Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3232203d3e20323635343336.roa
File:                     3136382e3139352e3136382e302f32322d3232203d3e20323635343336.roa (raw, json)
Hash identifier:          981Tse/3SQEQx2uRLVDdckyggieYBNmEgV+y/S55xek=
Subject key identifier:   EC:F4:BD:C5:DC:5F:1B:EF:14:C4:53:F3:1A:7F:CB:5A:52:7C:4E:0D
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       569B6B2A8859EDEE8089E15D70C564E78DA5DFD7
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3232203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:32 +0000
ROA not before:           Wed 24 Apr 2024 17:01:32 +0000
ROA not after:            Wed 23 Apr 2025 17:06:32 +0000
asID:                     265436
IP address blocks:        168.195.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:6b:2a:88:59:ed:ee:80:89:e1:5d:70:c5:64:e7:8d:a5:df:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:32 2024 GMT
            Not After : Apr 23 17:06:32 2025 GMT
        Subject: CN=ECF4BDC5DC5F1BEF14C453F31A7FCB5A527C4E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:17:50:bf:95:ee:e3:cb:40:95:95:2a:cb:
                    6a:b6:16:c0:15:95:67:37:b4:bb:0d:03:b4:91:35:
                    26:bd:48:1e:11:48:b3:dc:49:48:90:22:0b:4a:f2:
                    89:bb:f4:20:db:4f:52:04:90:ca:73:ce:83:67:d1:
                    15:f6:fa:f7:84:1c:24:40:75:9b:f0:8f:74:eb:2f:
                    c6:88:08:66:eb:35:c1:88:de:11:3e:20:49:ee:a7:
                    c1:59:53:77:bf:31:73:b5:51:5b:1c:a9:01:c2:a7:
                    28:62:8f:e6:04:08:91:0d:01:7b:0a:33:0a:a6:aa:
                    01:8b:9b:5d:a2:03:34:9b:8a:8d:1f:b3:a0:38:e3:
                    c4:6d:cd:9a:c8:cb:05:b6:17:62:27:b8:ea:a1:06:
                    d7:f1:49:97:3a:1f:83:bc:5c:ae:38:83:9e:e2:c3:
                    59:42:6e:37:11:ad:d0:26:5a:c4:d4:fb:08:8b:f6:
                    cc:2e:b4:2c:0c:18:09:0e:6e:ea:98:78:e5:f4:2b:
                    f3:40:ae:b1:a7:ca:c2:a6:2c:23:97:ed:1d:5c:34:
                    25:ba:98:f2:9d:32:d9:54:45:45:c3:c7:b0:3d:3d:
                    47:07:ef:92:b3:1f:17:8b:b4:9d:98:28:f5:9c:53:
                    8e:0c:60:63:fb:9c:5f:91:0c:fa:cf:f1:7c:d5:13:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F4:BD:C5:DC:5F:1B:EF:14:C4:53:F3:1A:7F:CB:5A:52:7C:4E:0D
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136382e302f32322d3232203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:40:e6:58:2e:7f:15:e6:67:aa:b1:7e:5f:26:0e:63:dd:57:
         c1:15:81:ff:70:5b:09:55:63:6a:cd:ea:7b:2a:f4:29:55:65:
         af:86:81:79:7c:59:f8:a8:6e:9e:f6:61:c3:c5:1c:4e:f6:23:
         fe:7a:cf:cf:56:87:dc:5e:3a:ea:2d:f9:54:6d:2e:a8:d7:a3:
         88:2f:f5:f9:7f:4e:c4:8e:38:23:d2:34:1d:58:50:a0:94:19:
         92:de:66:a2:f4:fa:b9:e4:e4:e9:0f:26:1f:eb:30:57:50:57:
         15:4f:2d:fb:1b:0a:1e:4b:30:a8:8f:29:ee:47:fc:4c:6e:5a:
         f9:98:e8:46:9c:1e:e4:4f:e2:0c:62:88:3c:55:4f:45:5f:c8:
         70:c1:4f:12:d1:1c:4e:8b:9d:4c:28:61:e5:5b:99:0d:8b:09:
         66:6b:04:2c:05:4b:85:68:84:a9:6a:9b:60:2c:07:3c:10:02:
         9c:e6:34:1a:3b:17:d1:fe:6b:c3:ec:bc:17:49:c7:be:11:26:
         24:e6:59:55:a9:93:43:a3:5d:ab:d3:2f:76:7e:1c:95:bb:a0:
         bb:34:b2:b5:b2:21:c9:c2:ec:ac:52:e5:dc:38:17:c8:cb:2e:
         b4:87:24:d4:a7:1f:9c:19:21:66:65:5f:ae:b4:d2:6a:97:af:
         f1:fc:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org