Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35382e302f32342d3234203d3e203238323034.roa
File:                     3138392e39312e35382e302f32342d3234203d3e203238323034.roa (raw, json)
Hash identifier:          JtUjVrHTaT4JhzHatOqsMQS5QINjkFiijXWuzpyd8fA=
Subject key identifier:   19:5F:6B:3C:BB:CB:EC:EF:B6:BB:4E:BB:1A:51:30:53:6A:C5:33:F4
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       4C70E45AECB4ADBAE95C0B42553BFA235C05EBC7
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35382e302f32342d3234203d3e203238323034.roa
Signing time:             Wed 24 Apr 2024 14:37:57 +0000
ROA not before:           Wed 24 Apr 2024 14:32:57 +0000
ROA not after:            Wed 23 Apr 2025 14:37:57 +0000
asID:                     28204
IP address blocks:        189.91.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:70:e4:5a:ec:b4:ad:ba:e9:5c:0b:42:55:3b:fa:23:5c:05:eb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Apr 24 14:32:57 2024 GMT
            Not After : Apr 23 14:37:57 2025 GMT
        Subject: CN=195F6B3CBBCBECEFB6BB4EBB1A5130536AC533F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:63:18:e8:a8:d8:33:d7:af:df:6a:9c:37:
                    fc:9f:b8:00:cd:dd:df:17:e2:fc:aa:2e:a3:0d:c4:
                    53:c3:68:50:9e:b0:5b:99:dd:c2:82:2e:5a:fc:41:
                    74:2a:7e:21:b9:02:91:97:70:89:50:ae:b9:7d:78:
                    92:3e:bf:22:df:92:5f:b1:0f:d4:50:ff:94:da:fc:
                    2b:03:bb:9e:52:82:f0:36:ce:7d:24:08:b8:85:dd:
                    33:f2:c9:06:c8:1e:bb:1c:a8:51:0e:2d:23:8b:2d:
                    79:26:26:54:5b:1f:4d:65:e1:1a:b3:c8:d8:d7:1e:
                    a3:b7:69:88:b8:49:8c:ba:8c:9d:9f:d4:ee:55:12:
                    7e:84:e0:d2:40:5b:ce:45:77:f9:51:e0:32:d9:ac:
                    78:2a:11:c0:0b:32:5c:61:22:df:04:17:e2:0b:30:
                    71:e0:5c:b9:16:ac:56:2a:7d:0f:17:a8:0e:77:d8:
                    94:25:2f:9b:95:42:00:b9:5e:d2:b1:10:00:02:b4:
                    a0:25:ce:ed:55:ee:25:ca:6c:b8:d4:27:65:a2:58:
                    37:58:af:72:ab:7b:8a:33:2f:76:9f:9b:9f:7b:ec:
                    b8:4b:12:79:fd:97:95:3b:28:52:97:b8:79:e3:34:
                    7b:84:39:ae:6d:0d:81:de:e5:ca:86:78:9d:f6:28:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:6B:3C:BB:CB:EC:EF:B6:BB:4E:BB:1A:51:30:53:6A:C5:33:F4
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/3138392e39312e35382e302f32342d3234203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:f3:e7:31:6b:6c:82:29:55:f7:b3:99:ad:06:fa:45:d2:
         9b:62:75:14:e2:9d:de:03:41:36:44:00:05:ea:5e:dd:32:16:
         71:cb:82:94:96:2d:8e:1c:30:6f:f4:ad:fe:b7:b4:42:de:e2:
         4e:bc:12:3f:52:ca:cb:be:47:47:6d:84:1c:a2:48:fa:0e:0f:
         eb:bb:44:5b:cf:54:00:a0:c8:3f:7c:aa:00:53:92:ee:2d:8b:
         51:13:91:fa:16:e1:24:6c:86:fa:60:f5:08:13:e3:17:e0:2d:
         65:c5:39:20:4b:77:02:14:d8:30:17:07:51:6b:51:d7:30:fc:
         95:fc:5e:9e:47:88:ea:81:30:4b:60:2c:4d:41:3b:5c:47:d8:
         f7:7c:9a:e9:c9:98:73:68:db:41:8f:d8:24:36:ea:a2:fb:21:
         d4:8b:16:96:9d:ac:a4:65:db:e8:a5:c4:9c:6a:ce:8b:83:f6:
         35:ae:69:67:60:cf:80:85:6f:8f:c7:85:6d:10:48:fb:c6:ad:
         da:88:c8:e5:cf:b1:03:59:da:1b:c3:47:ee:82:81:57:a6:85:
         1f:fe:93:52:ac:9d:03:58:7e:81:2c:2d:0f:c8:9f:88:f7:24:
         c6:16:b0:4f:69:83:ec:9a:d9:65:c7:e8:bd:56:8c:a8:40:2d:
         fc:7b:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org