Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31302e302f32342d3234203d3e20323634393030.roa
File:                     3136382e3232382e31302e302f32342d3234203d3e20323634393030.roa (raw, json)
Hash identifier:          jdL5Skn+KAjaURp1C66Ivda639Px/b1X3s4uNT/RmFw=
Subject key identifier:   04:EE:FE:A1:77:FD:64:5B:98:82:AE:2B:4A:01:A6:04:87:23:D8:DD
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       72F35FD01B32BF67BE3219F7AE1A786506DBDA38
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31302e302f32342d3234203d3e20323634393030.roa
Signing time:             Thu 18 Apr 2024 13:12:18 +0000
ROA not before:           Thu 18 Apr 2024 13:07:18 +0000
ROA not after:            Thu 17 Apr 2025 13:12:18 +0000
asID:                     264900
IP address blocks:        168.228.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:5f:d0:1b:32:bf:67:be:32:19:f7:ae:1a:78:65:06:db:da:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: Apr 18 13:07:18 2024 GMT
            Not After : Apr 17 13:12:18 2025 GMT
        Subject: CN=04EEFEA177FD645B9882AE2B4A01A6048723D8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:b0:49:b2:f3:47:d0:1a:7c:d4:05:59:76:
                    31:b8:f7:a9:ad:e5:46:2c:34:88:c7:89:41:01:93:
                    c1:e4:33:31:d3:0d:12:b1:da:77:41:9e:62:a7:1e:
                    57:2a:60:41:7c:31:b5:9c:0a:bf:71:57:56:3b:d1:
                    2a:5a:bf:9d:ab:60:30:f3:0b:95:b0:d1:9c:48:2c:
                    0d:0a:e5:8d:6f:2f:0b:f0:32:24:54:b4:d9:4e:be:
                    46:29:57:87:8d:8e:d8:52:41:76:62:09:87:7e:10:
                    15:1b:ab:f9:16:a5:42:fd:a8:be:a5:24:53:ce:d2:
                    f9:e8:21:b8:59:c8:cf:82:8c:96:32:67:8a:2e:bf:
                    50:c7:5d:91:26:09:d0:61:be:87:ad:0c:c0:0c:a0:
                    d9:29:a3:5e:41:84:f8:28:b3:8a:03:6f:3c:46:6d:
                    f2:29:c0:90:15:2b:9c:3a:02:8b:9f:19:d1:3b:eb:
                    5f:95:ee:9f:1b:3e:1e:a5:ab:cf:7f:8a:4a:7e:86:
                    a2:1b:b8:33:59:07:8f:9b:10:64:a2:eb:2c:de:31:
                    ea:fd:64:01:d7:a3:bf:6d:87:7b:b0:35:ae:3e:4b:
                    b6:8d:36:35:14:02:2e:44:1c:ad:24:11:2e:d4:df:
                    38:88:f1:a8:39:a7:80:89:a3:2e:3a:28:bd:a1:38:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:FE:A1:77:FD:64:5B:98:82:AE:2B:4A:01:A6:04:87:23:D8:DD
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e31302e302f32342d3234203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:bd:ef:9d:b0:1e:8a:ab:5d:d0:f7:3c:b7:96:a5:a5:ce:
         c4:6c:f3:80:06:88:14:44:44:38:88:45:18:c6:eb:9b:01:82:
         f3:14:e8:70:f5:29:0c:76:1f:d7:82:8f:d3:6b:ed:3e:55:21:
         45:85:e2:3a:9a:05:f8:eb:da:c7:bd:fc:d9:b2:bb:07:88:2e:
         bf:1b:8b:d6:7b:6a:9e:2f:38:e8:5e:0b:b4:b4:14:94:53:7f:
         56:f4:3a:fe:2f:ed:bf:e8:ee:ea:38:dd:47:18:28:6f:a9:34:
         be:89:fe:b9:41:f0:5a:90:0b:7f:8e:9a:8c:88:6f:2a:f8:01:
         94:98:02:fb:45:4c:2d:ed:27:97:9a:99:8c:44:60:3f:be:79:
         e4:b7:d5:2b:46:0b:fa:62:7d:2b:2a:2e:c4:cc:74:f9:fa:b7:
         d6:80:98:67:0d:b8:7d:cd:f9:8e:78:bc:b1:c6:76:56:74:d0:
         aa:d1:3e:fc:82:a5:bd:da:17:4c:44:cf:ed:09:5f:da:5e:81:
         c0:66:3d:b8:ed:df:23:3f:6b:d6:45:a5:06:c7:11:34:8e:d1:
         ee:7c:9c:31:6e:02:0d:e2:e9:ae:36:4d:2e:7a:b4:20:90:94:
         1a:ad:e7:8a:a0:a0:15:ff:9d:85:a0:18:3b:e8:45:07:c6:07:
         42:ab:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org