Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa
File:                     3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa (raw, json)
Hash identifier:          ASTr2xW6coA18yayAfenJ2GkpSYJ6yfxKKWOnLkiAtE=
Subject key identifier:   3E:9A:1F:3D:4E:40:BB:F6:60:A2:9F:D8:61:59:69:C6:28:99:D1:30
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       057BFF8698A908E4399939870AA6195CD6D042E7
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa
Signing time:             Thu 06 Mar 2025 07:52:46 +0000
ROA not before:           Thu 06 Mar 2025 07:47:46 +0000
ROA not after:            Thu 05 Mar 2026 07:52:46 +0000
asID:                     265935
IP address blocks:        164.163.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 14 Apr 2025 21:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7b:ff:86:98:a9:08:e4:39:99:39:87:0a:a6:19:5c:d6:d0:42:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  6 07:47:46 2025 GMT
            Not After : Mar  5 07:52:46 2026 GMT
        Subject: CN=3E9A1F3D4E40BBF660A29FD8615969C62899D130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:d1:7f:8d:63:f9:2c:d3:a5:a1:17:90:4c:
                    ef:f7:ca:50:62:6c:48:22:ac:18:47:76:68:47:0e:
                    13:c9:a7:18:54:5a:83:4f:ca:8e:d0:01:44:6b:b1:
                    b8:3c:dd:fb:a1:d5:05:c6:75:ed:c7:b3:b2:a8:7b:
                    af:d0:68:9c:a6:0e:75:5e:e9:dd:cd:c5:41:30:2f:
                    16:0f:cf:c4:3d:3e:4b:ea:95:3b:6d:c3:ea:be:0e:
                    59:54:6e:8c:77:ec:89:76:92:30:7c:34:45:0a:45:
                    b2:c7:86:3f:50:db:8c:b7:fb:c4:66:e3:12:08:75:
                    14:0f:44:87:fe:67:22:51:b0:a7:92:81:7e:c5:31:
                    87:0a:45:85:0d:af:ac:e3:b9:52:b5:c6:8e:a5:9a:
                    e6:91:1a:03:f5:96:c0:d8:9e:12:ef:47:97:46:fd:
                    49:d1:36:49:70:a2:14:88:ae:32:e6:ef:0f:09:c2:
                    41:f6:58:61:58:57:fe:eb:ea:82:0f:c9:f4:ea:9f:
                    80:64:0d:ff:b6:47:a0:dc:4a:6d:4e:4a:45:c7:52:
                    c4:78:7c:48:97:12:44:e6:f2:0b:87:94:5b:85:95:
                    68:69:40:5b:0a:bd:99:10:d3:94:b1:69:9b:25:69:
                    75:12:4b:68:2a:b9:93:3d:26:e5:87:75:17:97:fd:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:1F:3D:4E:40:BB:F6:60:A2:9F:D8:61:59:69:C6:28:99:D1:30
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32322e302f32332d3233203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:5a:cb:72:88:6a:ca:28:e0:8d:f1:28:59:14:80:32:9c:
         d8:8d:e7:bc:fa:34:18:73:2d:df:54:17:96:12:dd:83:16:b3:
         82:43:e5:ce:2f:7c:af:4e:8b:69:2b:24:a0:78:dc:d3:62:7a:
         e3:9e:9c:cf:61:6a:25:98:5b:02:d2:67:12:ab:a5:5f:2a:e5:
         48:5a:78:ee:b4:b9:e6:4d:be:d8:4b:6e:3c:50:ed:87:42:15:
         e6:d7:03:bc:33:b8:a7:c8:88:13:8b:81:6f:8e:b1:de:cd:e7:
         4a:50:21:72:4d:06:ae:6f:d2:92:aa:fb:e4:a0:67:70:51:1f:
         b9:bc:71:78:4f:03:d9:0d:5c:1f:be:1e:38:d1:fd:45:ea:c5:
         bb:e7:b1:43:3a:60:8e:b9:ec:12:e4:f0:9f:ea:71:bf:8b:3e:
         05:1a:14:c0:a5:b0:ee:99:ac:5c:89:5d:19:5c:08:1a:c2:37:
         2b:dd:a9:2c:7a:c3:81:a6:00:e5:d8:bb:5c:cf:ca:4d:6f:85:
         76:ab:4d:27:d0:bf:9e:d5:c3:37:5d:52:24:59:29:56:31:40:
         b8:6e:20:4c:b3:7f:d2:7b:1b:b8:17:b0:e1:03:ef:6e:fb:c0:
         77:68:c4:2b:58:94:dd:29:61:86:5c:62:1c:1a:e3:30:9d:ca:
         0e:70:2d:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBXv/hpipCOQ5mTmHCqYZXNbQQucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNTAzMDYwNzQ3NDZaFw0yNjAzMDUwNzUyNDZaMDMxMTAvBgNV
BAMTKDNFOUExRjNENEU0MEJCRjY2MEEyOUZEODYxNTk2OUM2Mjg5OUQxMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvNF/jWP5LNOloReQTO/3ylBi
bEgirBhHdmhHDhPJpxhUWoNPyo7QAURrsbg83fuh1QXGde3Hs7Koe6/QaJymDnVe
6d3NxUEwLxYPz8Q9PkvqlTttw+q+DllUbox37Il2kjB8NEUKRbLHhj9Q24y3+8Rm
4xIIdRQPRIf+ZyJRsKeSgX7FMYcKRYUNr6zjuVK1xo6lmuaRGgP1lsDYnhLvR5dG
/UnRNklwohSIrjLm7w8JwkH2WGFYV/7r6oIPyfTqn4BkDf+2R6DcSm1OSkXHUsR4
fEiXEkTm8guHlFuFlWhpQFsKvZkQ05SxaZslaXUSS2gquZM9JuWHdReX/cSzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPpofPU5Au/Zgop/YYVlpxiiZ0TAwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzEzNjM0MmUzMTM2MzMyZTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGkoxYwDQYJKoZIhvcNAQELBQADggEBAEtuWsty
iGrKKOCN8ShZFIAynNiN57z6NBhzLd9UF5YS3YMWs4JD5c4vfK9Oi2krJKB43NNi
euOenM9haiWYWwLSZxKrpV8q5UhaeO60ueZNvthLbjxQ7YdCFebXA7wzuKfIiBOL
gW+Osd7N50pQIXJNBq5v0pKq++SgZ3BRH7m8cXhPA9kNXB++HjjR/UXqxbvnsUM6
YI657BLk8J/qcb+LPgUaFMClsO6ZrFyJXRlcCBrCNyvdqSx6w4GmAOXYu1zPyk1v
hXarTSfQv57VwzddUiRZKVYxQLhuIEyzf9J7G7gXsOED7277wHdoxCtYlN0pYYZc
Yhwa4zCdyg5wLRs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net