Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          DoLUwDJuzIFREyH4J0YZCk4vnH801GVDgeChrfdLT4s=
Subject key identifier:   25:44:92:5E:2C:59:9F:85:5E:E1:3A:34:F8:DF:6D:3E:7B:56:F3:4E
Certificate issuer:       /CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
Certificate serial:       26DEDE368D80C444AD6AE0ED5382EEA6C6A0A5EF
Authority key identifier: 68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
Signing time:             Wed 17 Apr 2024 11:39:50 +0000
ROA not before:           Wed 17 Apr 2024 11:34:50 +0000
ROA not after:            Wed 16 Apr 2025 11:39:50 +0000
asID:                     28182
IP address blocks:        170.231.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 15:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:de:de:36:8d:80:c4:44:ad:6a:e0:ed:53:82:ee:a6:c6:a0:a5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68E3F0C7BE4FA017524CE2244E4AA8363446FD0D
        Validity
            Not Before: Apr 17 11:34:50 2024 GMT
            Not After : Apr 16 11:39:50 2025 GMT
        Subject: CN=2544925E2C599F855EE13A34F8DF6D3E7B56F34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:5a:2e:99:2c:8b:8b:f8:d4:2f:cf:4d:f0:
                    46:65:82:ea:5e:4f:33:df:c5:9a:b4:99:29:58:8d:
                    75:19:2a:97:c9:12:ef:7b:1e:0e:95:62:f8:77:ec:
                    19:7e:33:da:5c:ad:a2:be:ca:94:c4:17:47:ff:a4:
                    71:85:36:fc:c0:8e:60:64:14:c7:0b:c8:d2:d3:78:
                    4e:92:9c:e9:f0:cd:4d:92:0f:82:fb:94:ed:78:cf:
                    68:4e:d2:7e:45:e6:81:46:d0:d1:b2:74:1c:dd:6b:
                    51:f1:6d:b7:ae:e3:ea:11:74:06:97:17:9f:16:bb:
                    8f:2f:df:55:a9:53:f2:29:ba:2d:d0:1e:ea:99:4a:
                    2e:ec:6c:4f:2a:e6:9d:c8:16:a8:9a:1a:43:cc:53:
                    4f:f8:b2:3c:2a:aa:df:7b:1e:66:c9:56:72:ca:3d:
                    a5:6e:25:e2:b4:b1:32:25:99:33:63:bb:98:7d:95:
                    63:67:e0:0d:50:6b:70:77:1d:1c:bd:51:8c:71:d8:
                    1f:02:56:b3:bd:93:b3:80:fb:bd:82:4a:56:42:eb:
                    91:ed:9e:bf:90:9b:af:b0:eb:c1:1c:8a:e2:66:80:
                    11:19:08:07:9b:dd:dd:a3:09:d3:ba:ca:cb:5c:a6:
                    b9:dc:62:bf:3d:d8:3d:f8:85:f8:8a:54:d0:f7:1c:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:44:92:5E:2C:59:9F:85:5E:E1:3A:34:F8:DF:6D:3E:7B:56:F3:4E
            X509v3 Authority Key Identifier:
                keyid:68:E3:F0:C7:BE:4F:A0:17:52:4C:E2:24:4E:4A:A8:36:34:46:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E3F0C7BE4FA017524CE2244E4AA8363446FD0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:88:05:2d:15:95:41:ed:9e:c6:73:88:4f:b7:2d:be:d4:28:
         e5:76:11:15:e8:6b:22:2f:65:07:73:d3:74:5a:ab:b4:35:54:
         00:39:5e:6c:47:f8:94:d3:b5:04:55:f6:d2:72:97:9a:65:c4:
         37:12:50:da:0d:42:21:54:f0:13:5e:b3:20:c5:56:61:f1:79:
         75:0d:3c:50:5b:f9:0d:1a:c5:0f:68:20:de:2f:50:60:fd:0d:
         17:2a:90:03:08:c5:98:e4:03:9f:42:19:9a:63:dc:9c:a1:f1:
         1c:c4:eb:1a:19:bf:3d:04:53:9c:3a:fa:55:9c:71:58:7e:66:
         97:5c:31:30:f6:cd:57:05:70:36:d3:ad:69:8e:80:c5:84:45:
         53:2d:bf:64:be:72:05:7e:6c:1c:66:f3:ad:cd:ac:6d:ef:16:
         9b:31:be:3f:27:27:49:78:84:ce:c2:23:0a:30:68:53:21:aa:
         75:00:1e:10:3a:fb:e7:d4:38:9a:dc:91:50:de:db:17:26:08:
         8d:ec:fb:5b:b0:02:15:a8:3b:33:24:a1:0b:94:76:6a:1f:20:
         1c:a1:25:c6:42:95:a2:c5:96:35:41:bf:0d:c0:42:0a:93:49:
         d0:a4:bb:d4:28:03:d2:37:07:17:3c:ac:e7:a3:92:be:c8:e9:
         d7:2f:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:14 2024 by rpki-client on console-fra.rpki-client.org