Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa
File:                     3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa (raw, json)
Hash identifier:          q+v9ejr394zjwSZ2CDP/etphbYM5yDeKGC8Kr/AZhds=
Subject key identifier:   6D:C4:CF:8D:2F:7C:72:E1:06:25:9B:ED:38:04:38:8D:4F:A5:34:70
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       AFD67FBDA1EB3F7C3A2863A9E51817E8B62F7B
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:41 +0000
ROA not before:           Wed 24 Apr 2024 17:01:41 +0000
ROA not after:            Wed 23 Apr 2025 17:06:41 +0000
asID:                     265436
IP address blocks:        168.195.170.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:d6:7f:bd:a1:eb:3f:7c:3a:28:63:a9:e5:18:17:e8:b6:2f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:41 2024 GMT
            Not After : Apr 23 17:06:41 2025 GMT
        Subject: CN=6DC4CF8D2F7C72E106259BED3804388D4FA53470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:d0:03:da:80:72:0a:bd:94:b0:b0:14:1a:
                    ea:56:e5:5a:0b:f3:bc:fa:f4:16:08:44:ae:3b:d4:
                    6e:73:92:53:fe:1d:08:67:57:7a:62:f3:55:39:f1:
                    a7:b6:c1:45:39:b7:e9:b7:02:95:d4:34:82:f1:f8:
                    93:c6:85:0b:5d:6f:70:9a:66:5c:c2:1d:42:c7:e2:
                    3c:42:b4:7f:e3:9b:1c:43:eb:a2:e0:0a:89:d0:20:
                    51:17:36:e6:cc:25:b1:0f:5b:dc:4c:8f:10:49:c2:
                    e4:38:ae:48:d0:41:e9:84:94:64:59:6c:61:e3:84:
                    26:61:35:79:28:ec:2f:93:4b:de:af:9d:18:af:c2:
                    bc:0c:28:09:3a:5c:5b:fb:c0:9f:23:b0:e2:10:3c:
                    97:05:1f:e0:a1:9f:27:b5:9d:dd:90:9e:f7:7c:c0:
                    e8:39:39:29:63:79:9e:ab:d2:35:ef:56:16:0b:fa:
                    3e:3b:c2:b8:8c:3d:2d:a6:f3:46:f7:52:fe:78:1b:
                    4b:c4:b0:aa:3e:df:87:16:e4:59:cd:36:30:aa:32:
                    a2:69:da:c6:eb:d7:68:7a:5d:0a:6e:be:5f:94:f9:
                    45:d1:82:fb:89:dc:43:e3:85:e8:57:b4:ce:d0:85:
                    3e:87:a2:27:03:05:e2:0f:14:8d:d3:2f:f7:75:36:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C4:CF:8D:2F:7C:72:E1:06:25:9B:ED:38:04:38:8D:4F:A5:34:70
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32332d3233203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:95:c3:9c:9f:38:0a:26:97:9e:0f:ff:73:3a:b1:ed:46:
         0d:28:65:1c:e6:b5:73:7d:c0:76:a0:90:01:2e:da:88:83:89:
         08:43:bd:3d:bd:fe:66:64:e6:b9:8a:7a:4a:b7:ab:98:df:29:
         ff:18:f5:64:3b:8c:68:f6:2d:05:d0:d9:52:bc:70:a5:97:ec:
         f8:41:62:49:4f:ee:e1:47:10:66:28:05:df:58:28:89:2b:75:
         02:bc:1e:6d:92:22:51:6f:c2:29:50:6b:9a:7d:ea:a8:ac:4e:
         53:a9:db:d6:75:eb:b6:83:3f:2e:b5:d6:7e:d5:3e:56:fe:78:
         d3:39:30:a5:91:e4:e0:d4:2a:c8:f5:ff:8e:52:e3:49:e1:8c:
         84:be:31:c1:06:46:9e:91:72:31:a2:66:8d:76:20:7f:ee:74:
         eb:14:06:81:9b:1d:a9:73:8e:3a:96:c0:d0:06:7a:db:8d:74:
         7c:32:87:c2:b4:a6:e0:85:bd:a7:e4:2d:5c:71:43:fa:d4:a7:
         51:82:cd:6a:78:fe:aa:d5:83:38:68:f1:89:d5:ee:23:d7:52:
         07:92:72:92:40:a4:af:7d:3d:33:e7:3a:7c:9e:73:f0:9e:20:
         5b:c3:0e:ca:b9:0e:f8:97:41:66:a5:6e:20:88:e6:a7:03:a4:
         3b:96:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org