Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3232203d3e20323731373036.roa
File:                     3230302e38302e39362e302f32322d3232203d3e20323731373036.roa (raw, json)
Hash identifier:          0hWtQF+igRv3zVUT2O/GhU7l1Cvd+BOcefQQCyZ58hc=
Subject key identifier:   52:84:30:C3:9E:0F:6F:56:C8:DB:14:FD:79:32:DF:EE:28:CE:8D:30
Certificate issuer:       /CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
Certificate serial:       2FC47336E619105109778FCCBCC5DB922D6E8B6E
Authority key identifier: 93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3232203d3e20323731373036.roa
Signing time:             Tue 08 Apr 2025 18:05:00 +0000
ROA not before:           Tue 08 Apr 2025 18:00:00 +0000
ROA not after:            Tue 07 Apr 2026 18:05:00 +0000
asID:                     271706
IP address blocks:        200.80.96.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 08 Apr 2025 21:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c4:73:36:e6:19:10:51:09:77:8f:cc:bc:c5:db:92:2d:6e:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
        Validity
            Not Before: Apr  8 18:00:00 2025 GMT
            Not After : Apr  7 18:05:00 2026 GMT
        Subject: CN=528430C39E0F6F56C8DB14FD7932DFEE28CE8D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:91:49:ea:31:5c:a8:07:e4:b3:81:4b:cc:
                    f9:84:1f:60:e1:df:3b:6a:4d:1b:db:7e:b1:91:91:
                    60:3a:96:69:bf:c2:07:8f:35:77:c3:ea:95:07:dd:
                    e2:0f:60:0f:2f:1f:57:c6:04:75:3e:36:a9:56:9f:
                    58:e5:92:1a:8b:c6:6f:ef:32:ae:3f:f5:b8:4e:5b:
                    0e:51:bd:29:1c:bc:0c:c6:bc:ce:53:09:fa:35:51:
                    07:1b:ed:38:51:e2:e1:c5:ea:46:b2:4b:57:04:58:
                    7b:f1:40:dd:10:d7:5d:47:78:0b:7e:a2:f7:8e:dd:
                    23:1c:b5:62:7f:a6:23:e5:81:d2:1c:ac:5e:1a:d2:
                    b6:76:80:6b:54:84:a2:ef:e2:e3:8b:b6:65:51:27:
                    0e:09:08:07:d2:cc:cd:bb:09:01:53:44:91:57:47:
                    f2:74:e0:dc:c2:b6:c6:e2:e1:5c:e1:ba:22:37:1a:
                    7e:74:f2:80:d1:de:75:54:09:18:30:b0:f5:7d:ee:
                    2f:83:9b:19:07:1c:64:0a:26:f9:87:ff:4a:5e:29:
                    38:1c:57:a8:d8:04:a3:28:5f:e2:82:b6:c6:86:09:
                    b7:2f:29:89:97:1c:0a:56:62:51:94:17:9e:d6:1d:
                    41:c8:44:f2:1f:f3:ec:d3:fa:e3:db:7f:1d:44:f2:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:30:C3:9E:0F:6F:56:C8:DB:14:FD:79:32:DF:EE:28:CE:8D:30
            X509v3 Authority Key Identifier:
                keyid:93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32322d3232203d3e20323731373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:76:93:2a:e3:ab:e8:1c:15:74:2e:30:e6:15:39:02:07:18:
         99:84:6c:be:8d:14:65:97:c7:2c:8c:ce:18:99:0a:7b:23:3b:
         b6:8f:f0:73:47:b5:d3:0a:b8:55:6e:b0:17:8c:3f:28:49:ba:
         ff:10:18:06:0f:ae:d3:34:13:68:b1:ce:a0:df:95:db:10:ba:
         6a:51:72:0f:56:39:e9:2f:1a:99:f3:31:13:f5:f1:23:40:98:
         f6:d4:1a:13:12:7e:ad:11:58:a1:51:db:5f:f7:40:e5:b2:84:
         5b:b2:79:9f:35:8f:d0:ec:d1:24:cb:a8:60:74:23:8c:88:e2:
         07:2c:61:5b:b3:61:63:74:18:b1:b4:39:57:5b:07:4f:cf:70:
         89:b7:a8:57:93:9f:57:ee:fa:0b:5f:1e:59:a2:73:f1:34:68:
         bd:86:1d:6f:45:8b:dd:76:a0:ab:db:b2:02:c1:66:2d:c2:be:
         e7:ae:11:3e:10:52:c8:65:6c:c0:3f:53:77:06:e2:14:e8:ec:
         99:25:be:57:e7:ff:60:70:75:a2:da:13:89:50:6d:44:21:d5:
         c4:62:f8:d8:fc:e3:73:b3:fc:23:43:b2:f7:ca:45:06:2a:79:
         0b:63:3a:a3:4f:85:94:a6:eb:91:41:17:89:70:1f:a0:11:61:
         8b:b1:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:30:44 2025 by rpki-client on console.sobornost.net