Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136392e302f32342d3234203d3e20323635343336.roa
File:                     3136382e3139352e3136392e302f32342d3234203d3e20323635343336.roa (raw, json)
Hash identifier:          rK/MwXMlkK29mMmUMwptNVPjj4q1ffJ2Uxil1Kj4w7g=
Subject key identifier:   F4:01:25:56:04:18:95:3D:46:65:44:3F:41:DB:A0:D5:D0:2F:36:96
Certificate issuer:       /CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
Certificate serial:       03FF249DC440EDDDF894DE8529F834867853F578
Authority key identifier: FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136392e302f32342d3234203d3e20323635343336.roa
Signing time:             Wed 24 Apr 2024 17:06:38 +0000
ROA not before:           Wed 24 Apr 2024 17:01:38 +0000
ROA not after:            Wed 23 Apr 2025 17:06:38 +0000
asID:                     265436
IP address blocks:        168.195.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ff:24:9d:c4:40:ed:dd:f8:94:de:85:29:f8:34:86:78:53:f5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1
        Validity
            Not Before: Apr 24 17:01:38 2024 GMT
            Not After : Apr 23 17:06:38 2025 GMT
        Subject: CN=F40125560418953D4665443F41DBA0D5D02F3696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:24:4c:b4:d0:0e:c4:8c:94:8a:32:b4:b1:
                    5d:67:f7:9b:92:0b:69:00:f1:ab:0c:d7:73:76:64:
                    ee:93:2f:00:17:da:3f:e6:ab:3e:a2:eb:8e:00:03:
                    8b:fb:f6:c2:9e:3e:99:e6:e6:ed:40:9f:6f:33:30:
                    52:73:64:55:99:57:19:71:98:1e:8a:71:fd:36:0c:
                    29:e1:78:03:b2:11:f6:74:3b:bb:09:fe:78:50:0e:
                    02:e7:7c:dd:c9:6f:35:08:6b:b0:11:27:a7:b9:45:
                    e7:2d:04:e7:e8:f6:6f:69:41:0e:86:fb:6e:e8:d5:
                    6c:2c:16:56:94:e3:70:80:0e:a7:ed:31:ab:f1:8f:
                    6f:74:9e:e3:8f:b6:3a:72:e8:54:f0:bf:b4:8b:dd:
                    ea:bb:bc:6d:5d:ba:ef:b2:45:b1:0e:d0:3a:72:33:
                    23:9f:c0:36:08:13:51:23:5b:a0:51:7c:7b:7d:98:
                    aa:74:b9:a0:c1:0c:b3:de:f8:b2:65:f8:47:b0:47:
                    cb:20:be:ed:4b:af:18:7c:52:6f:e0:fc:48:0f:6f:
                    4a:f0:6d:58:f5:9b:19:4f:7a:72:a5:61:47:66:30:
                    40:1d:67:23:f5:3f:3b:82:51:f0:01:cc:3b:51:69:
                    11:64:3a:0b:ea:aa:c4:da:a0:cf:7a:bb:10:58:fe:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:25:56:04:18:95:3D:46:65:44:3F:41:DB:A0:D5:D0:2F:36:96
            X509v3 Authority Key Identifier:
                keyid:FD:54:29:BB:B0:2D:EE:8B:BE:7F:C6:76:6B:6E:0B:74:BC:85:98:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD5429BBB02DEE8BBE7FC6766B6E0B74BC8598E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3agYkJFt3urZpmDfPBDLouoRVDUyhoDhTH8jwu3Pz493/0/3136382e3139352e3136392e302f32342d3234203d3e20323635343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:c0:28:9f:5d:0b:35:14:cb:ff:84:b8:4f:9c:61:f7:55:
         fe:2d:fc:ba:28:5c:c8:9a:34:2f:9b:23:eb:60:a2:cd:4b:99:
         a2:42:7d:56:b9:92:7c:9b:f7:4f:9f:e2:65:24:98:1b:69:f4:
         d9:4b:e8:81:7b:65:85:05:0f:be:bb:ed:97:4a:84:7d:f2:89:
         7e:58:b1:44:51:95:f2:97:59:23:82:51:3b:01:f7:8e:b5:bd:
         c4:9f:54:a2:ca:69:3b:68:ab:13:b4:be:8f:6b:22:06:15:35:
         cc:9d:8b:9a:fa:57:cd:a5:ab:0d:4a:4b:7e:d5:b6:10:ca:48:
         78:b2:7a:d3:f0:e4:ca:a5:4b:60:79:07:73:fa:3b:3c:2d:52:
         8a:3b:bc:37:99:3b:6d:31:36:89:c6:f2:89:3d:53:e9:43:f8:
         c7:38:5e:9d:aa:f6:b1:c2:40:03:94:86:e1:09:b9:5d:8c:1a:
         83:f5:14:de:58:81:17:ac:a1:4d:7c:32:58:25:6f:50:0a:5f:
         e9:b1:3f:31:93:c3:a7:e2:41:54:50:7c:1e:a8:a3:a3:a5:96:
         75:98:ea:e8:29:90:76:07:85:29:6d:53:03:91:e9:6c:4c:9c:
         01:dd:33:3a:8c:e6:ca:ea:0a:9c:32:8d:5a:66:e2:a6:7f:e3:
         36:bc:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org