Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3232203d3e20323635393930.roa
File:                     3133312e3139362e3230302e302f32322d3232203d3e20323635393930.roa (raw, json)
Hash identifier:          /WP74voP/m+4oNVw4b/wVTmGx15Uc651kdkypuIlhWI=
Subject key identifier:   F6:03:45:73:DB:3B:1F:2C:F4:E9:1E:5C:E1:BC:60:0F:FD:BD:9C:9C
Certificate issuer:       /CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
Certificate serial:       58AE45AA2841DC72F77B8168DF0FD1FA8E8E542B
Authority key identifier: B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3232203d3e20323635393930.roa
Signing time:             Tue 10 Jun 2025 19:51:59 +0000
ROA not before:           Tue 10 Jun 2025 19:46:59 +0000
ROA not after:            Tue 09 Jun 2026 19:51:59 +0000
asID:                     265990
IP address blocks:        131.196.200.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 12 Jun 2025 13:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:45:aa:28:41:dc:72:f7:7b:81:68:df:0f:d1:fa:8e:8e:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F1D107018BC717ABFB26F2FEA55EE5295615C3
        Validity
            Not Before: Jun 10 19:46:59 2025 GMT
            Not After : Jun  9 19:51:59 2026 GMT
        Subject: CN=F6034573DB3B1F2CF4E91E5CE1BC600FFDBD9C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:99:7b:75:a8:19:a6:c6:4c:d8:91:27:d4:
                    e8:8b:f6:aa:69:03:9b:8d:4a:77:0b:79:d7:5d:9d:
                    fc:ad:a6:d7:11:01:15:e6:e7:9d:3e:28:5b:0e:36:
                    15:8c:f4:c6:8b:e2:9a:0a:b4:b6:4e:ec:95:4a:c0:
                    4e:6f:15:a9:4f:22:ca:64:91:18:9b:e4:3a:55:30:
                    13:80:a5:eb:df:e1:dd:c8:35:ce:7f:39:37:40:5f:
                    54:dd:fd:06:bd:4e:61:21:11:db:77:e9:c4:5d:d5:
                    cd:d8:d3:68:e7:cd:4d:81:c0:b5:a2:fd:6c:24:3b:
                    10:f7:bf:53:37:d4:50:91:40:ee:30:88:41:62:25:
                    7b:f4:e5:71:93:6e:42:57:a0:41:da:11:89:92:d4:
                    14:4e:8a:0b:cd:de:b6:68:e7:ca:95:5b:d1:fa:ab:
                    63:d5:d2:81:00:84:5a:79:04:c8:74:af:df:d9:7c:
                    72:e4:85:2d:76:f5:1a:be:ac:09:2b:8f:c3:4d:82:
                    94:6b:88:7d:8b:e5:18:6f:00:94:ad:e9:f1:db:aa:
                    3d:99:db:46:45:39:24:51:dd:2e:60:b5:82:9d:6c:
                    ab:b7:14:ae:f4:03:6c:ce:e9:8b:a0:85:b1:d1:d1:
                    6a:9c:c1:ad:5f:b3:0b:30:64:d5:f1:17:af:2f:89:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:45:73:DB:3B:1F:2C:F4:E9:1E:5C:E1:BC:60:0F:FD:BD:9C:9C
            X509v3 Authority Key Identifier:
                keyid:B1:F1:D1:07:01:8B:C7:17:AB:FB:26:F2:FE:A5:5E:E5:29:56:15:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1F1D107018BC717ABFB26F2FEA55EE5295615C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k8AviU9sW4ETjPv2JrDeq4eWHJuEX4rcaArxgd781AK/0/3133312e3139362e3230302e302f32322d3232203d3e20323635393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:dc:41:35:b1:d7:28:5f:0f:71:d1:62:cb:04:d6:54:af:f7:
         b1:64:ff:30:02:88:a4:34:9c:88:e6:87:14:01:69:a8:85:bb:
         95:17:fb:c0:39:09:4a:aa:ba:be:38:93:c1:b6:90:a8:91:ff:
         19:83:54:79:77:a4:d3:eb:5f:1b:ec:c8:ab:31:3d:c9:b8:e5:
         69:c0:f2:cf:7a:9e:42:17:32:31:48:51:04:25:9e:dd:20:52:
         eb:08:6a:db:d9:f8:64:da:de:52:af:4a:a3:4c:55:76:b8:c5:
         a3:d6:ed:dc:16:94:cd:d8:52:49:b3:1e:b4:bd:37:2a:66:3a:
         92:5a:80:4d:4f:e8:a2:17:d2:81:f0:73:41:95:4c:b2:68:34:
         5f:04:2d:7c:be:17:c3:d0:db:b0:de:19:bd:3c:8a:1f:06:f9:
         bb:18:6e:f0:a8:4d:4d:99:9b:8d:34:f1:3f:5b:37:80:0d:a3:
         de:e9:b5:71:35:ec:98:bd:88:91:48:1b:18:08:3a:cc:4b:52:
         9c:10:89:bd:64:69:c0:04:30:67:5e:d2:d3:17:ad:cf:99:8b:
         5e:51:9a:c3:27:6f:8f:8e:d4:c4:54:90:4f:39:5b:df:38:d7:
         fd:56:05:b2:42:c9:69:98:4c:99:0e:8f:62:e2:72:85:ce:23:
         54:8a:20:9e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWK5FqihB3HL3e4Fo3w/R+o6OVCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGMUQxMDcwMThCQzcxN0FCRkIyNkYyRkVBNTVFRTUy
OTU2MTVDMzAeFw0yNTA2MTAxOTQ2NTlaFw0yNjA2MDkxOTUxNTlaMDMxMTAvBgNV
BAMTKEY2MDM0NTczREIzQjFGMkNGNEU5MUU1Q0UxQkM2MDBGRkRCRDlDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTJl7dagZpsZM2JEn1OiL9qpp
A5uNSncLedddnfytptcRARXm550+KFsONhWM9MaL4poKtLZO7JVKwE5vFalPIspk
kRib5DpVMBOApevf4d3INc5/OTdAX1Td/Qa9TmEhEdt36cRd1c3Y02jnzU2BwLWi
/WwkOxD3v1M31FCRQO4wiEFiJXv05XGTbkJXoEHaEYmS1BROigvN3rZo58qVW9H6
q2PV0oEAhFp5BMh0r9/ZfHLkhS129Rq+rAkrj8NNgpRriH2L5RhvAJSt6fHbqj2Z
20ZFOSRR3S5gtYKdbKu3FK70A2zO6YughbHR0Wqcwa1fswswZNXxF68viaF/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9gNFc9s7Hyz06R5c4bxgD/29nJwwHwYDVR0j
BBgwFoAUsfHRBwGLxxer+yby/qVe5SlWFcMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2s4QXZpVTlzVzRFVGpQdjJKckRlcTRlV0hKdUVYNHJjYUFyeGdkNzgx
QUsvMC9CMUYxRDEwNzAxOEJDNzE3QUJGQjI2RjJGRUE1NUVFNTI5NTYxNUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRjFEMTA3MDE4QkM3MTdB
QkZCMjZGMkZFQTU1RUU1Mjk1NjE1QzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNrOEF2aVU5c1c0RVRqUHYySnJEZXE0ZVdISnVFWDRyY2FBcnhnZDc4MUFLLzAv
MzEzMzMxMmUzMTM5MzYyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM5MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEyDANBgkqhkiG9w0BAQsFAAOCAQEAHtxB
NbHXKF8PcdFiywTWVK/3sWT/MAKIpDSciOaHFAFpqIW7lRf7wDkJSqq6vjiTwbaQ
qJH/GYNUeXek0+tfG+zIqzE9ybjlacDyz3qeQhcyMUhRBCWe3SBS6whq29n4ZNre
Uq9Ko0xVdrjFo9bt3BaUzdhSSbMetL03KmY6klqATU/oohfSgfBzQZVMsmg0XwQt
fL4Xw9DbsN4ZvTyKHwb5uxhu8KhNTZmbjTTxP1s3gA2j3um1cTXsmL2IkUgbGAg6
zEtSnBCJvWRpwAQwZ17S0xetz5mLXlGawydvj47UxFSQTzlb3zjX/VYFskLJaZhM
mQ6PYuJyhc4jVIogng==
-----END CERTIFICATE-----
Generated at Thu Jun 19 23:14:06 2025 by rpki-client