Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32332d3233203d3e20323632343337.roa
File:                     3230312e3137352e34382e302f32332d3233203d3e20323632343337.roa (raw, json)
Hash identifier:          echmQqtqolHpbT5Aia4BUR7QwE7tA/iSSU6A11S32nI=
Subject key identifier:   48:D8:88:F4:61:24:42:F1:4C:12:F9:B1:CE:0A:89:0C:7E:A3:7F:47
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       42DA0D413EEA0FB70783ABC2AFFFE694D1DE03B5
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32332d3233203d3e20323632343337.roa
Signing time:             Wed 24 Apr 2024 13:03:41 +0000
ROA not before:           Wed 24 Apr 2024 12:58:41 +0000
ROA not after:            Wed 23 Apr 2025 13:03:41 +0000
asID:                     262437
IP address blocks:        201.175.48.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 May 2024 11:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:0d:41:3e:ea:0f:b7:07:83:ab:c2:af:ff:e6:94:d1:de:03:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: Apr 24 12:58:41 2024 GMT
            Not After : Apr 23 13:03:41 2025 GMT
        Subject: CN=48D888F4612442F14C12F9B1CE0A890C7EA37F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:31:09:cb:24:fa:be:fd:eb:25:10:3b:51:
                    71:5d:78:5b:56:3c:33:bb:0a:a0:02:34:54:20:00:
                    83:95:42:c1:81:8e:16:1e:fd:cd:9f:66:da:2c:59:
                    b3:48:07:c4:c4:ef:f7:8e:14:1c:64:60:43:a6:f0:
                    ad:53:fb:6e:5c:1f:cc:27:58:5e:88:1c:03:58:2e:
                    e9:d9:2e:46:a2:a5:a5:f0:24:7c:2b:00:1a:d6:90:
                    3a:56:87:6e:f7:89:5c:3b:51:ea:fa:cc:95:da:3f:
                    4f:b2:f2:ea:2c:3f:6e:63:a3:85:41:3c:2b:27:47:
                    1a:24:cd:b9:5c:c0:6b:c3:90:12:34:c5:84:d4:74:
                    78:5e:ee:c2:5f:c5:bd:05:e7:fc:9e:d0:33:6e:ce:
                    7d:38:b6:f5:4b:90:8d:82:3d:09:da:da:a4:4f:a6:
                    62:2c:4f:05:50:0a:bb:89:37:0f:d7:d9:5b:ca:c7:
                    c1:1e:f7:c4:ab:65:e9:8b:d5:b7:b6:6b:b1:b1:21:
                    90:a0:1a:5c:80:7e:f2:de:aa:a4:d7:07:40:b3:41:
                    70:a3:75:5d:69:53:c2:d1:5b:e7:40:6b:8e:b3:da:
                    1f:03:40:df:ca:bb:58:1c:f5:d9:bc:f3:41:31:56:
                    9b:d2:5d:a2:c1:24:5a:cd:50:26:38:68:30:82:57:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:88:F4:61:24:42:F1:4C:12:F9:B1:CE:0A:89:0C:7E:A3:7F:47
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32332d3233203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:d7:97:4d:42:a3:14:a6:1b:ab:df:7f:94:0c:59:45:cb:
         07:84:ab:77:2a:73:70:f9:36:7a:28:b1:95:83:7c:33:5a:77:
         f2:56:cd:c5:65:d4:04:67:9e:78:80:0b:cd:4f:be:3b:e8:06:
         f2:5f:3d:74:bb:a1:12:e0:f0:9a:90:83:f3:0c:37:fa:cf:e3:
         69:f7:b5:29:93:42:10:39:b1:b4:84:ad:db:ba:91:56:cc:8f:
         a4:ca:71:8c:83:0b:40:10:23:eb:b8:cb:4b:ca:96:5d:a4:68:
         3a:cc:8d:ca:e8:53:a8:5a:07:48:09:13:1b:cd:7f:fd:f6:07:
         2a:4b:4b:6d:f5:c1:56:41:a8:a6:45:d7:74:bb:3c:14:26:c3:
         8f:ed:ca:25:48:d2:37:8b:b2:a0:2e:3d:ae:18:fe:97:e6:56:
         e9:83:ec:f2:00:70:1b:59:ed:a3:9e:60:d2:0a:ca:99:60:12:
         d3:60:f0:27:06:49:ad:ed:ba:54:e6:1f:f5:9c:16:3e:70:fe:
         38:ed:fe:fa:65:cb:ae:1e:7d:02:2b:04:23:0f:59:e2:00:c0:
         25:f6:8c:4a:fa:ee:31:8e:9d:4e:d6:03:16:b5:fd:f1:d9:c9:
         2f:b3:81:c9:c8:47:b7:a9:63:0e:26:8e:d9:e0:cb:03:09:2a:
         ed:c4:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org