Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31372e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e31372e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          zx/0rqvQt8gJJeaeO/o8um0RkcEBf+Y7d3jOQ5puJgE=
Subject key identifier:   B5:82:67:5A:74:8B:16:FE:A6:CB:ED:97:40:50:6E:60:E0:16:25:77
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       5404D9F59E3396D38991E7CC6E77BBA32D871191
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31372e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:14:43 +0000
ROA not before:           Mon 31 Jul 2023 18:09:43 +0000
ROA not after:            Mon 29 Jul 2024 18:14:43 +0000
asID:                     28139
IP address blocks:        187.49.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 11:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:04:d9:f5:9e:33:96:d3:89:91:e7:cc:6e:77:bb:a3:2d:87:11:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:09:43 2023 GMT
            Not After : Jul 29 18:14:43 2024 GMT
        Subject: CN=B582675A748B16FEA6CBED9740506E60E0162577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:86:e6:6d:e6:58:4d:6e:01:a5:10:75:c4:
                    17:2a:20:76:71:c0:1c:ed:54:f2:31:d1:91:74:0f:
                    56:0f:1c:39:8c:96:6e:a1:b9:27:d8:c2:d8:ab:a9:
                    0b:25:7d:d5:96:87:12:fb:a3:f5:30:67:e5:a0:a9:
                    c2:a4:10:c8:2f:65:7a:0d:4f:98:22:cc:5f:41:88:
                    fb:50:0b:22:43:49:f8:01:14:3e:e1:5c:c6:cd:57:
                    aa:f9:77:63:ec:37:e0:19:46:de:3e:6f:a2:f8:3b:
                    33:95:fc:c0:7b:fd:05:fa:52:0e:f7:76:47:f4:41:
                    38:ee:1e:6a:cc:fb:04:4e:18:93:6c:10:db:60:80:
                    44:00:57:66:93:6a:64:b5:1c:f7:e8:04:27:fc:82:
                    08:44:c9:ef:3b:fe:bf:79:2f:67:cb:22:5e:8a:4e:
                    23:f4:4e:95:7b:ad:f5:06:1f:6a:49:25:dc:c8:5d:
                    1a:7b:ea:d0:02:07:a8:2e:e6:14:7f:ea:ac:f6:d3:
                    37:7f:3b:5d:eb:cc:85:14:60:51:bd:bf:01:12:c9:
                    19:90:4e:08:c1:50:45:86:e9:78:de:a8:03:d0:27:
                    fb:4d:ce:29:0f:3f:19:d7:25:a4:7f:dc:57:82:43:
                    6a:00:0c:23:c3:60:34:de:b5:ed:c3:c2:3a:77:c2:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:67:5A:74:8B:16:FE:A6:CB:ED:97:40:50:6E:60:E0:16:25:77
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31372e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:31:a4:af:66:da:65:27:7a:fc:b7:06:1a:99:bb:3b:68:
         65:dc:33:d5:67:e1:e3:f3:8d:ff:08:b1:51:9b:97:00:46:b5:
         64:6a:8b:29:61:06:e2:23:6d:ef:33:29:0a:42:61:b7:b7:e2:
         ec:2f:b2:d0:11:8e:d8:ca:4c:e5:a9:fb:42:50:71:f2:19:7f:
         7a:d0:2f:89:ec:d5:48:83:fa:a1:03:df:67:be:7b:73:9b:05:
         0c:4c:eb:0a:84:6f:6e:0a:7a:a5:6e:3d:83:fe:0c:7b:7c:65:
         01:83:36:5e:7b:a6:c7:c1:54:ee:a3:5a:70:5a:2e:93:a7:4a:
         f3:d5:80:64:ae:d1:38:7b:9f:9d:ce:8f:24:bd:97:d1:3c:0f:
         5b:37:76:98:8a:ac:47:18:dd:f6:59:b0:4a:4a:e4:ad:5d:f2:
         1c:3d:22:b9:5c:53:97:19:4b:22:95:3c:c7:cb:23:43:0f:05:
         b2:a0:99:bd:2f:eb:f8:20:be:4d:54:1e:30:f3:bc:e5:29:67:
         d6:9a:7d:57:f5:59:73:70:76:7f:28:5a:a8:ad:57:33:a8:3f:
         b3:e9:67:c1:11:5a:e9:7d:fe:3e:7b:49:28:44:2c:b8:ff:68:
         c4:8c:e9:cf:43:6f:cc:d9:bb:a4:ec:09:07:67:af:93:f6:2b:
         60:75:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:36:39 2024 by rpki-client on console-fra.rpki-client.org