Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39382e302f32342d3234203d3e20323731373036.roa
File:                     3230302e38302e39382e302f32342d3234203d3e20323731373036.roa (raw, json)
Hash identifier:          QXGZSSBCNVNstnpyfO6pMDlQeYlpJVnTFN9vwguFt04=
Subject key identifier:   FB:71:8B:E3:92:FB:03:12:D5:72:AE:4D:12:DD:BB:0E:7E:C8:00:8E
Certificate issuer:       /CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
Certificate serial:       6248376DCD95920ECC1CB5EBABFE7D1DA335C164
Authority key identifier: 93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39382e302f32342d3234203d3e20323731373036.roa
Signing time:             Tue 08 Apr 2025 19:00:19 +0000
ROA not before:           Tue 08 Apr 2025 18:55:19 +0000
ROA not after:            Tue 07 Apr 2026 19:00:19 +0000
asID:                     271706
IP address blocks:        200.80.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Apr 2025 21:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:37:6d:cd:95:92:0e:cc:1c:b5:eb:ab:fe:7d:1d:a3:35:c1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9337C74594A1CDBA4648723A66E8B6DAC377B0EA
        Validity
            Not Before: Apr  8 18:55:19 2025 GMT
            Not After : Apr  7 19:00:19 2026 GMT
        Subject: CN=FB718BE392FB0312D572AE4D12DDBB0E7EC8008E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:53:e0:46:f9:ec:e6:81:3a:b9:3f:8e:a0:
                    3c:7d:37:87:16:05:ce:9f:80:a1:0d:14:c6:f7:ed:
                    a6:0a:07:71:25:be:c6:7d:b0:b5:4c:60:38:35:d7:
                    67:14:f9:e0:68:77:20:b4:69:d6:bf:2e:99:2f:b0:
                    41:a3:33:65:13:49:f8:de:23:a3:0b:c9:0a:92:c1:
                    8e:62:8c:0e:f4:24:b0:61:c2:58:12:0c:ad:8d:26:
                    0c:7b:17:13:eb:36:34:88:98:41:88:d4:46:bd:d9:
                    92:60:2e:6b:a1:a8:5d:d4:c6:b7:18:7d:e8:e8:0c:
                    34:83:7b:d9:c5:79:c9:26:df:5a:b0:1a:6e:05:a6:
                    48:11:44:6a:e1:24:22:9d:5a:10:a5:6f:1c:d3:e4:
                    4b:16:b7:71:30:d4:a4:5e:a9:de:c6:8c:21:16:75:
                    45:46:01:40:5b:f4:6c:ce:47:6d:32:81:a9:cd:5c:
                    66:43:29:60:f7:bd:08:64:02:6e:8c:7f:19:e7:ac:
                    19:a6:94:81:be:9b:2a:a3:1e:09:f7:72:41:68:98:
                    5a:14:2f:7f:ca:5c:7f:fa:9b:2c:15:04:a7:35:42:
                    ff:fe:e0:74:3d:d8:58:41:e8:a1:44:af:28:cc:c8:
                    25:ac:7d:4f:55:7d:09:9a:aa:a2:af:8c:a7:7f:a8:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:8B:E3:92:FB:03:12:D5:72:AE:4D:12:DD:BB:0E:7E:C8:00:8E
            X509v3 Authority Key Identifier:
                keyid:93:37:C7:45:94:A1:CD:BA:46:48:72:3A:66:E8:B6:DA:C3:77:B0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9337C74594A1CDBA4648723A66E8B6DAC377B0EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v1Ji7ic13cyzDg2Hq5samWpcBxvVZq9d5UoJf8xoEsG/0/3230302e38302e39382e302f32342d3234203d3e20323731373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:76:14:31:7e:12:a0:c0:04:0a:88:31:4f:5f:a9:d1:55:
         29:5d:1e:e4:e4:3f:3d:3a:3c:b3:ad:c5:f8:88:2e:b0:6c:7c:
         65:73:f2:f6:02:67:8b:34:5c:5a:3b:66:82:f2:36:d0:c6:9e:
         2d:8c:df:a2:98:ad:89:76:49:9b:0e:25:a1:2b:44:30:d3:68:
         28:04:1c:33:0e:82:e6:59:95:68:40:ab:91:38:d4:b6:3e:6b:
         38:93:00:a8:63:e0:ae:3c:5d:49:36:4a:70:40:6a:50:c1:cf:
         c8:07:06:71:c1:36:ce:87:fc:c9:43:82:c1:da:a1:36:d0:c5:
         bf:2e:b8:ed:d2:6a:36:3c:12:66:7f:62:d4:7a:fb:03:29:64:
         11:1b:2b:06:15:5d:f6:25:c1:a0:2e:21:01:b7:e6:9d:33:1e:
         dc:a9:dd:b2:b6:d6:a2:d8:a2:60:82:3f:7f:fd:ac:67:36:55:
         51:61:d5:fb:85:e2:3a:da:7f:aa:19:de:0e:94:51:db:ec:27:
         7a:60:db:c9:4c:51:e0:cd:bc:36:cc:e2:c0:fd:27:9a:66:89:
         58:ab:30:74:32:eb:f5:d2:ac:75:16:f9:47:6e:46:8b:42:56:
         7f:bc:ea:1d:41:6d:fa:1b:48:6d:9e:6e:f0:4d:73:ac:cc:2b:
         00:79:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:30:44 2025 by rpki-client on console.sobornost.net