Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31392e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e31392e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          d0794BKrEKdl5fWPZTtfFoFMmAiP2VLZFlUhx0DHxbI=
Subject key identifier:   D3:33:39:44:CC:C0:ED:E0:D0:15:A3:C3:45:73:45:87:8B:0A:67:8F
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       5CC750BB4CBE2E8BE3FCBE3209A9683A7E433C31
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31392e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:14:55 +0000
ROA not before:           Mon 31 Jul 2023 18:09:55 +0000
ROA not after:            Mon 29 Jul 2024 18:14:55 +0000
asID:                     28139
IP address blocks:        187.49.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 11:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c7:50:bb:4c:be:2e:8b:e3:fc:be:32:09:a9:68:3a:7e:43:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:09:55 2023 GMT
            Not After : Jul 29 18:14:55 2024 GMT
        Subject: CN=D3333944CCC0EDE0D015A3C3457345878B0A678F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:69:4e:aa:aa:ce:42:84:6d:1e:e2:55:db:
                    43:d4:11:68:14:3d:ed:e6:f0:82:9a:4c:e3:4f:b6:
                    eb:35:cc:57:08:14:11:89:71:cf:e5:20:75:f3:4e:
                    1a:5b:76:c2:17:9a:0b:60:c4:1d:e8:42:c2:cd:c5:
                    8e:76:4d:75:99:56:1a:c8:90:1f:62:77:7b:14:93:
                    82:67:1c:89:22:56:fa:52:26:a9:89:bb:73:ec:15:
                    f8:19:5f:92:4d:a4:ec:02:74:87:c7:fa:b9:75:7e:
                    9b:7b:f3:57:97:39:f5:c2:e3:0e:49:86:ea:60:30:
                    56:0a:df:80:33:a3:93:af:72:33:e6:f3:6a:f5:dc:
                    be:3e:87:51:52:ea:98:23:38:39:88:f3:2e:3e:f1:
                    b3:35:53:46:18:c4:60:a2:12:5b:9b:43:bb:07:9f:
                    b3:d7:0f:1e:59:42:6c:67:f5:29:25:d9:e7:10:03:
                    11:84:09:81:2a:d7:fc:e2:1f:3e:57:a0:36:d8:df:
                    97:ae:71:d9:b5:de:66:10:29:4b:99:bd:01:5b:8e:
                    bb:f2:7f:d1:24:17:d0:7f:07:c5:8b:c3:25:b1:f8:
                    a6:62:f1:2e:f4:89:ac:5b:fb:98:72:25:44:65:68:
                    5e:f9:9e:78:19:97:d5:5e:e5:78:cd:e1:e4:2a:27:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:33:39:44:CC:C0:ED:E0:D0:15:A3:C3:45:73:45:87:8B:0A:67:8F
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31392e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:11:28:96:cd:2d:29:06:69:5c:e1:48:91:d2:1c:fe:0b:09:
         7d:57:8c:75:2a:f0:2f:6a:5c:02:13:fe:81:29:76:34:0a:4e:
         a3:aa:28:61:89:88:f7:19:26:0e:83:04:85:55:4a:8d:a2:fe:
         c9:64:24:56:6f:d1:c1:4d:37:ff:e0:95:12:5e:1c:c9:f6:56:
         25:05:af:bb:9e:4b:de:2f:8a:2b:d0:f6:9f:4d:94:14:fc:9e:
         31:ee:4f:b0:df:96:11:62:98:a9:8b:29:fd:b1:d9:bc:06:e7:
         de:4b:54:af:70:5e:4e:e8:0b:0d:5d:95:9b:f9:81:ec:00:18:
         d8:3f:78:71:4e:85:89:f4:e3:9a:cd:f9:e6:34:a4:1d:bd:95:
         cb:0a:8f:b4:8e:44:3d:9e:e6:d5:d9:0b:a9:a3:b8:d3:03:a1:
         a4:c6:85:a2:2f:7b:c3:1e:88:fd:4d:de:67:05:9e:35:3f:67:
         18:69:b8:4d:b5:aa:be:4b:94:06:68:b0:31:a6:ad:d4:89:62:
         8e:08:7c:f4:4b:e1:c3:a3:77:e3:e3:1a:b0:8b:99:b8:15:89:
         9a:ad:4d:d7:35:d8:aa:42:d1:a0:8f:a1:54:11:66:4b:e8:b1:
         9b:23:37:89:50:2b:56:3a:54:ef:45:3e:db:f1:90:d7:e9:5e:
         fb:58:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:30 2024 by rpki-client on console-ams.rpki-client.org