUVENEY1MDQzNzA4N0VGNjgzN0RDNUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMzM5NjFFMDU1OUYyMzlB
RUQ0RjUwNDM3MDg3RUY2ODM3REM1RTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBbVVjMnJ0OEVVU25EUW9ScllnZ1FSTTRMVm1uZDNnZk50VXNncDFYUWtQLzAv
MzEzNzM3MmUzMzM5MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzUzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsSegMA0GCSqGSIb3DQEBCwUAA4IBAQA7uJ9r+u9D
k1BMkET0BvNWab8f7m8MZLYF0juy0QjtVCE0rrv4ODToytTK0zD0c3oiz4KvWqOp
Sh/I8qE5NyaB9AfJj5W0lO3kAT8GzKRNFKdL6JVS5cVWPqTu7UFEW4v3qmkyXC63
GAlRYyvWMnrA57z8IqJ0JJJ3dBq1a7djxzSOdv8uMdT8cti/GXSP/bhmtfTjeik7
rqhvmgH28s6n2XvB2Cw4i+T4xrySdu5pL5kM60I+jNApAwGGB4Q4VdFjyrPRHfpT
4sm8tqsj/J7aNOXiGUlRqevymlXQ1t6MPnmws2oMx7LNnm0pOl61c+SpBdm43RPL
hpRFdxEHV6Eo
-----END CERTIFICATE-----
Generated at Wed May 7 10:05:10 2025 by rpki-client