Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa
File:                     3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa (raw, json)
Hash identifier:          dTGieT8gl3d5Pa7mvsh3EcfVXgqUqeL8462uUlFuo58=
Subject key identifier:   DA:3A:20:E6:D0:6E:3F:3E:9E:92:C8:7E:26:38:8C:F4:42:5E:DF:0F
Certificate issuer:       /CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
Certificate serial:       2F6C09180105619C628035BBF747CC4F33F563BC
Authority key identifier: F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa
Signing time:             Thu 04 Apr 2024 23:00:49 +0000
ROA not before:           Thu 04 Apr 2024 22:55:49 +0000
ROA not after:            Thu 03 Apr 2025 23:00:49 +0000
asID:                     270713
IP address blocks:        131.161.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 29 Jul 2024 15:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6c:09:18:01:05:61:9c:62:80:35:bb:f7:47:cc:4f:33:f5:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
        Validity
            Not Before: Apr  4 22:55:49 2024 GMT
            Not After : Apr  3 23:00:49 2025 GMT
        Subject: CN=DA3A20E6D06E3F3E9E92C87E26388CF4425EDF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:a9:73:db:09:19:63:4d:67:10:a0:0e:d4:
                    97:14:83:36:f3:56:ec:47:0d:e9:e3:69:b6:e3:f0:
                    e1:c8:b4:43:33:4d:ad:4a:53:d1:be:f1:a9:0b:95:
                    fc:84:d8:c9:04:5f:7c:d9:ef:33:69:53:13:68:d7:
                    07:64:7a:bc:16:89:0b:77:8f:be:ce:b8:23:6a:6f:
                    49:1e:fa:50:94:8a:a6:9d:35:3a:73:4b:a9:d9:81:
                    52:1a:ba:4d:83:18:af:6a:8f:7b:29:dc:7a:ae:24:
                    b2:f4:fd:60:93:e2:c2:25:2f:bc:8c:1a:6f:4f:e6:
                    24:3e:13:f1:5a:18:4a:7b:48:44:86:84:62:d4:cc:
                    f9:cf:82:05:ef:ab:af:0f:2c:7d:e0:d0:43:0b:72:
                    91:30:b0:f6:33:12:15:49:0d:4d:62:5e:c7:03:03:
                    5a:8b:35:c6:cc:76:94:42:ac:a2:89:31:a1:45:71:
                    3b:2f:05:0f:08:6f:6f:5f:bb:a1:5e:27:f0:57:e4:
                    57:23:f5:8a:cc:8a:ec:9a:69:a7:44:99:8d:56:dc:
                    b2:b5:5f:ad:ab:d6:80:ba:68:2a:28:41:e4:44:89:
                    28:45:b5:e3:e4:54:96:11:fd:b9:a4:62:3f:22:10:
                    66:31:0d:0d:b5:90:f7:ed:14:75:4e:54:2f:2c:57:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:20:E6:D0:6E:3F:3E:9E:92:C8:7E:26:38:8C:F4:42:5E:DF:0F
            X509v3 Authority Key Identifier:
                keyid:F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3234382e302f32342d3234203d3e20323730373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:2d:3b:4c:89:29:1b:42:b2:28:53:82:50:23:40:d3:19:94:
         cb:df:1d:13:93:55:0e:f1:f3:2d:c9:34:4f:4e:60:4f:1f:d9:
         6f:19:65:80:35:2d:1a:0a:3f:d9:47:e9:da:b1:9e:8b:44:63:
         62:f2:3f:5b:2a:3b:8d:dc:11:18:93:a6:9b:9d:fc:74:ac:90:
         9d:41:2b:54:5b:45:0c:a5:85:c6:ef:30:62:29:69:45:22:e0:
         f6:cd:9b:8f:fc:b9:b3:7f:80:4f:70:58:f2:62:94:11:f7:f5:
         aa:51:83:77:a2:c9:2a:0d:e4:6b:fe:d7:60:94:2c:19:3f:80:
         4a:18:db:c7:17:3c:d4:50:21:2f:ae:df:8b:23:d1:9f:75:52:
         de:bc:9a:15:22:0b:f1:ec:0c:13:db:48:56:f2:d7:73:97:5e:
         9b:79:87:8b:2b:5c:4b:7c:19:65:39:7e:ba:10:c8:a9:eb:2e:
         75:bf:03:cf:56:de:96:b8:71:1a:de:21:42:34:6f:74:be:8d:
         02:c7:b5:6d:8a:70:6a:91:9c:72:00:ca:5b:7e:00:9e:b0:e9:
         22:48:fa:b2:07:60:b1:13:3e:8f:08:e4:f8:3f:24:98:78:b4:
         54:20:d5:97:40:a5:c1:c1:b2:e4:d8:ca:da:3a:2d:51:69:66:
         95:9a:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:29:06 2024 by rpki-client on console-ams.rpki-client.org