Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32342d3234203d3e20323731373036.roa
File:                     3230302e38302e39362e302f32342d3234203d3e20323731373036.roa (raw, json)
Hash identifier:          oN7j0crElv5Vu8qzBGXYVc1jRA4RF9VpknJZKLKPUQo=
Subject key identifier:   6D:84:66:4E:24:76:AE:D1:09:33:31:CF:A0:AD:B7:AF:90:1B:78:72
Certificate issuer:       /CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
Certificate serial:       17D613CB059D2988E714492BC294F12529E19791
Authority key identifier: 93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32342d3234203d3e20323731373036.roa
Signing time:             Tue 08 Apr 2025 19:00:19 +0000
ROA not before:           Tue 08 Apr 2025 18:55:19 +0000
ROA not after:            Tue 07 Apr 2026 19:00:19 +0000
asID:                     271706
IP address blocks:        200.80.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Apr 2025 21:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d6:13:cb:05:9d:29:88:e7:14:49:2b:c2:94:f1:25:29:e1:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
        Validity
            Not Before: Apr  8 18:55:19 2025 GMT
            Not After : Apr  7 19:00:19 2026 GMT
        Subject: CN=6D84664E2476AED1093331CFA0ADB7AF901B7872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:0d:86:88:73:dc:55:c0:3d:1d:23:59:4c:
                    2f:b8:39:cb:18:c7:a2:2a:93:33:16:9e:6f:86:76:
                    af:1a:af:7d:07:1f:21:2b:dc:8a:bf:ee:cf:2c:8a:
                    33:3e:31:8b:a1:0a:2a:ce:36:58:91:26:47:f9:2f:
                    09:5a:01:b2:36:b2:8b:5c:3d:f4:31:a1:0d:17:2f:
                    e9:a1:6f:44:0d:64:d1:8b:f8:d3:41:b3:77:6b:e2:
                    b8:d4:f0:a6:c1:e4:2a:c1:fc:33:a9:a0:71:a6:25:
                    a9:d7:f7:83:e4:80:5a:99:bb:e5:bf:57:25:db:80:
                    36:80:62:f4:05:7c:27:77:b9:f5:e3:14:80:04:e1:
                    9f:a2:e1:16:5c:24:c4:8f:66:b0:12:b2:a9:e5:17:
                    bc:1c:01:f2:b6:cb:97:57:8a:4d:15:9d:e0:4b:b3:
                    12:91:83:88:16:5c:5d:31:7f:e2:7b:04:8d:70:0a:
                    ec:73:b4:9d:04:77:cd:74:18:a0:56:b8:15:3f:8b:
                    ad:3b:4f:85:4e:8a:2a:72:32:00:52:b9:cf:77:0d:
                    85:7d:7c:0e:9f:eb:be:09:a8:e2:7d:93:70:3e:c5:
                    4c:1e:95:e1:f6:87:c7:87:d9:4c:28:a3:92:e1:63:
                    99:ba:44:07:74:58:cc:07:1a:85:a2:d8:fe:8c:48:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:66:4E:24:76:AE:D1:09:33:31:CF:A0:AD:B7:AF:90:1B:78:72
            X509v3 Authority Key Identifier:
                keyid:93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39362e302f32342d3234203d3e20323731373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:34:03:2c:a6:f6:a8:5f:45:cf:f4:bf:8a:7d:bf:6f:49:29:
         88:20:38:fd:99:f6:c9:58:9c:26:0f:64:44:1d:3a:60:6a:85:
         4e:45:b5:79:47:91:87:82:54:3c:d1:b1:94:5a:6e:50:cb:96:
         d8:f7:da:6c:74:cb:66:14:d6:79:6f:12:dd:b0:04:b5:6b:fb:
         bf:00:07:02:c3:06:92:94:4d:bc:fb:1f:a1:6c:20:64:fd:5a:
         b1:6e:8e:8f:20:7c:74:bc:77:c4:60:c8:67:49:cc:67:a9:22:
         27:dd:b7:8e:d5:bf:79:f3:b2:6d:68:95:21:32:88:ac:62:67:
         4c:13:99:1e:2d:b4:b9:5a:47:ab:cd:fe:28:44:dd:d1:3a:51:
         7b:46:b2:d3:11:6c:b7:99:06:33:4c:e4:80:9b:27:d1:b0:20:
         50:74:b7:c5:36:fe:7a:a7:44:70:51:ac:ca:0f:84:c2:9c:70:
         3f:3a:8e:58:50:f9:b2:a4:a8:e5:8d:a0:17:e0:25:b0:c6:62:
         2c:c0:1a:a2:68:82:f5:40:41:aa:d0:43:24:60:c2:1d:87:68:
         69:30:de:7d:41:79:02:b7:dd:54:b0:41:00:eb:a0:30:64:5a:
         75:d9:f5:ba:3a:82:06:37:45:e9:8a:9e:6c:0a:3b:1e:35:b7:
         e6:13:8e:6b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF9YTywWdKYjnFEkrwpTxJSnhl5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMzN0M3NDU5NEExQ0RCQTQ2NDg3MjNBNjZFOEI2REFD
Mzc3QjBFQTAeFw0yNTA0MDgxODU1MTlaFw0yNjA0MDcxOTAwMTlaMDMxMTAvBgNV
BAMTKDZEODQ2NjRFMjQ3NkFFRDEwOTMzMzFDRkEwQURCN0FGOTAxQjc4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWng2GiHPcVcA9HSNZTC+4OcsY
x6IqkzMWnm+Gdq8ar30HHyEr3Iq/7s8sijM+MYuhCirONliRJkf5LwlaAbI2sotc
PfQxoQ0XL+mhb0QNZNGL+NNBs3dr4rjU8KbB5CrB/DOpoHGmJanX94PkgFqZu+W/
VyXbgDaAYvQFfCd3ufXjFIAE4Z+i4RZcJMSPZrASsqnlF7wcAfK2y5dXik0VneBL
sxKRg4gWXF0xf+J7BI1wCuxztJ0Ed810GKBWuBU/i607T4VOiipyMgBSuc93DYV9
fA6f674JqOJ9k3A+xUweleH2h8eH2Uwoo5LhY5m6RAd0WMwHGoWi2P6MSBslAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbYRmTiR2rtEJMzHPoK23r5AbeHIwHwYDVR0j
BBgwFoAUkzfHRZShzbpGSHI6Zui22sN3sOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3YxSmk3aWMxM2N5ekRnMkhxNXNhbVdwY0J4dlZacTlkNVVvSmY4eG9F
c0cvMC85MzM3Qzc0NTk0QTFDREJBNDY0ODcyM0E2NkU4QjZEQUMzNzdCMEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMzdDNzQ1OTRBMUNEQkE0
NjQ4NzIzQTY2RThCNkRBQzM3N0IwRUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2MUppN2ljMTNjeXpEZzJIcTVzYW1XcGNCeHZWWnE5ZDVVb0pmOHhvRXNHLzAv
MzIzMDMwMmUzODMwMmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyFBgMA0GCSqGSIb3DQEBCwUAA4IBAQCDNAMspvao
X0XP9L+Kfb9vSSmIIDj9mfbJWJwmD2REHTpgaoVORbV5R5GHglQ80bGUWm5Qy5bY
99psdMtmFNZ5bxLdsAS1a/u/AAcCwwaSlE28+x+hbCBk/Vqxbo6PIHx0vHfEYMhn
ScxnqSIn3beO1b9587JtaJUhMoisYmdME5keLbS5Wkerzf4oRN3ROlF7RrLTEWy3
mQYzTOSAmyfRsCBQdLfFNv56p0RwUazKD4TCnHA/Oo5YUPmypKjljaAX4CWwxmIs
wBqiaIL1QEGq0EMkYMIdh2hpMN59QXkCt91UsEEA66AwZFp12fW6OoIGN0Xpip5s
CjseNbfmE45r
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:30:44 2025 by rpki-client on console.sobornost.net