Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa (raw, json)
Hash identifier:          jkmUXDamYpeIH7LdT/8bYARULyYb7WYZwWJ9Beu5nx0=
Subject key identifier:   93:43:C4:0F:EB:96:95:14:12:A2:10:E1:3F:CE:28:BD:2E:D5:0C:2A
Certificate issuer:       /CN=21079D52F0579C141357012117FF7963C76BBFC2
Certificate serial:       48397D932CB94DE62D291C9F2A9EDB8BD5E79EBE
Authority key identifier: 21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa
Signing time:             Sun 11 May 2025 00:13:21 +0000
ROA not before:           Sun 11 May 2025 00:08:21 +0000
ROA not after:            Sun 10 May 2026 00:13:21 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Sun 11 May 2025 00:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:7d:93:2c:b9:4d:e6:2d:29:1c:9f:2a:9e:db:8b:d5:e7:9e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21079D52F0579C141357012117FF7963C76BBFC2
        Validity
            Not Before: May 11 00:08:21 2025 GMT
            Not After : May 10 00:13:21 2026 GMT
        Subject: CN=9343C40FEB96951412A210E13FCE28BD2ED50C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:9b:86:48:3b:50:eb:1f:da:c4:63:69:3b:
                    d2:e6:00:6f:06:f3:73:9e:28:4e:f6:08:cc:fa:b9:
                    b4:96:c4:d2:39:4f:36:41:1c:33:49:8a:42:81:dd:
                    30:35:79:fd:9b:ba:a6:c3:7d:c8:7c:6a:0a:f8:1e:
                    32:34:7f:ed:5a:7d:56:49:95:91:b2:ac:44:ae:2a:
                    fa:29:8e:27:bf:72:c5:64:0c:8b:14:74:75:48:aa:
                    44:a7:19:b1:85:5f:e1:dd:eb:b2:3c:71:34:f6:aa:
                    bc:4e:aa:86:9e:d8:12:46:ba:10:7c:77:83:a8:63:
                    16:d1:90:b0:e5:90:82:0f:d6:2a:00:78:03:1d:a4:
                    b7:4c:75:72:1f:13:49:42:15:8a:f2:d9:9c:bc:40:
                    26:59:41:2f:2f:18:4d:dc:14:1c:fe:50:87:8e:d8:
                    09:32:05:8a:7f:33:ec:30:2f:79:f3:be:77:e5:98:
                    f2:95:91:ee:7b:43:09:a8:78:d9:8b:88:f9:03:e7:
                    48:ad:25:d6:28:34:dd:21:63:79:aa:90:89:50:c0:
                    18:3e:b4:4f:45:c3:64:c8:47:97:29:ce:6d:dd:ae:
                    c5:0f:2a:03:94:90:92:5b:0f:6c:b0:49:0b:7a:81:
                    8b:62:7e:98:a3:f8:cc:56:db:4e:48:b4:c5:05:14:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:43:C4:0F:EB:96:95:14:12:A2:10:E1:3F:CE:28:BD:2E:D5:0C:2A
            X509v3 Authority Key Identifier:
                keyid:21:07:9D:52:F0:57:9C:14:13:57:01:21:17:FF:79:63:C7:6B:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/21079D52F0579C141357012117FF7963C76BBFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21079D52F0579C141357012117FF7963C76BBFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:d2:30:81:92:59:c5:8c:60:f6:be:9d:37:df:63:e7:02:
         5c:af:4c:f2:1b:ae:05:5c:1f:af:69:a2:e1:30:ed:c9:58:73:
         ff:77:28:2a:f2:33:6e:49:2b:ed:e8:29:11:0f:8d:9f:31:64:
         43:a2:c7:d8:92:73:ca:99:f1:ba:98:80:a7:c5:f5:48:6f:0f:
         39:e5:ea:9c:ce:dd:e4:3c:42:97:35:0f:c4:4a:24:1c:e1:4c:
         c4:53:5c:fe:e2:a6:89:f2:fe:d0:12:9b:45:1e:a9:81:af:59:
         a5:a8:d9:e9:85:0a:96:c6:24:9a:34:35:2b:11:bb:20:b5:7c:
         a5:98:43:e3:77:98:14:f9:cd:94:f6:2f:91:87:16:6b:f4:32:
         c5:b0:65:e5:8f:ae:68:39:8b:8b:f3:37:3d:68:d2:66:c2:68:
         01:c5:2b:be:0d:3c:25:9c:80:05:2a:1b:1e:ed:c8:20:ee:08:
         21:4f:9e:8b:8c:29:15:3a:fe:50:8c:ec:c7:e8:06:f3:98:e4:
         0a:0b:1c:de:c4:77:b7:ea:a3:5f:b6:9d:26:6e:6e:dd:17:eb:
         3c:6e:8d:01:28:db:83:a8:b6:9b:f1:b5:04:c6:24:0a:41:8e:
         69:15:9c:94:59:89:ee:cb:f3:1b:10:86:7f:c3:75:33:8d:15:
         f1:8d:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:21:47 2025 by rpki-client