Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32352e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e32352e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          OTEBHH7iQpfPIZ/VZFEdzv/wDKuLMH6FccFfxeuoRhs=
Subject key identifier:   D4:98:75:F1:21:8E:30:2A:BF:36:3C:6F:42:CB:70:61:F1:59:76:7D
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       695E87277AAFF3075DB399EA04DFEB3DF99FDF3A
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32352e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:15:37 +0000
ROA not before:           Mon 31 Jul 2023 18:10:37 +0000
ROA not after:            Mon 29 Jul 2024 18:15:37 +0000
asID:                     28139
IP address blocks:        187.49.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 11:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:87:27:7a:af:f3:07:5d:b3:99:ea:04:df:eb:3d:f9:9f:df:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:10:37 2023 GMT
            Not After : Jul 29 18:15:37 2024 GMT
        Subject: CN=D49875F1218E302ABF363C6F42CB7061F159767D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:17:cf:f2:e4:7e:88:88:f0:9f:f0:42:c7:
                    76:db:ed:bc:16:60:1a:22:be:1d:51:36:70:24:88:
                    2d:18:d8:25:72:07:e0:bd:74:e3:ef:ea:9f:66:93:
                    bf:f1:8c:e8:27:04:b8:7e:d3:44:5b:4c:e2:e9:a6:
                    f1:82:b8:d5:44:de:e1:fa:89:3d:4e:dc:63:c4:0d:
                    2c:46:85:15:09:09:66:9d:5b:27:bb:da:77:9d:44:
                    f8:ba:f8:15:2c:00:fc:d1:5a:22:e1:04:f1:7c:90:
                    4f:e0:a3:2b:1c:68:18:f8:8b:3d:9b:81:ef:69:65:
                    bb:20:ad:90:83:71:31:f8:48:99:1d:6c:1a:3e:e0:
                    4c:d7:dc:05:b0:89:37:8e:1a:ba:c0:11:3b:c6:3e:
                    91:8a:d2:39:51:4c:bb:8a:43:a4:16:a5:9d:fc:86:
                    a0:e1:71:5d:5b:0a:fd:cd:2d:5b:cf:9b:f2:ac:58:
                    0b:a6:0f:53:e8:56:a7:5d:87:c9:a9:8d:94:f4:a3:
                    90:bc:31:d7:1a:ed:45:2e:95:f9:16:07:de:19:6e:
                    a0:59:cd:5a:02:1b:0c:29:42:da:b5:ed:3d:59:d2:
                    cb:d3:d3:da:10:42:73:d0:83:3d:42:95:f6:2e:ef:
                    3c:28:ef:df:72:fd:5d:4b:60:5d:73:3f:08:57:2c:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:98:75:F1:21:8E:30:2A:BF:36:3C:6F:42:CB:70:61:F1:59:76:7D
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32352e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:0c:6d:ed:d7:04:09:f9:92:b1:e2:85:d9:46:97:c9:9c:d0:
         0d:a1:a2:f2:04:4c:cc:b6:bf:bb:3d:f5:20:27:5f:13:81:f5:
         86:85:da:c4:5d:fb:47:01:80:bd:fd:c8:54:4f:61:94:73:60:
         23:79:de:c8:d7:84:7c:5f:6f:39:f8:f7:a1:f2:30:aa:72:84:
         1f:5d:4f:f3:40:67:0e:56:a0:99:dc:3c:3c:00:02:0f:23:49:
         b9:fb:4a:2b:d8:22:bd:5c:53:20:cc:19:28:c1:a8:74:7e:a6:
         b0:61:88:33:88:2c:dc:d7:24:64:0c:ed:96:51:61:b6:4c:28:
         87:7e:c2:b0:76:08:91:99:84:f1:8d:f5:b9:fc:d2:c7:e2:72:
         41:67:eb:7b:b5:47:60:33:b5:b5:c5:4e:8e:d5:48:10:d2:d4:
         7d:e7:f5:75:a9:8b:da:6d:31:14:2d:be:07:ce:93:35:4c:a5:
         78:91:03:53:21:7c:0b:b4:46:f9:93:3d:29:74:0d:8d:5a:08:
         4f:35:78:ad:5f:f5:c4:f1:70:8a:09:81:c0:25:1f:3b:e8:d1:
         2f:2d:41:ca:94:7d:84:07:70:f4:60:15:4a:dd:51:32:eb:33:
         d9:29:f7:70:c9:3d:2d:d8:aa:57:ca:b4:5b:f5:af:4d:9f:82:
         be:d2:0a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:30 2024 by rpki-client on console-ams.rpki-client.org