Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa
File:                     3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          ylx/2k6NoBefOueNl9ceI0Pjj3GEke4yle+mFWKF2Go=
Subject key identifier:   19:A3:D5:42:B4:05:E9:0C:D5:2A:D1:6F:66:09:72:C1:1E:EA:2B:40
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       21F5413053F8311D60ED912D09DED2BEEEE04ACB
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa
Signing time:             Wed 23 Apr 2025 12:16:52 +0000
ROA not before:           Wed 23 Apr 2025 12:11:52 +0000
ROA not after:            Wed 22 Apr 2026 12:16:52 +0000
asID:                     264120
IP address blocks:        181.232.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Apr 2025 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f5:41:30:53:f8:31:1d:60:ed:91:2d:09:de:d2:be:ee:e0:4a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 23 12:11:52 2025 GMT
            Not After : Apr 22 12:16:52 2026 GMT
        Subject: CN=19A3D542B405E90CD52AD16F660972C11EEA2B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b9:81:05:e8:41:89:24:cd:3a:30:47:de:98:
                    17:79:57:e2:15:f5:27:e9:6d:ef:70:5e:4b:54:ab:
                    91:d4:c3:28:3a:4a:0c:05:0e:30:ca:9d:42:fb:e9:
                    df:4b:1b:ba:bb:bf:00:fa:8b:7c:4a:14:b5:cf:55:
                    83:e6:a0:26:d1:7a:43:dc:b7:28:f9:c9:6b:08:d2:
                    89:68:59:93:07:9f:6c:bd:83:64:cd:ed:cc:19:07:
                    18:a3:ce:ed:b4:ee:56:d2:bf:7b:ca:35:59:20:e1:
                    b1:19:ce:59:ec:85:64:6c:97:12:0c:26:86:a5:54:
                    65:17:2c:c8:b3:68:fa:de:a6:73:b4:05:c3:20:45:
                    09:13:ec:9b:4e:47:c6:b8:f5:61:79:6e:5b:9d:f0:
                    f2:91:1f:75:6e:b4:a0:10:c9:26:4e:68:da:e9:6e:
                    47:0e:1f:ab:9a:a2:45:08:1b:31:55:8d:c1:e0:ec:
                    4a:49:d8:18:66:5a:b8:4a:8d:d7:22:b5:a0:db:9c:
                    1e:56:42:7c:1e:6f:28:6f:23:5f:e6:5f:e9:1f:94:
                    ef:a7:cb:33:8d:f1:2f:c6:ae:95:cd:0b:6d:ec:86:
                    cd:ce:f0:3d:88:21:cd:ab:26:47:4e:7c:49:db:78:
                    c0:af:bc:2d:0e:29:02:5b:e7:f7:fe:6d:10:f9:67:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A3:D5:42:B4:05:E9:0C:D5:2A:D1:6F:66:09:72:C1:1E:EA:2B:40
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:9d:50:61:47:51:20:d4:79:5c:02:a0:ec:e2:20:14:a6:8a:
         b0:cb:fd:55:16:4d:fe:c8:86:7e:20:c8:71:de:bb:74:bb:15:
         54:af:a7:c8:ac:2d:91:b6:1b:34:6b:a6:6a:48:71:87:53:59:
         5f:33:61:a9:3f:16:31:86:52:f0:31:74:85:99:2e:32:d3:72:
         eb:01:99:72:f6:f8:31:e2:02:2d:04:37:d9:94:2d:c5:d9:8a:
         97:b2:e3:7f:74:76:d2:c7:be:b2:d6:2b:b7:cc:49:09:f2:2b:
         81:cb:88:63:71:ff:ae:3c:7e:b1:9e:a3:31:5a:1e:e3:66:26:
         b8:e4:18:d6:86:cd:1d:e2:c1:0c:f2:07:de:0f:cd:1a:d7:74:
         87:0f:45:c1:e6:78:df:36:40:75:20:c4:db:7d:83:01:cd:29:
         04:88:07:80:ea:13:c4:b3:c9:bf:65:fb:69:c0:db:21:96:4a:
         ca:8e:1a:f5:0c:a3:76:5d:59:3d:5e:36:97:d0:3d:2c:a1:e1:
         45:5c:11:cb:de:5a:6f:bb:33:1a:e3:45:fa:af:91:e2:0f:e3:
         9c:2a:4f:40:f9:cd:a4:d3:5b:57:b5:c3:50:0b:71:bb:24:f6:
         61:b1:81:da:c8:64:22:a6:14:36:8f:14:dd:94:38:11:ed:fe:
         c6:e5:07:70
-----BEGIN CERTIFICATE-----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Generated at Wed Apr 23 22:16:06 2025 by rpki-client on console.sobornost.net