Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130392e302f32342d3234203d3e20323632373931.roa
File:                     3136382e302e3130392e302f32342d3234203d3e20323632373931.roa (raw, json)
Hash identifier:          ASxTe9j7LEy+WgDu+omLE8TZ/tEh2mr5Hs4UppX0Ag8=
Subject key identifier:   50:D3:83:F8:50:52:5C:63:D7:16:7C:F9:D8:82:10:D2:57:5D:E0:AB
Certificate issuer:       /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
Certificate serial:       35E57BE96A3DCC61DA538685A1B52C3CD2C0C905
Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130392e302f32342d3234203d3e20323632373931.roa
Signing time:             Wed 24 Apr 2024 17:31:27 +0000
ROA not before:           Wed 24 Apr 2024 17:26:27 +0000
ROA not after:            Wed 23 Apr 2025 17:31:27 +0000
asID:                     262791
IP address blocks:        168.0.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:7b:e9:6a:3d:cc:61:da:53:86:85:a1:b5:2c:3c:d2:c0:c9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Validity
            Not Before: Apr 24 17:26:27 2024 GMT
            Not After : Apr 23 17:31:27 2025 GMT
        Subject: CN=50D383F850525C63D7167CF9D88210D2575DE0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:e8:2d:a3:28:26:04:26:58:77:39:46:0c:
                    89:b9:95:0d:94:f1:f7:8c:12:1a:6e:76:f8:87:2f:
                    43:51:2f:20:c0:12:19:1e:fc:e1:98:d4:3a:f4:c3:
                    51:9f:6a:47:69:9e:fe:46:d9:a3:4f:a9:b2:0a:dd:
                    b2:a1:a5:57:34:1d:dd:69:cf:12:fc:4b:cb:2a:73:
                    21:5c:7e:49:28:f2:68:ed:44:09:7a:49:ac:47:9b:
                    c9:63:03:52:9a:64:a1:8e:a2:b3:42:20:08:84:35:
                    73:1e:33:be:e3:02:d3:50:02:ba:9d:20:22:1b:73:
                    2a:6a:1c:1a:32:f1:d7:04:db:7d:d1:fe:5e:ab:2e:
                    b0:46:e9:c2:6b:1a:97:8c:73:10:81:87:2b:61:38:
                    85:c4:d6:a1:72:1c:17:cd:78:5a:eb:5e:5c:de:80:
                    80:d6:fb:89:91:89:95:cd:1c:b8:d0:b5:8d:f9:de:
                    63:f5:67:08:7e:2e:14:ae:bd:29:af:fe:c4:a8:a9:
                    d6:f5:6a:12:c1:b4:11:b7:5d:35:a3:2e:fe:48:dc:
                    8f:92:89:f7:88:4c:e9:ea:dc:62:36:ad:32:ca:ea:
                    fa:a0:22:96:63:d0:61:29:e5:84:38:6c:10:bc:6f:
                    25:c2:81:7a:9c:7b:a1:26:be:45:b7:d1:9b:05:11:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:83:F8:50:52:5C:63:D7:16:7C:F9:D8:82:10:D2:57:5D:E0:AB
            X509v3 Authority Key Identifier:
                keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130392e302f32342d3234203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:bf:25:36:ff:f8:bd:74:c3:d8:19:55:e4:d7:66:9a:e5:
         24:99:0e:38:29:0f:4e:e1:bd:1a:89:f1:2d:33:98:10:ae:c6:
         1e:6f:88:c6:10:20:84:d3:66:e4:79:ec:b4:80:92:22:06:e3:
         9c:73:5d:1f:05:ab:52:42:d7:88:14:06:2a:1f:36:e5:3d:00:
         78:aa:03:94:cf:94:69:f0:78:66:12:f5:71:87:5a:45:b6:45:
         e0:8b:13:8e:ee:69:25:83:97:c3:f5:e0:93:5b:cf:04:8c:53:
         0c:b3:94:7c:4f:ce:bb:2a:b2:9d:51:22:a8:38:bd:e7:54:cc:
         67:06:cd:21:1a:73:be:c2:7b:6b:97:b0:ad:02:54:27:39:91:
         1f:50:44:fe:11:56:11:70:fa:5a:0d:e6:2d:1c:29:c0:90:53:
         28:4f:7c:1c:87:95:8c:e0:28:f4:3d:18:84:71:34:01:84:b4:
         c2:fc:00:dc:13:b7:02:1a:66:4c:34:8c:c2:cb:3f:d0:be:b5:
         5a:cd:50:16:5f:49:7a:67:66:3a:a0:89:57:37:e1:11:48:45:
         32:2e:36:3a:6c:02:61:a2:bb:6a:46:e2:6e:21:35:17:d5:14:
         bb:c1:fc:27:f6:07:c7:6d:6d:10:e1:68:b2:83:a1:64:ca:bb:
         2c:b6:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org