Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa
File:                     3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          PoOA9fA7w1sCD65rGH902dX+7Oh2DQwY0uLDftkfw8E=
Subject key identifier:   07:4C:3F:A0:D7:9A:3E:4A:2C:E0:2C:F6:C7:B5:BB:7E:FF:94:1F:F0
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       55AF32C5D9B2FFE1C7A49882644004858CA2D952
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa
Signing time:             Thu 04 Apr 2024 21:10:42 +0000
ROA not before:           Thu 04 Apr 2024 21:05:42 +0000
ROA not after:            Thu 03 Apr 2025 21:10:42 +0000
asID:                     263395
IP address blocks:        168.194.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 06:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:32:c5:d9:b2:ff:e1:c7:a4:98:82:64:40:04:85:8c:a2:d9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Apr  4 21:05:42 2024 GMT
            Not After : Apr  3 21:10:42 2025 GMT
        Subject: CN=074C3FA0D79A3E4A2CE02CF6C7B5BB7EFF941FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:cc:72:b0:73:76:05:ae:af:67:68:ba:3c:
                    10:c7:27:4d:55:4a:94:5d:d9:97:29:96:dc:67:18:
                    b1:aa:71:fb:36:38:8e:96:60:3b:39:75:15:bd:a5:
                    cc:07:65:cf:e2:17:90:b5:a1:c9:eb:04:74:74:55:
                    47:18:d3:16:f5:36:87:4d:72:81:81:20:9f:82:83:
                    4b:6c:00:2a:72:d3:df:56:5b:c1:7d:91:3d:83:36:
                    25:e8:53:b9:d8:17:7d:6b:6b:8c:09:3b:a0:79:43:
                    24:69:d2:58:12:c8:a5:8a:8b:e4:40:f8:55:be:91:
                    7f:db:c4:ad:e5:06:eb:a8:bc:38:a6:7a:56:53:06:
                    e3:9e:e4:bc:b8:52:45:4a:42:0f:7d:32:e9:57:e0:
                    7e:0f:51:65:d2:bc:1c:35:af:b3:54:e3:f9:f4:ee:
                    02:0b:45:0c:b0:fa:53:88:0c:d4:24:bf:3e:c8:c2:
                    fd:97:54:66:ce:a5:b6:3e:06:52:5c:57:e3:6b:6b:
                    c1:fb:e1:9a:31:0f:19:2e:08:4e:cc:5d:81:63:4c:
                    20:65:6f:02:95:02:ea:b0:5e:fc:7b:ba:bf:d5:f7:
                    f9:21:bd:79:df:0b:c8:b9:81:d9:67:66:e0:41:78:
                    cf:94:bc:f4:8f:f7:a0:b9:54:e6:52:15:98:7b:76:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:3F:A0:D7:9A:3E:4A:2C:E0:2C:F6:C7:B5:BB:7E:FF:94:1F:F0
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3136382e3139342e3133362e302f32322d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:e9:7e:47:4e:8b:e1:1f:7d:41:9d:12:93:90:2f:e9:b6:5a:
         81:1e:39:97:03:0b:5a:45:20:6f:7a:c7:e3:e1:07:8a:0f:39:
         4d:54:7b:53:e3:4d:0a:13:90:40:1c:21:f8:cb:8f:e1:c2:63:
         54:41:4f:cf:d4:7b:9b:d3:11:a7:47:a6:9c:0d:4d:b9:5d:ce:
         f2:f0:2f:98:83:8b:e8:a1:3d:c3:72:6f:3e:d4:d0:99:13:2a:
         f7:4e:0c:07:9b:f0:0b:b2:63:6a:05:f1:17:cf:48:4e:ab:1f:
         7c:c8:e4:57:1e:f1:f5:46:65:cc:7d:7d:15:6b:39:22:ad:d1:
         82:07:a0:64:46:e9:3a:09:50:56:99:74:d6:17:83:ac:bd:a7:
         92:ad:6d:cf:8d:76:6a:de:7a:bd:37:80:ce:da:67:9e:c2:60:
         48:e7:6a:2b:7c:e7:e7:42:ec:9c:c5:8e:00:1d:31:85:61:95:
         d1:5e:73:8b:1c:3e:18:b4:8c:e5:f2:d7:a3:05:a5:e7:34:71:
         9f:9a:9d:a2:84:f7:57:6b:43:3e:df:1b:44:71:7c:f5:ec:49:
         c3:c1:49:4c:a7:19:56:6d:04:fe:05:04:02:5a:cd:73:06:b1:
         7a:a8:da:32:1d:fa:a9:1e:69:15:7c:29:19:ed:0e:f8:fb:a1:
         65:03:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org