Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3232203d3e20323730353936.roa
File:                     3138372e31372e3133362e302f32322d3232203d3e20323730353936.roa (raw, json)
Hash identifier:          9qTT4SyBeJ9taDI8n2CXi9KBiqnyEUoCFVTHD9TS+r0=
Subject key identifier:   93:76:4D:B9:A9:14:93:FD:C0:C1:C6:4B:F3:F8:5C:E0:0D:31:13:9C
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       1137E813D08E4D4D02050479D5BFB521B8079A24
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3232203d3e20323730353936.roa
Signing time:             Mon 14 Apr 2025 21:15:29 +0000
ROA not before:           Mon 14 Apr 2025 21:10:29 +0000
ROA not after:            Mon 13 Apr 2026 21:15:29 +0000
asID:                     270596
IP address blocks:        187.17.136.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 17 Apr 2025 13:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:37:e8:13:d0:8e:4d:4d:02:05:04:79:d5:bf:b5:21:b8:07:9a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Apr 14 21:10:29 2025 GMT
            Not After : Apr 13 21:15:29 2026 GMT
        Subject: CN=93764DB9A91493FDC0C1C64BF3F85CE00D31139C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:02:0e:57:3f:23:3a:dd:57:35:03:83:fe:2f:
                    e2:d4:1b:40:0e:6f:c0:12:c8:7b:5e:00:c3:d6:a8:
                    f8:d1:0a:40:67:49:46:10:15:d8:d2:d1:f0:eb:1b:
                    59:8b:ea:74:b0:55:6c:32:e3:26:7b:2d:ba:8d:65:
                    0a:4d:d7:6a:8d:6f:79:39:56:f6:2a:09:60:e1:6c:
                    69:e9:4b:66:56:6e:da:57:e7:c9:65:f6:22:7b:18:
                    52:79:c0:b4:94:e2:88:82:7c:08:cc:d6:b4:7c:82:
                    79:b6:c4:0a:d1:42:12:0d:07:2f:98:69:34:0d:d9:
                    b8:0b:10:dd:f3:c1:99:cc:a7:c6:b4:2e:dd:7c:7c:
                    6a:97:8a:90:95:b1:f0:a2:fc:bf:fa:e3:0f:29:64:
                    b8:f8:cd:b1:c0:57:0c:02:01:58:68:57:d9:af:49:
                    9d:bd:ff:5d:77:5d:28:91:d0:b5:89:b2:b6:81:27:
                    4f:e1:fd:0d:8a:91:68:20:24:fc:03:36:d2:1a:9a:
                    bd:2c:69:0f:ed:69:29:66:e1:aa:e7:92:8c:5d:0e:
                    e7:02:8d:df:79:81:0d:47:4b:21:7f:22:dc:81:5f:
                    ed:0b:05:85:a2:7f:c1:e7:91:c1:9d:d7:fe:12:35:
                    f3:ab:6e:a7:d1:b3:a9:04:62:db:af:cc:2b:f6:68:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:4D:B9:A9:14:93:FD:C0:C1:C6:4B:F3:F8:5C:E0:0D:31:13:9C
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/3138372e31372e3133362e302f32322d3232203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:a0:7f:01:c0:70:a7:ec:72:72:75:1c:9d:3a:18:fa:0c:a9:
         52:86:f9:3e:e3:6d:c5:04:5c:b3:ce:2d:ee:b1:75:57:83:be:
         f5:72:7a:5f:79:73:a2:56:e0:28:2c:5a:77:6f:02:31:18:ee:
         79:ee:8d:8d:94:20:c1:83:fb:da:df:70:c3:cc:5c:5d:ef:56:
         77:45:d2:f5:e5:01:a3:6a:90:e6:a5:ca:1b:c5:b9:f0:8a:a6:
         b7:8b:56:d7:4f:37:4e:3f:dc:43:3b:72:26:5c:ef:61:1c:25:
         9c:69:c4:39:28:c4:72:06:f1:32:ad:64:34:e7:63:c9:d6:56:
         75:a7:5b:3f:8d:af:fc:8e:7e:11:a9:4a:e1:5c:4f:fe:d5:21:
         28:a2:bf:13:af:36:97:aa:13:c8:98:c0:d0:eb:a1:79:7e:97:
         b8:f2:1c:68:c2:00:64:dd:5b:aa:0d:16:13:f4:67:cf:cf:f4:
         e1:2e:05:ed:15:aa:5c:57:00:9f:b8:53:ec:98:82:d3:36:e2:
         25:5c:6c:f0:c6:9e:95:67:47:b8:8a:a7:30:61:19:42:d1:2d:
         2a:ac:21:56:3c:b0:08:24:cc:2d:b3:60:f7:44:c4:d3:8e:f1:
         a0:aa:b6:e4:8a:d9:67:5e:fd:a3:2e:28:10:c7:4d:6f:81:24:
         57:6e:e2:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUETfoE9COTU0CBQR51b+1IbgHmiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQjE4NjZFMDI4MDYxNkQ5RDRBRUZCRjA1MkJDNjQ2
OEYyQzgyNDAeFw0yNTA0MTQyMTEwMjlaFw0yNjA0MTMyMTE1MjlaMDMxMTAvBgNV
BAMTKDkzNzY0REI5QTkxNDkzRkRDMEMxQzY0QkYzRjg1Q0UwMEQzMTEzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAg5XPyM63Vc1A4P+L+LUG0AO
b8ASyHteAMPWqPjRCkBnSUYQFdjS0fDrG1mL6nSwVWwy4yZ7LbqNZQpN12qNb3k5
VvYqCWDhbGnpS2ZWbtpX58ll9iJ7GFJ5wLSU4oiCfAjM1rR8gnm2xArRQhINBy+Y
aTQN2bgLEN3zwZnMp8a0Lt18fGqXipCVsfCi/L/64w8pZLj4zbHAVwwCAVhoV9mv
SZ29/113XSiR0LWJsraBJ0/h/Q2KkWggJPwDNtIamr0saQ/taSlm4arnkoxdDucC
jd95gQ1HSyF/ItyBX+0LBYWif8HnkcGd1/4SNfOrbqfRs6kEYtuvzCv2aM+jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk3ZNuakUk/3AwcZL8/hc4A0xE5wwHwYDVR0j
BBgwFoAUh6sYZuAoBhbZ1K778FK8ZGjyyCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTN4TDJ6d3hNMW5RbUVRUzdWOFk5TjhYejFSaEtMZ0ZWYXdxcjhCYVJ3
MTkvMC84N0FCMTg2NkUwMjgwNjE2RDlENEFFRkJGMDUyQkM2NDY4RjJDODI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QUIxODY2RTAyODA2MTZE
OUQ0QUVGQkYwNTJCQzY0NjhGMkM4MjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UzeEwyend4TTFuUW1FUVM3VjhZOU44WHoxUmhLTGdGVmF3cXI4QmFSdzE5LzAv
MzEzODM3MmUzMTM3MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7EYgwDQYJKoZIhvcNAQELBQADggEBADWgfwHA
cKfscnJ1HJ06GPoMqVKG+T7jbcUEXLPOLe6xdVeDvvVyel95c6JW4CgsWndvAjEY
7nnujY2UIMGD+9rfcMPMXF3vVndF0vXlAaNqkOalyhvFufCKpreLVtdPN04/3EM7
ciZc72EcJZxpxDkoxHIG8TKtZDTnY8nWVnWnWz+Nr/yOfhGpSuFcT/7VISiivxOv
NpeqE8iYwNDroXl+l7jyHGjCAGTdW6oNFhP0Z8/P9OEuBe0VqlxXAJ+4U+yYgtM2
4iVcbPDGnpVnR7iKpzBhGULRLSqsIVY8sAgkzC2zYPdExNOO8aCqtuSK2Wde/aMu
KBDHTW+BJFdu4qY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:47:52 2025 by rpki-client on console.sobornost.net