Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35302e302f32332d3233203d3e203238323034.roa
File:                     3138392e39312e35302e302f32332d3233203d3e203238323034.roa (raw, json)
Hash identifier:          TsYSWAVRCLAzcqysUuEIZo1ml41Q4W1Uh8w7pFK1HGk=
Subject key identifier:   C4:9E:41:1A:F8:E2:C8:4B:AA:D8:27:00:B3:D4:BC:88:3E:8B:18:9E
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       039BDFA4A5DB05B49E422FC59CEFA7BDFB58E1B6
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35302e302f32332d3233203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:23 +0000
ROA not before:           Wed 24 Apr 2024 14:32:23 +0000
ROA not after:            Wed 23 Apr 2025 14:37:23 +0000
asID:                     28204
IP address blocks:        189.91.50.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9b:df:a4:a5:db:05:b4:9e:42:2f:c5:9c:ef:a7:bd:fb:58:e1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:23 2024 GMT
            Not After : Apr 23 14:37:23 2025 GMT
        Subject: CN=C49E411AF8E2C84BAAD82700B3D4BC883E8B189E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:e6:44:87:9b:2b:de:1d:ef:ce:8e:67:0e:
                    b2:d6:6b:15:27:3b:1c:16:bb:9e:83:43:dc:c5:8a:
                    c1:ea:7a:75:e7:da:78:19:df:36:96:54:56:bc:35:
                    be:a6:dc:ad:d1:89:6d:a9:c6:dd:ce:f0:47:6b:ea:
                    03:6a:a2:35:9c:72:07:f3:6a:36:03:ef:ff:e5:3a:
                    3a:a6:ec:f9:54:4c:24:0d:07:4a:50:fd:1f:c2:74:
                    99:c5:e4:c1:cd:52:7a:eb:2c:52:de:03:bd:d9:b8:
                    2b:54:9b:d6:c4:71:b7:12:69:7b:48:e9:64:87:06:
                    a5:b7:cf:8e:05:b5:5b:2e:03:d7:49:d7:ff:3b:4e:
                    e7:2f:5b:02:2c:3c:f5:24:2b:c9:31:72:eb:f3:37:
                    4a:64:b9:e2:b8:22:0d:f3:60:86:1d:42:23:72:e0:
                    2b:e7:e6:10:4c:ff:16:c6:fe:04:42:b8:37:36:4e:
                    95:66:a5:12:7b:44:9d:ac:f7:c7:92:0b:80:b8:34:
                    65:d2:12:39:c4:c1:43:46:39:78:da:52:bc:56:a6:
                    38:24:17:7e:fb:f9:e9:2c:7f:70:3b:7e:4d:fd:61:
                    70:c1:95:2f:cc:2d:b8:67:e9:e8:e7:36:4d:e0:ba:
                    0a:f5:ac:e2:12:d3:d9:4f:d3:aa:49:a2:de:98:80:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:41:1A:F8:E2:C8:4B:AA:D8:27:00:B3:D4:BC:88:3E:8B:18:9E
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35302e302f32332d3233203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:13:6e:7a:2c:b5:b2:11:01:1b:59:1f:43:64:c2:0a:3e:73:
         2d:fd:81:9c:0b:91:98:90:e0:e5:be:c6:eb:e6:48:1d:0e:c9:
         24:fa:eb:d5:da:c8:6a:77:5f:e1:38:50:cb:60:04:de:e0:4d:
         c4:eb:d2:a9:25:6e:35:30:b6:e0:49:75:91:9a:60:12:4a:c4:
         ff:ee:88:ce:ad:a7:4d:13:a7:c8:13:a3:f1:72:ac:a2:30:2a:
         b1:5e:88:8f:98:c8:7b:40:ec:43:61:9c:01:bb:8b:88:4f:5f:
         e7:cb:e6:76:e6:f7:a0:ea:20:1b:1a:71:ef:da:ff:95:4a:5f:
         aa:9f:d9:a3:6f:88:f0:d3:1d:d1:92:c2:47:fc:df:f5:f4:b3:
         4c:16:13:dc:76:55:24:f6:5a:74:69:b0:b1:f9:9e:87:74:47:
         1c:85:df:35:b2:09:e9:61:62:c2:4e:86:c8:61:86:e7:da:c6:
         e0:b5:e3:03:e7:ff:d9:d9:bc:06:98:d6:10:09:c0:a3:77:f4:
         8b:db:a7:52:54:42:b9:2b:95:6d:74:7e:57:43:83:5d:c1:b3:
         2f:11:1f:3b:73:1c:2f:d4:c2:e8:cf:b3:b8:fd:d8:74:02:f8:
         0f:fd:0b:2e:78:3f:74:bb:33:03:bc:43:1d:a9:ef:7e:21:4b:
         14:ce:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org