Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35372e302f32342d3234203d3e203238323034.roa
File:                     3138392e39312e35372e302f32342d3234203d3e203238323034.roa (raw, json)
Hash identifier:          CdnYg/ruC18zge5sVRs94+GP6f8DH/Xdmi9AqOmiEFU=
Subject key identifier:   55:81:91:28:9F:1A:5C:B3:AA:36:71:ED:59:C3:CB:34:3A:21:97:9E
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       2C05E94DC7D10508FBE0D9906864EA571426662B
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35372e302f32342d3234203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:52 +0000
ROA not before:           Wed 24 Apr 2024 14:32:52 +0000
ROA not after:            Wed 23 Apr 2025 14:37:52 +0000
asID:                     28204
IP address blocks:        189.91.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:05:e9:4d:c7:d1:05:08:fb:e0:d9:90:68:64:ea:57:14:26:66:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:52 2024 GMT
            Not After : Apr 23 14:37:52 2025 GMT
        Subject: CN=558191289F1A5CB3AA3671ED59C3CB343A21979E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5a:ce:67:bc:cb:a1:56:e1:ba:fc:62:4e:41:
                    9d:5f:25:b8:6b:01:de:1d:d1:91:7d:54:00:6c:a1:
                    67:5b:07:5c:2e:d6:a3:f1:97:61:e9:a5:7e:47:68:
                    4e:91:15:b1:d8:d6:36:c8:6e:5f:6a:60:d9:cc:3f:
                    3d:e4:40:a8:f1:22:a5:db:da:63:35:be:d1:fb:57:
                    4b:e9:66:b0:2a:54:0f:af:a5:9f:1f:81:7d:a6:e6:
                    fd:64:12:bb:b7:f6:ec:27:03:90:a9:b0:23:d1:22:
                    19:4c:17:aa:84:95:f1:42:5c:76:eb:e3:1b:45:99:
                    cc:1b:4a:e4:e0:78:56:26:04:ee:cf:7a:2a:1e:33:
                    7e:59:12:60:34:b9:a6:6a:6b:e8:f6:4d:0e:1d:58:
                    a7:c6:2f:81:f9:f9:e6:15:62:09:cb:68:75:19:fe:
                    66:9e:57:39:aa:0f:40:b0:47:df:36:e2:d7:ac:f6:
                    28:6e:ac:92:39:36:d4:47:47:de:6d:38:d3:fe:63:
                    07:04:7a:c6:21:a6:a8:09:b2:87:1b:a0:2c:41:e4:
                    e8:d5:a8:aa:e1:f1:2a:74:7b:ee:72:5e:63:e6:ad:
                    e1:cd:b1:7b:64:7e:e9:f9:46:19:34:f4:94:ee:46:
                    8a:3c:fe:29:e8:cb:c3:e7:8f:7c:33:88:b4:17:c2:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:91:28:9F:1A:5C:B3:AA:36:71:ED:59:C3:CB:34:3A:21:97:9E
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35372e302f32342d3234203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:f4:fb:40:17:a7:7e:a5:87:96:1b:17:c3:5b:73:a6:88:
         d0:83:22:84:96:f7:31:dc:5e:a9:28:17:69:6c:70:49:47:ba:
         ac:94:64:c8:c4:b8:47:1d:28:a4:e6:1b:02:96:f8:e7:f7:47:
         df:34:ed:18:94:5a:99:e0:6c:1f:d8:d0:e4:1c:e2:cf:9e:f1:
         12:4c:7b:15:92:99:7c:a5:1b:6e:8e:09:7b:7a:ad:aa:2b:1e:
         f2:59:62:fa:1e:13:f7:c9:5d:c6:1b:22:56:e3:94:86:b9:b2:
         24:7d:b5:69:f2:f8:9b:17:b8:f2:2d:46:8c:6c:11:10:fe:e1:
         18:a8:0a:44:c7:28:8d:fa:b1:09:65:8b:1b:af:44:39:e1:11:
         e4:c2:55:69:9f:74:f4:9a:c0:02:6d:a8:e2:fb:3b:55:fb:97:
         fc:d1:9a:4d:2a:e8:b3:be:a3:e5:7e:9d:fb:f6:da:6f:f5:32:
         ea:06:04:30:ae:61:a2:a3:22:4c:58:f3:85:4c:7f:92:8f:b6:
         45:85:93:f0:73:cd:1c:8e:68:2a:18:92:5a:f0:71:2b:d2:d2:
         ba:da:4d:31:8d:5e:33:75:d5:6f:35:45:33:a8:c8:63:6e:62:
         30:c6:3c:90:cc:4d:8f:f7:a1:44:36:2a:6b:9b:fb:b0:31:d3:
         1d:80:23:6c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULAXpTcfRBQj74NmQaGTqVxQmZiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD
NkFFMjlCRTAeFw0yNDA0MjQxNDMyNTJaFw0yNTA0MjMxNDM3NTJaMDMxMTAvBgNV
BAMTKDU1ODE5MTI4OUYxQTVDQjNBQTM2NzFFRDU5QzNDQjM0M0EyMTk3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4Ws5nvMuhVuG6/GJOQZ1fJbhr
Ad4d0ZF9VABsoWdbB1wu1qPxl2HppX5HaE6RFbHY1jbIbl9qYNnMPz3kQKjxIqXb
2mM1vtH7V0vpZrAqVA+vpZ8fgX2m5v1kEru39uwnA5CpsCPRIhlMF6qElfFCXHbr
4xtFmcwbSuTgeFYmBO7PeioeM35ZEmA0uaZqa+j2TQ4dWKfGL4H5+eYVYgnLaHUZ
/maeVzmqD0CwR9824tes9ihurJI5NtRHR95tONP+YwcEesYhpqgJsocboCxB5OjV
qKrh8Sp0e+5yXmPmreHNsXtkfun5Rhk09JTuRoo8/inoy8Pnj3wziLQXwqInAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUVYGRKJ8aXLOqNnHtWcPLNDohl54wHwYDVR0j
BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN
RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz
Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Q2tod3lUTkh3TEIxWUxuaU1mTU44dFJhazZUUUxZM2t0NkpwV0RQTUZoLzAv
MzEzODM5MmUzOTMxMmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1bOTANBgkqhkiG9w0BAQsFAAOCAQEACA/0+0AXp36l
h5YbF8Nbc6aI0IMihJb3MdxeqSgXaWxwSUe6rJRkyMS4Rx0opOYbApb45/dH3zTt
GJRameBsH9jQ5Bziz57xEkx7FZKZfKUbbo4Je3qtqise8lli+h4T98ldxhsiVuOU
hrmyJH21afL4mxe48i1GjGwREP7hGKgKRMcojfqxCWWLG69EOeER5MJVaZ909JrA
Am2o4vs7VfuX/NGaTSros76j5X6d+/bab/Uy6gYEMK5hoqMiTFjzhUx/ko+2RYWT
8HPNHI5oKhiSWvBxK9LSutpNMY1eM3XVbzVFM6jIY25iMMY8kMxNj/ehRDYqa5v7
sDHTHYAjbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org