Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3233203d3e203631393030.roa
File:                     3137372e37342e3137322e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier:          pu4JvIzyslkjd0ntlVWPnJ3ph2cJj3xcbGCIbUEZWjo=
Subject key identifier:   3B:09:92:68:37:68:E0:1B:91:60:BE:DB:10:69:83:93:A0:F0:30:E9
Certificate issuer:       /CN=717D62DB604520975DE382D0D3273E1BDB591D67
Certificate serial:       5E5C744796A52BFF6547333D869DDB5DC7E264A6
Authority key identifier: 71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3233203d3e203631393030.roa
Signing time:             Wed 16 Apr 2025 14:07:57 +0000
ROA not before:           Wed 16 Apr 2025 14:02:57 +0000
ROA not after:            Wed 15 Apr 2026 14:07:57 +0000
asID:                     61900
IP address blocks:        177.74.172.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 16 Apr 2025 18:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5c:74:47:96:a5:2b:ff:65:47:33:3d:86:9d:db:5d:c7:e2:64:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717D62DB604520975DE382D0D3273E1BDB591D67
        Validity
            Not Before: Apr 16 14:02:57 2025 GMT
            Not After : Apr 15 14:07:57 2026 GMT
        Subject: CN=3B0992683768E01B9160BEDB10698393A0F030E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:6c:d0:49:05:98:2c:b1:cf:e8:92:fe:c5:
                    59:4b:29:01:4f:df:64:bd:1c:e7:a5:73:4b:c4:b3:
                    2b:a9:bf:de:b5:66:04:ef:ba:ab:e3:53:92:89:e3:
                    c2:b6:90:0d:db:ed:73:2d:7f:98:ea:44:03:1e:71:
                    c7:41:17:16:97:fe:5d:bd:06:9a:89:13:df:28:72:
                    05:f9:ce:10:3f:a7:a9:f6:5d:0a:29:af:d1:07:f0:
                    1e:77:e0:3a:e9:43:3c:5c:bd:2e:ec:89:a6:24:54:
                    b4:10:af:ce:93:94:ca:41:34:05:ef:09:11:12:1b:
                    b8:0b:95:61:93:c0:73:7f:e3:8e:b1:fd:64:26:24:
                    73:8f:76:19:be:80:c3:44:b0:a9:92:07:3d:3f:7a:
                    68:bf:59:8d:3c:60:32:f7:e3:aa:bb:1c:69:37:cd:
                    a5:a6:25:fb:35:45:0a:fe:64:5c:2d:3b:75:36:2b:
                    1f:cf:f8:57:c1:80:dd:b2:e3:70:ab:65:86:64:36:
                    be:65:b6:e2:d6:bf:e1:cb:af:c7:5a:a4:e7:be:ad:
                    f7:54:b0:cd:de:a6:fd:67:10:38:6a:1d:f2:74:39:
                    3e:0f:75:05:b0:ec:e9:9c:ab:9f:5e:64:0e:41:a7:
                    e0:a4:a3:db:84:06:5a:14:62:b7:37:0d:8c:dc:7e:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:92:68:37:68:E0:1B:91:60:BE:DB:10:69:83:93:A0:F0:30:E9
            X509v3 Authority Key Identifier:
                keyid:71:7D:62:DB:60:45:20:97:5D:E3:82:D0:D3:27:3E:1B:DB:59:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/717D62DB604520975DE382D0D3273E1BDB591D67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717D62DB604520975DE382D0D3273E1BDB591D67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137322e302f32332d3233203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:14:de:ed:fc:66:f1:d9:ac:65:54:7e:0f:53:84:06:e7:45:
         0b:4d:2a:f8:b5:e3:6f:5e:20:93:06:5f:c8:7e:0b:1c:42:4e:
         e8:42:60:5c:e6:40:1a:df:c0:d3:c0:51:20:3e:43:a5:6f:b8:
         d9:6a:a8:72:77:2f:16:5c:c5:4c:5e:97:6e:fe:02:ee:a6:db:
         0a:02:62:87:75:51:4c:41:05:9f:7b:f2:ef:ba:c5:f9:3c:6f:
         b6:c7:bc:a1:f8:b2:ee:52:57:8d:91:d2:99:2c:62:b8:de:ff:
         3d:d3:63:af:63:87:4b:ef:69:fe:78:d9:b3:6d:ad:76:dd:aa:
         ab:6d:3a:60:7c:e2:fe:c8:ae:ad:ba:8d:6f:57:c0:0d:3f:d8:
         08:4c:d6:ab:44:80:a5:49:04:1a:94:0c:1b:6b:bb:6a:48:8b:
         a1:88:94:b7:5e:e8:14:93:3b:56:8a:1d:d2:e6:cf:ca:45:30:
         09:7d:2b:03:ae:f2:37:47:4d:7c:73:f2:9a:06:ba:08:7c:0c:
         74:f6:13:59:f7:e6:45:bc:69:d6:fa:15:7f:77:06:48:cd:eb:
         a6:63:69:05:c2:2d:f9:4c:32:1b:45:60:9c:4d:37:00:ee:68:
         21:16:b5:2b:f8:ae:b8:72:8a:c1:a5:c2:f8:7e:89:9e:0c:2b:
         5b:ee:2b:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXlx0R5alK/9lRzM9hp3bXcfiZKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3RDYyREI2MDQ1MjA5NzVERTM4MkQwRDMyNzNFMUJE
QjU5MUQ2NzAeFw0yNTA0MTYxNDAyNTdaFw0yNjA0MTUxNDA3NTdaMDMxMTAvBgNV
BAMTKDNCMDk5MjY4Mzc2OEUwMUI5MTYwQkVEQjEwNjk4MzkzQTBGMDMwRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWmzQSQWYLLHP6JL+xVlLKQFP
32S9HOelc0vEsyupv961ZgTvuqvjU5KJ48K2kA3b7XMtf5jqRAMeccdBFxaX/l29
BpqJE98ocgX5zhA/p6n2XQopr9EH8B534DrpQzxcvS7siaYkVLQQr86TlMpBNAXv
CRESG7gLlWGTwHN/446x/WQmJHOPdhm+gMNEsKmSBz0/emi/WY08YDL346q7HGk3
zaWmJfs1RQr+ZFwtO3U2Kx/P+FfBgN2y43CrZYZkNr5ltuLWv+HLr8dapOe+rfdU
sM3epv1nEDhqHfJ0OT4PdQWw7Omcq59eZA5Bp+Cko9uEBloUYrc3DYzcfuRHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOwmSaDdo4BuRYL7bEGmDk6DwMOkwHwYDVR0j
BBgwFoAUcX1i22BFIJdd44LQ0yc+G9tZHWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG80MTRyOGtKWmloUURDdHBMakhFUm1QamN5anB4UFV5d2FSaDllaGNQ
SlgvMC83MTdENjJEQjYwNDUyMDk3NURFMzgyRDBEMzI3M0UxQkRCNTkxRDY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxN0Q2MkRCNjA0NTIwOTc1
REUzODJEMEQzMjczRTFCREI1OTFENjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvNDE0cjhrSlppaFFEQ3RwTGpIRVJtUGpjeWpweFBVeXdhUmg5ZWhjUEpYLzAv
MzEzNzM3MmUzNzM0MmUzMTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzkzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUqsMA0GCSqGSIb3DQEBCwUAA4IBAQAQFN7t/Gbx
2axlVH4PU4QG50ULTSr4teNvXiCTBl/IfgscQk7oQmBc5kAa38DTwFEgPkOlb7jZ
aqhydy8WXMVMXpdu/gLuptsKAmKHdVFMQQWfe/LvusX5PG+2x7yh+LLuUleNkdKZ
LGK43v8902OvY4dL72n+eNmzba123aqrbTpgfOL+yK6tuo1vV8ANP9gITNarRICl
SQQalAwba7tqSIuhiJS3XugUkztWih3S5s/KRTAJfSsDrvI3R018c/KaBroIfAx0
9hNZ9+ZFvGnW+hV/dwZIzeumY2kFwi35TDIbRWCcTTcA7mghFrUr+K64corBpcL4
fomeDCtb7is7
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:42:22 2025 by rpki-client on console.sobornost.net