Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32332d3233203d3e20323632373931.roa
File:                     3136382e302e3130382e302f32332d3233203d3e20323632373931.roa (raw, json)
Hash identifier:          sxIsx2Z7sj5iP+S4v+yopc1tBCQL51iNSVSv/UPasEc=
Subject key identifier:   6E:75:B9:99:FE:00:61:B8:55:2A:5F:CB:47:30:77:CC:D6:BA:69:6E
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       54B9867868DC4C66D83AACC37B8F0A53FDE2E6E5
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32332d3233203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:22 +0000
ROA not before:           Wed 24 Apr 2024 17:26:22 +0000
ROA not after:            Wed 23 Apr 2025 17:31:22 +0000
asID:                     262791
IP address blocks:        168.0.108.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b9:86:78:68:dc:4c:66:d8:3a:ac:c3:7b:8f:0a:53:fd:e2:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:22 2024 GMT
            Not After : Apr 23 17:31:22 2025 GMT
        Subject: CN=6E75B999FE0061B8552A5FCB473077CCD6BA696E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:5d:4e:04:bf:09:ad:ff:25:75:bb:db:aa:
                    7a:f8:de:6d:40:4c:14:c2:cd:ee:e5:e3:31:6f:0a:
                    71:1d:8c:d3:5b:5c:55:17:2b:ab:df:83:a6:9d:b0:
                    f4:79:d7:6a:d5:dd:89:b1:fc:8b:74:5e:f3:9b:42:
                    08:cb:8b:4d:40:ea:08:a2:08:83:0f:a9:d9:0c:9a:
                    bd:ac:1d:e7:56:ee:65:41:19:b1:bf:67:da:d1:9c:
                    c5:7c:79:86:b0:d7:db:e4:59:23:70:f0:4a:3b:58:
                    df:d5:60:7a:fe:29:36:24:03:30:47:4b:5d:e0:24:
                    c2:6b:04:fb:f3:ff:3d:3e:e3:39:df:8a:c5:4d:de:
                    39:0e:5b:04:4f:e4:28:59:39:67:2d:8f:11:84:11:
                    52:b0:44:38:19:bd:b3:f8:b5:36:5e:1f:f9:27:f2:
                    3a:e5:b0:79:4e:88:25:ea:dd:3d:05:9a:76:a1:4b:
                    af:c8:7d:32:8e:af:20:38:5f:a0:c6:db:25:7f:a8:
                    56:9d:28:bc:5d:d0:db:1c:8c:4b:a3:b2:93:23:6d:
                    59:83:91:0e:9e:34:38:fa:11:b4:7a:08:fe:7e:d3:
                    74:ad:e0:bc:d5:eb:8a:02:22:3b:f9:bf:24:28:a2:
                    a1:14:07:cd:f6:2a:fb:d0:da:0d:0f:72:80:91:49:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:75:B9:99:FE:00:61:B8:55:2A:5F:CB:47:30:77:CC:D6:BA:69:6E
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32332d3233203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:80:ed:c6:c8:66:ce:56:97:6f:be:85:a1:2a:1d:33:90:
         78:84:94:66:54:a5:df:f7:cc:88:0f:c9:4a:49:c6:1a:d8:f1:
         50:85:1c:3b:87:7a:9c:2a:04:fc:1f:0d:e6:4e:0a:bd:34:f3:
         1c:52:d7:16:38:09:b9:8f:b8:3a:d6:ee:96:4d:6d:32:fa:0b:
         c6:95:2c:82:9b:4a:ae:31:25:aa:f0:8f:d5:fc:57:62:b1:42:
         12:80:d4:48:df:3c:93:dc:a4:70:37:56:51:e0:1f:34:4d:4e:
         48:e0:7b:06:34:08:9a:12:31:9c:69:2b:7d:8e:51:41:82:f1:
         1f:f7:ff:14:92:62:2b:78:b8:ff:69:ac:51:cf:0c:b1:a7:45:
         06:48:4a:f1:c5:ed:27:bc:1a:ad:c6:a6:2e:fa:56:57:3a:8f:
         d9:27:4e:cd:73:d8:d5:98:14:bd:26:00:40:c5:ec:13:bb:5d:
         32:ec:d4:ea:3d:a2:eb:a9:b3:8d:30:4c:4c:72:55:7c:4b:8e:
         bb:e8:0c:2d:4a:22:a2:37:80:f6:2e:15:01:48:2b:f9:93:0a:
         cb:9c:75:93:1b:51:77:fe:bb:c9:2c:51:d0:11:2c:84:66:f6:
         4c:f6:38:ca:9c:fe:d0:bf:1b:cb:b7:7f:fc:8e:1e:fd:26:22:
         08:d6:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org