Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32342d3234203d3e20323635343336.roa
File:                     3136382e3139352e3137302e302f32342d3234203d3e20323635343336.roa (raw, json)
Hash identifier:          OdFJr8UmYsJyz3W0Wtl/VgtWQNka23JeycXcK5yG/IE=
Subject key identifier:   59:46:C1:15:75:39:43:1D:E0:AD:AB:1F:B5:34:95:16:82:8B:B3:0F
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       1E44E683B96B17536BA712067DFC50A7287CE121
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32342d3234203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:43 +0000
ROA not before:           Wed 24 Apr 2024 17:01:43 +0000
ROA not after:            Wed 23 Apr 2025 17:06:43 +0000
asID:                     265436
IP address blocks:        168.195.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:44:e6:83:b9:6b:17:53:6b:a7:12:06:7d:fc:50:a7:28:7c:e1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:43 2024 GMT
            Not After : Apr 23 17:06:43 2025 GMT
        Subject: CN=5946C1157539431DE0ADAB1FB5349516828BB30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:ee:f2:ce:36:ff:2a:ad:9e:e5:4a:74:e9:
                    dd:52:0b:d7:4a:3c:de:c1:03:50:15:8d:c4:0c:69:
                    bb:4b:28:27:f4:d5:4b:fd:d7:22:aa:b6:26:61:e1:
                    c7:91:66:6e:3b:ad:34:47:b0:43:a0:24:17:7f:4c:
                    52:df:c6:d4:b7:eb:61:9f:6f:96:f6:5f:0c:5e:90:
                    ff:39:e0:cd:1f:81:41:f6:05:44:2d:e0:43:e3:09:
                    90:e7:a3:2c:8c:af:57:a5:78:f8:cd:71:0a:5a:8c:
                    1b:1d:72:8c:7d:de:00:20:de:7d:13:0a:98:c1:5d:
                    1b:77:52:f2:e3:61:ae:05:3a:90:ee:dd:0f:b2:78:
                    94:1d:ad:16:50:aa:d5:b1:41:39:a5:32:79:15:05:
                    ab:c2:ee:9b:ed:08:bc:a3:6a:e8:a8:c0:a7:3b:1e:
                    35:83:ee:59:44:16:ce:86:38:f4:53:66:96:49:68:
                    4c:b9:6b:23:b8:1e:bd:3e:5d:06:2e:05:7d:9e:00:
                    eb:4e:36:1a:8c:a0:e1:cc:98:f9:1e:37:65:5a:59:
                    62:4b:51:7d:73:29:c9:e9:ed:e2:fe:00:cc:11:93:
                    2c:0b:a7:5b:2f:03:17:1f:77:c4:be:b3:f5:6e:52:
                    16:d0:97:1b:97:a1:ce:f1:83:52:0b:28:b9:fe:c9:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:46:C1:15:75:39:43:1D:E0:AD:AB:1F:B5:34:95:16:82:8B:B3:0F
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3137302e302f32342d3234203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:35:4e:d6:0b:66:1d:2c:1f:53:0a:63:e9:69:dd:d0:08:
         5f:3d:79:d6:1c:90:83:46:6e:ba:6d:58:03:18:e0:e0:2f:28:
         0f:5c:0a:83:77:2e:79:18:cf:b8:38:74:a4:9e:bd:0e:6d:28:
         ab:25:24:9c:3c:0b:e5:da:f3:0d:37:4b:b5:ab:94:ca:a9:fd:
         d5:9f:75:00:6d:e0:03:f1:78:dc:ca:44:0a:e7:3b:c8:c0:34:
         4a:8a:0e:24:79:bc:7f:0f:8c:5a:b6:4e:3b:8a:55:6e:8e:78:
         05:27:f5:12:01:50:61:00:5e:89:47:b4:0a:4b:21:da:2d:15:
         65:9d:ce:ac:ae:aa:e4:96:5e:60:27:08:a7:d8:80:c1:97:d1:
         9e:fe:90:79:83:f5:db:b9:9d:e3:aa:31:ce:cd:23:18:c3:5a:
         4c:1b:4d:1d:50:c5:d7:08:8e:6d:67:91:df:24:12:99:bf:2e:
         fd:9c:e4:fa:ef:29:7c:ef:41:13:0d:8f:4a:fb:09:66:ac:70:
         f9:58:03:6d:8b:82:bb:59:74:02:b3:3c:8a:3f:21:84:0e:f4:
         05:2b:de:06:cb:67:7a:1d:c3:f6:e3:c7:23:3e:3e:ab:f0:f2:
         08:a7:25:e5:bc:60:03:27:6b:ba:c2:8a:ff:3a:de:22:5f:c2:
         0d:12:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org