Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32342e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e32342e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          8auJqR4lzQteMWbvodTHWcyYyDBSKouUvA7i/hUbZMI=
Subject key identifier:   DF:5B:DC:54:76:45:27:54:C0:20:07:05:22:AB:F4:B3:D1:B1:35:F0
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       1EB371DF4A86BC800B4035CC137824BB66EA2D2E
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32342e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:15:10 +0000
ROA not before:           Mon 31 Jul 2023 18:10:10 +0000
ROA not after:            Mon 29 Jul 2024 18:15:10 +0000
asID:                     28139
IP address blocks:        187.49.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 11:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b3:71:df:4a:86:bc:80:0b:40:35:cc:13:78:24:bb:66:ea:2d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:10:10 2023 GMT
            Not After : Jul 29 18:15:10 2024 GMT
        Subject: CN=DF5BDC5476452754C020070522ABF4B3D1B135F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ea:e2:a7:43:21:9f:09:7f:01:00:69:c3:6b:
                    0c:4e:20:f6:ca:02:03:cd:3e:85:9f:e4:2c:33:ad:
                    61:c3:6e:ba:34:66:a7:3c:05:ff:05:4e:b6:04:65:
                    12:8f:28:14:f5:5d:33:99:3e:77:36:c7:5c:21:47:
                    63:13:08:82:86:57:d2:1d:b9:71:e1:47:f8:3e:e0:
                    6c:51:06:34:62:68:fa:bf:9e:04:8c:3d:6f:64:99:
                    db:01:63:63:9f:2a:a8:e2:00:30:9c:61:13:97:6d:
                    d5:e3:38:1f:cc:44:7f:3d:d0:97:79:2b:62:1b:ab:
                    a1:3b:77:48:ef:5b:00:c3:6e:cb:df:35:fc:3c:41:
                    08:a0:4f:b1:e0:41:fd:43:f7:38:07:f0:0d:90:9a:
                    76:c1:b1:c7:2b:f9:17:56:ee:62:e6:0c:a4:0e:d8:
                    3d:b3:73:bd:c9:ae:74:5b:f5:78:61:63:b6:ab:0c:
                    cd:29:d9:6b:cc:77:a2:98:61:d0:b8:29:83:84:57:
                    b9:9c:83:40:16:bf:a9:1e:e0:d1:16:6c:2d:dc:7a:
                    ce:f3:53:10:25:c9:e5:b6:c1:a6:b6:29:3e:57:e2:
                    88:60:d5:94:c0:44:d1:a9:28:08:3c:99:59:9d:d5:
                    94:1e:22:8a:52:ff:5b:41:e9:2c:24:c5:cf:30:74:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:DC:54:76:45:27:54:C0:20:07:05:22:AB:F4:B3:D1:B1:35:F0
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32342e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:4f:bf:1e:67:7a:aa:89:99:f4:51:fb:32:79:74:a5:8c:
         83:ee:e0:1b:a6:04:24:8c:58:61:32:74:ad:3f:28:7b:4b:75:
         93:77:68:c9:81:75:0e:f3:d8:80:2a:88:10:cb:b2:bd:e4:51:
         f9:2f:d3:ad:44:f2:82:f4:64:79:3f:34:11:19:91:64:fb:9b:
         2e:dd:7b:56:42:4b:75:f6:c2:45:f4:e0:ee:30:36:1d:0f:10:
         20:2a:e7:c2:41:8b:0e:84:b9:0f:3f:e9:5e:60:7b:fd:13:dc:
         d6:01:e4:e2:ed:ab:19:a1:40:6d:8a:1b:85:6b:83:ee:5e:a7:
         3f:96:b0:1d:c5:2c:94:cd:92:5a:4a:9f:4a:cc:f2:1e:d2:f7:
         f0:02:d9:d0:97:91:da:14:0c:93:7f:3d:3b:22:4a:29:c7:ac:
         2e:82:b1:cf:ca:f1:c5:ce:ea:19:42:bc:00:6a:58:8a:b0:46:
         cd:9e:c6:b7:c5:a5:59:01:7e:60:75:e4:9b:76:33:3d:b9:3e:
         96:03:90:41:bf:56:00:69:d9:be:c6:0e:59:46:ce:c0:56:7c:
         ad:9a:3f:a3:a6:7c:2c:2b:ea:c2:81:d7:1e:26:d1:a8:c4:fc:
         d6:a4:6f:95:9a:75:fc:86:31:02:ab:93:2b:23:13:2e:08:f8:
         42:18:f5:46
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUHrNx30qGvIALQDXME3gku2bqLS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2QzgyMDcyQTdENjUxMjlCMkZEMjlDODBBRDBBNzA3
NzFFRjkxRjAeFw0yMzA3MzExODEwMTBaFw0yNDA3MjkxODE1MTBaMDMxMTAvBgNV
BAMTKERGNUJEQzU0NzY0NTI3NTRDMDIwMDcwNTIyQUJGNEIzRDFCMTM1RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD46uKnQyGfCX8BAGnDawxOIPbK
AgPNPoWf5CwzrWHDbro0Zqc8Bf8FTrYEZRKPKBT1XTOZPnc2x1whR2MTCIKGV9Id
uXHhR/g+4GxRBjRiaPq/ngSMPW9kmdsBY2OfKqjiADCcYROXbdXjOB/MRH890Jd5
K2Ibq6E7d0jvWwDDbsvfNfw8QQigT7HgQf1D9zgH8A2QmnbBsccr+RdW7mLmDKQO
2D2zc73JrnRb9XhhY7arDM0p2WvMd6KYYdC4KYOEV7mcg0AWv6ke4NEWbC3ces7z
UxAlyeW2waa2KT5X4ohg1ZTARNGpKAg8mVmd1ZQeIopS/1tB6Swkxc8wdBQFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU31vcVHZFJ1TAIAcFIqv0s9GxNfAwHwYDVR0j
BBgwFoAU/WyCByp9ZRKbL9KcgK0KcHce+R8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZoRW4xWlZVNG5DWlFFTXpxMUZuWm15N2VpblB5QUxHVGdqclM4eW1w
aUwvMC9GRDZDODIwNzJBN0Q2NTEyOUIyRkQyOUM4MEFEMEE3MDc3MUVGOTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZENkM4MjA3MkE3RDY1MTI5
QjJGRDI5QzgwQUQwQTcwNzcxRUY5MUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2aEVuMVpWVTRuQ1pRRU16cTFGblpteTdlaW5QeUFMR1RnanJTOHltcGlMLzAv
MzEzODM3MmUzNDM5MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsxGDANBgkqhkiG9w0BAQsFAAOCAQEAn7tPvx5neqqJ
mfRR+zJ5dKWMg+7gG6YEJIxYYTJ0rT8oe0t1k3doyYF1DvPYgCqIEMuyveRR+S/T
rUTygvRkeT80ERmRZPubLt17VkJLdfbCRfTg7jA2HQ8QICrnwkGLDoS5Dz/pXmB7
/RPc1gHk4u2rGaFAbYobhWuD7l6nP5awHcUslM2SWkqfSszyHtL38ALZ0JeR2hQM
k389OyJKKcesLoKxz8rxxc7qGUK8AGpYirBGzZ7Gt8WlWQF+YHXkm3YzPbk+lgOQ
Qb9WAGnZvsYOWUbOwFZ8rZo/o6Z8LCvqwoHXHibRqMT81qRvlZp1/IYxAquTKyMT
Lgj4Qhj1Rg==
-----END CERTIFICATE-----
Generated at Tue Jan 9 15:36:39 2024 by rpki-client on console-fra.rpki-client.org