Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa
File:                     3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa (raw, json)
Hash identifier:          DGqGTMGn0WS4dZ406inIXr03o2DC95KdfCl2r4KJaKw=
Subject key identifier:   E3:AB:3B:C7:89:93:A6:A1:BE:B5:44:11:46:13:41:49:6C:27:B5:E0
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       75060F85E87553206CA36569105C433625423494
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa
Signing time:             Thu 06 Mar 2025 07:52:46 +0000
ROA not before:           Thu 06 Mar 2025 07:47:46 +0000
ROA not after:            Thu 05 Mar 2026 07:52:46 +0000
asID:                     265935
IP address blocks:        164.163.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 21:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:0f:85:e8:75:53:20:6c:a3:65:69:10:5c:43:36:25:42:34:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  6 07:47:46 2025 GMT
            Not After : Mar  5 07:52:46 2026 GMT
        Subject: CN=E3AB3BC78993A6A1BEB54411461341496C27B5E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:9d:32:e4:89:fc:e2:e9:7d:22:c8:3f:59:
                    d2:b5:3c:e9:7e:38:0b:1e:43:83:bf:f4:cf:65:a7:
                    d8:b9:85:ca:00:9d:6d:25:dd:fd:fc:39:3e:ee:24:
                    9d:44:29:06:dc:2b:b5:90:dc:d9:28:cb:6e:4e:fa:
                    04:a2:cd:ac:28:7e:f2:9e:1c:e2:39:8d:81:7c:78:
                    d7:7c:1c:45:d0:b0:6b:3b:5a:87:62:13:30:e4:db:
                    5b:d0:a5:b9:7c:50:2b:d8:5e:24:26:02:63:f1:cd:
                    9b:80:d0:fa:7c:2f:54:82:1d:3f:47:67:4c:8d:a7:
                    ba:5e:1d:78:9d:13:ab:1b:72:22:95:7b:a0:cb:f6:
                    57:60:c6:4f:45:28:79:25:5e:9e:68:ba:81:a5:18:
                    7e:ed:c9:d5:92:7f:f0:85:bb:91:59:b7:6a:f5:ac:
                    a2:d1:4c:e4:ff:8d:98:ff:94:1f:b5:e2:e5:9a:2e:
                    f3:4f:1e:75:54:c8:57:0b:8f:7c:38:ab:0a:5c:6c:
                    3b:39:2c:56:3a:8b:e9:85:80:72:29:49:b0:0d:e5:
                    08:f6:3f:b8:92:cf:12:ff:6b:41:aa:64:e9:78:7d:
                    c0:4e:b7:8b:b5:40:0f:86:53:da:dd:74:11:7b:21:
                    79:93:10:2c:32:d4:ba:ea:69:6c:b6:54:69:d7:4b:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:3B:C7:89:93:A6:A1:BE:B5:44:11:46:13:41:49:6C:27:B5:E0
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32302e302f32342d3234203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7e:47:cd:47:b8:02:ba:7a:9d:6a:71:ce:00:b1:7c:40:88:
         8c:99:2a:2f:73:08:f5:25:ed:1d:d3:4c:dc:48:c1:71:13:c8:
         a4:ee:6f:99:b1:f8:bf:8d:d4:4b:95:82:74:ee:f4:4d:d4:9c:
         b3:6e:c3:e1:71:d9:98:0e:85:15:54:9e:b6:70:97:ff:75:6e:
         09:72:a0:3d:98:5e:ce:7e:e0:78:4c:d3:d1:5a:67:19:c3:b1:
         26:8a:93:6f:aa:2a:3a:46:d0:e8:04:28:00:1a:83:ef:80:e0:
         d6:ef:9e:4e:d7:5f:03:58:ed:ad:c2:eb:68:ef:6a:33:c6:9d:
         c6:63:95:93:c8:38:ab:3c:4e:32:c2:b0:0a:df:68:79:b7:60:
         cf:2d:4c:05:1a:7b:49:3f:6f:e7:3f:08:d8:bf:8d:da:f0:14:
         f1:5f:cc:e7:5a:e7:82:59:2f:20:fe:42:54:8a:24:7f:57:4b:
         6d:dd:99:d6:af:39:18:99:04:8f:8d:2d:75:b7:2a:b7:ca:66:
         e1:b6:33:b8:e1:21:13:99:be:e4:3d:ab:e9:3d:00:e6:39:04:
         ba:68:15:31:c9:e9:e3:40:ef:a9:05:8e:a0:88:92:2a:c0:04:
         9f:22:bb:7a:06:db:66:6f:a4:74:7d:ab:1d:28:04:2b:f4:59:
         ee:53:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net