Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32342d3234203d3e2032363735313332.roa
File:                     3136382e3139342e35362e302f32342d3234203d3e2032363735313332.roa (raw, json)
Hash identifier:          ljGZ48HiPuLaZAYyXK0ppV0kL5gIkyv2MfSjKxPJu/U=
Subject key identifier:   6B:74:BD:A1:10:6C:EE:22:E1:86:C2:67:02:30:E8:15:38:74:C0:2C
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       2FB6620353E6F918760BFF430A59C46C62D60C04
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32342d3234203d3e2032363735313332.roa
Signing time:             Thu 26 Dec 2024 11:37:07 +0000
ROA not before:           Thu 26 Dec 2024 11:32:07 +0000
ROA not after:            Thu 25 Dec 2025 11:37:07 +0000
asID:                     2675132
IP address blocks:        168.194.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Jan 2025 13:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b6:62:03:53:e6:f9:18:76:0b:ff:43:0a:59:c4:6c:62:d6:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Dec 26 11:32:07 2024 GMT
            Not After : Dec 25 11:37:07 2025 GMT
        Subject: CN=6B74BDA1106CEE22E186C2670230E8153874C02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:8b:f0:33:60:76:72:86:7a:b8:df:e7:7c:
                    01:3b:98:22:2e:b9:0d:dc:78:d0:42:4a:22:16:29:
                    b9:f4:69:d8:07:47:b1:34:b9:bf:9f:76:ad:b6:5f:
                    17:f5:1d:35:dd:00:9a:cb:6a:49:82:19:38:71:93:
                    60:2f:5c:6d:cd:47:0e:2d:9c:f2:7d:91:9e:96:78:
                    01:58:23:f7:0b:20:b8:72:a4:e3:8a:7e:8e:e0:b0:
                    f4:be:04:62:f2:34:30:68:93:3f:57:1e:69:d3:e4:
                    53:3d:36:17:0c:04:20:e8:a4:e1:27:59:18:8a:26:
                    f3:f2:41:bc:07:7e:ff:43:a7:76:b7:5b:a8:30:9b:
                    26:ef:ff:4b:3d:25:c2:fc:5e:5b:b3:c2:0e:41:b7:
                    a6:c2:d8:13:a2:dc:b1:c7:6a:a9:ef:b3:ca:58:b5:
                    b6:82:ba:ad:7c:2b:36:ef:10:99:9c:a7:44:1a:af:
                    68:3a:91:96:07:7c:98:65:cf:97:68:81:29:5f:7e:
                    93:b9:eb:64:35:32:74:f8:34:92:ca:86:5a:6f:23:
                    76:4b:89:e0:6d:1e:42:ee:2d:e8:dc:d3:03:36:3b:
                    01:d7:8e:cd:d2:07:f0:9e:2e:49:ce:77:2b:6c:7b:
                    04:3f:cd:a0:ea:1c:fa:c0:d1:d4:1b:5e:d2:f9:26:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:BD:A1:10:6C:EE:22:E1:86:C2:67:02:30:E8:15:38:74:C0:2C
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35362e302f32342d3234203d3e2032363735313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ed:33:58:ab:d2:52:5f:e6:29:51:65:99:ad:0c:a6:9d:a7:
         0a:61:ef:77:9a:c8:26:80:df:83:d7:7a:90:57:1a:03:ec:12:
         22:f3:d4:39:d3:a9:42:1a:2a:72:5b:2d:c5:de:9c:48:28:5e:
         ea:7a:9e:07:42:b8:7e:8a:4c:b1:11:ec:f2:bc:74:d7:98:a3:
         e5:46:f0:07:77:9e:5e:b6:ec:3e:0c:f0:96:f3:c6:8e:c7:1d:
         be:a8:d5:c7:d8:fe:99:fb:28:74:d3:25:19:d6:50:5c:dc:50:
         54:ef:14:a8:ff:c1:5e:de:06:1b:df:23:ca:31:c0:99:c9:ce:
         c3:27:58:1a:17:b7:13:5e:12:44:8d:8d:31:03:29:96:11:5d:
         5b:6e:1b:fb:26:c5:66:4c:b5:7b:52:34:70:09:18:b7:00:77:
         cb:09:dc:8d:7c:68:ec:33:96:4d:64:17:f4:cd:02:46:29:a1:
         df:c5:a2:fc:b5:7d:23:7f:0c:b1:51:46:e4:d3:6e:75:e1:eb:
         ef:f9:85:c4:e4:26:61:e4:e0:14:3c:35:88:0d:d2:4c:fd:4c:
         b2:96:1d:58:a4:4b:35:9e:eb:4c:b2:25:c6:f9:7f:ff:91:97:
         af:ce:87:71:09:20:ab:7e:60:59:03:e7:0d:38:93:28:f8:9b:
         2e:55:6c:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL7ZiA1Pm+Rh2C/9DClnEbGLWDAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNDEyMjYxMTMyMDdaFw0yNTEyMjUxMTM3MDdaMDMxMTAvBgNV
BAMTKDZCNzRCREExMTA2Q0VFMjJFMTg2QzI2NzAyMzBFODE1Mzg3NEMwMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84ovwM2B2coZ6uN/nfAE7mCIu
uQ3ceNBCSiIWKbn0adgHR7E0ub+fdq22Xxf1HTXdAJrLakmCGThxk2AvXG3NRw4t
nPJ9kZ6WeAFYI/cLILhypOOKfo7gsPS+BGLyNDBokz9XHmnT5FM9NhcMBCDopOEn
WRiKJvPyQbwHfv9Dp3a3W6gwmybv/0s9JcL8Xluzwg5Bt6bC2BOi3LHHaqnvs8pY
tbaCuq18KzbvEJmcp0Qar2g6kZYHfJhlz5dogSlffpO562Q1MnT4NJLKhlpvI3ZL
ieBtHkLuLejc0wM2OwHXjs3SB/CeLknOdytsewQ/zaDqHPrA0dQbXtL5JqSPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUa3S9oRBs7iLhhsJnAjDoFTh0wCwwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzNjM4MmUzMTM5MzQyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNTMxMzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCODANBgkqhkiG9w0BAQsFAAOCAQEAju0z
WKvSUl/mKVFlma0Mpp2nCmHvd5rIJoDfg9d6kFcaA+wSIvPUOdOpQhoqclstxd6c
SChe6nqeB0K4fopMsRHs8rx015ij5UbwB3eeXrbsPgzwlvPGjscdvqjVx9j+mfso
dNMlGdZQXNxQVO8UqP/BXt4GG98jyjHAmcnOwydYGhe3E14SRI2NMQMplhFdW24b
+ybFZky1e1I0cAkYtwB3ywncjXxo7DOWTWQX9M0CRimh38Wi/LV9I38MsVFG5NNu
deHr7/mFxOQmYeTgFDw1iA3STP1MspYdWKRLNZ7rTLIlxvl//5GXr86HcQkgq35g
WQPnDTiTKPibLlVsvw==
-----END CERTIFICATE-----
Generated at Tue Jan 7 16:26:53 2025 by rpki-client on console.sobornost.net