Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3232203d3e20323634353138.roa
File:                     3133312e3235352e37362e302f32322d3232203d3e20323634353138.roa (raw, json)
Hash identifier:          aaRPxpNt1bZoa9JxOQvlzXrUaikZN1kmDXM7vZPNINo=
Subject key identifier:   B2:7C:C4:82:EA:A7:08:C0:02:27:77:44:D3:8E:2E:B2:F4:FE:AD:80
Certificate issuer:       /CN=22CB937D7A1CC3A0570501B2B0718242D450D682
Certificate serial:       34E9816D16EF8EA884ACE26C32AC41D2A08EB3C2
Authority key identifier: 22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3232203d3e20323634353138.roa
Signing time:             Tue 23 Apr 2024 12:35:38 +0000
ROA not before:           Tue 23 Apr 2024 12:30:38 +0000
ROA not after:            Tue 22 Apr 2025 12:35:38 +0000
asID:                     264518
IP address blocks:        131.255.76.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 13:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:81:6d:16:ef:8e:a8:84:ac:e2:6c:32:ac:41:d2:a0:8e:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CB937D7A1CC3A0570501B2B0718242D450D682
        Validity
            Not Before: Apr 23 12:30:38 2024 GMT
            Not After : Apr 22 12:35:38 2025 GMT
        Subject: CN=B27CC482EAA708C002277744D38E2EB2F4FEAD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:4c:07:26:29:73:e5:6a:d8:7c:b7:93:93:
                    29:9d:73:de:e4:61:da:94:24:ff:6d:e0:58:19:13:
                    0d:be:e0:5f:a5:62:9c:75:62:0e:ce:a4:3f:b5:00:
                    e3:a4:0c:42:56:a8:f3:e8:22:8b:84:77:3a:c5:6e:
                    ef:bd:92:e0:57:3f:a3:1c:18:f3:f1:e7:46:6d:e6:
                    20:b6:de:36:72:44:c5:8e:9b:3c:f0:78:01:06:97:
                    69:48:f4:12:0b:03:58:c0:b8:df:13:21:fd:07:0e:
                    3f:d1:cf:c5:27:69:7d:13:8a:78:14:f2:2c:50:9b:
                    d3:19:2f:93:e8:36:eb:8e:ad:94:89:be:27:62:59:
                    eb:50:f7:63:bc:47:cf:07:b7:a3:c3:30:70:35:ec:
                    a0:36:45:6a:4e:b1:b7:0a:dd:ff:f6:b6:ca:48:0c:
                    8f:b9:de:f7:57:33:8d:21:76:1d:db:63:7a:88:b4:
                    e1:f8:87:8c:f3:68:fc:d4:e7:9b:e8:11:6e:40:63:
                    52:e2:cb:35:3e:c2:28:62:54:9a:c1:65:13:a2:7e:
                    aa:59:a7:b0:66:21:12:5c:12:5b:db:5b:1e:17:da:
                    df:9f:2c:b1:82:16:69:23:93:52:16:d1:29:c1:7b:
                    7f:e5:b2:3b:06:93:38:28:d7:39:15:6c:88:6e:d7:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:C4:82:EA:A7:08:C0:02:27:77:44:D3:8E:2E:B2:F4:FE:AD:80
            X509v3 Authority Key Identifier:
                keyid:22:CB:93:7D:7A:1C:C3:A0:57:05:01:B2:B0:71:82:42:D4:50:D6:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/22CB937D7A1CC3A0570501B2B0718242D450D682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CB937D7A1CC3A0570501B2B0718242D450D682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cpRMVGxeDfgcEj9pUeMS8MP9YrmoSioeJ8bJbHpWcLe/0/3133312e3235352e37362e302f32322d3232203d3e20323634353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:99:38:c5:53:f0:86:91:f4:be:97:92:2d:e7:9c:87:c6:9e:
         bb:04:37:9c:6e:c7:27:da:fb:1d:e7:6e:7b:fd:31:9c:02:e2:
         ee:1a:8e:c0:1e:a8:0f:8c:a7:8b:17:88:f2:55:2c:e1:5c:bb:
         ff:06:11:6b:11:fb:a2:b2:7a:81:d3:2f:37:9f:d6:bd:01:c3:
         14:df:b3:38:a4:aa:04:d0:62:98:06:b4:45:f4:de:b1:0e:e5:
         d0:b5:7d:17:6e:97:16:c8:ef:81:63:e5:33:dc:b7:c9:20:e2:
         3b:e1:2f:3f:c7:54:65:74:46:06:7b:13:74:57:2a:3d:9a:20:
         ce:ab:87:28:ab:3a:dc:2f:51:0f:39:11:d4:a8:52:e9:ed:3b:
         da:49:0b:d9:0c:ad:0f:ae:8b:38:e8:65:e4:b5:95:26:e5:07:
         14:9d:d0:81:02:f3:19:12:02:7f:a4:f4:2a:8e:76:e0:41:2b:
         ef:98:e7:c0:ab:aa:1e:b2:d0:98:2a:46:cd:12:f8:15:0b:19:
         05:81:3f:ac:01:4e:dd:99:86:0b:37:b0:d0:f4:4d:03:d7:07:
         a9:de:a6:8a:56:a6:4a:6c:2f:15:2c:ad:b2:cb:1f:06:40:90:
         37:cd:19:20:cc:f1:32:9f:4c:c6:69:eb:f4:c3:5a:64:61:6c:
         62:d7:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:34 2024 by rpki-client on console.sobornost.net